Common.h

Go to the documentation of this file.

#pragma once

#define __CPU_INDEX__ KeGetCurrentProcessorNumberEx(NULL)

#define ALIGNMENT_PAGE_SIZE 4096

#define MAXIMUM_ADDRESS 0xffffffffffffffff

#define DPL_USER   3
#define DPL_SYSTEM 0

#define RPL_MASK 3
 
#define BITS_PER_LONG (sizeof(ULONG) * 8)
#define ORDER_LONG    (sizeof(ULONG) == 4 ? 5 : 6)
 
#define BITMAP_ENTRY(_nr, _bmap) ((_bmap))[(_nr) / BITS_PER_LONG]
#define BITMAP_SHIFT(_nr)        ((_nr) % BITS_PER_LONG)

#define PAGE_OFFSET(Va) ((PVOID)((ULONG_PTR)(Va) & (PAGE_SIZE - 1)))

#define _XBEGIN_STARTED  (~0u)
#define _XABORT_EXPLICIT (1 << 0)
#define _XABORT_RETRY    (1 << 1)
#define _XABORT_CONFLICT (1 << 2)
#define _XABORT_CAPACITY (1 << 3)
#define _XABORT_DEBUG    (1 << 4)
#define _XABORT_NESTED   (1 << 5)
 
#ifndef _XABORT_CODE
#    define _XABORT_CODE(x) (((x) >> 24) & 0xFF)
#endif // !_XABORT_CODE

//                   Structures                 //
 
typedef SEGMENT_DESCRIPTOR_32 * PSEGMENT_DESCRIPTOR;

typedef struct _CPUID
{
    INT eax;
    INT ebx;
    INT ecx;
    INT edx;
} CPUID, *PCPUID;
 
typedef union _CR_FIXED
{
    UINT64 Flags;
 
    struct
    {
        ULONG Low;
        LONG  High;
 
    } Fields;
 
} CR_FIXED, *PCR_FIXED;

//         Windows-specific structures          //

typedef struct _NT_KPROCESS
{
    DISPATCHER_HEADER Header;
    LIST_ENTRY        ProfileListHead;
    ULONG_PTR         DirectoryTableBase;
    UCHAR             Data[1];
} NT_KPROCESS, *PNT_KPROCESS;

//               Function Types                 //

typedef VOID (*RunOnLogicalCoreFunc)(ULONG ProcessorId);

//              External Functions              //
 
UCHAR *
PsGetProcessImageFileName(IN PEPROCESS Process);

//           Function Definitions               //
 
// ----------------------------------------------------------------------------
// Private Interfaces
//
 
static NTSTATUS
CommonGetHandleFromProcess(_In_ UINT32 ProcessId, _Out_ PHANDLE Handle);
 
// ----------------------------------------------------------------------------
// Public Interfaces
//
 
BOOLEAN
CommonAffinityBroadcastToProcessors(_In_ ULONG ProcessorNumber, _In_ RunOnLogicalCoreFunc Routine);
 
BOOLEAN
CommonIsStringStartsWith(const CHAR * pre, const CHAR * str);
 
BOOLEAN
CommonIsGuestOnUsermode32Bit();
 
PCHAR
CommonGetProcessNameFromProcessControlBlock(PEPROCESS eprocess);
 
VOID
CommonCpuidInstruction(UINT32 Func, UINT32 SubFunc, INT * CpuInfo);
 
VOID
CommonWriteDebugInformation(VIRTUAL_MACHINE_STATE * VCpu);
 
BOOLEAN
CommonIsXCr0Valid(XCR0 XCr0);