Property | Type | Description | |
---|---|---|---|
ASGroup | int | ||
AddressSpaceID | int | ||
CR3Value | long | ||
CandidateList | List |
||
Diff | long | ||
FileOffset | long | ||
Group | int | ||
Mode | int | ||
PT | |||
PageTableType | PTType | ||
Sections | List |
||
TopPageTablePage | long>.Dictionary | ||
TrueOffset | long | ||
vmcs |
Property | Type | Description |
---|
Method | Description | |
---|---|---|
CompareTo ( object obj ) : int | ||
DetectedProc ( ) : ProtoBuf | ||
GetByteValue ( long VA ) : byte | ||
GetIntValue ( long VA ) : int | ||
GetLongValue ( long VA ) : long | ||
GetUIntValue ( long VA ) : uint | ||
GetULongValue ( long VA ) : ulong | ||
GetVirtualByte ( long VA ) : byte[] |
This is byte aligned
|
|
GetVirtualLong ( long VA ) : long[] | ||
GetVirtualLong ( long VA, bool &GotData ) : long[] |
GetVirtual get's at least 1 block sized byte aligned chunk of memory. The chunk may be up to 2Pages-1 in size since we always get the next page in case you need it...
|
|
GetVirtualULong ( ulong VA ) : long[] | ||
ToString ( ) : string | ||
VGetBlock ( long VA ) : byte[] |
BLOCK ALIGNED
|
|
VGetBlockLong ( long VA ) : long[] |
Block aligned
|
|
VGetBlockLong ( long VA, bool &GotData ) : long[] |
See all other PAGE ALIGNED
|
public GetVirtualLong ( long VA, bool &GotData ) : long[] | ||
VA | long | |
GotData | bool | Byte aligned chunk MIN (PageSize+8) MAX (PageSize*2-8) |
return | long[] |
public VGetBlockLong ( long VA, bool &GotData ) : long[] | ||
VA | long | |
GotData | bool | |
return | long[] |