forked from Air14/HyperHide
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathPte.h
20 lines (20 loc) · 857 Bytes
/
Pte.h
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
#pragma once
union PTE {
unsigned __int64 All;
struct {
unsigned __int64 Read : 1; // bit 0
unsigned __int64 Write : 1; // bit 1
unsigned __int64 Execute : 1; // bit 2
unsigned __int64 EPTMemoryType : 3; // bit 5:3 (EPT Memory type)
unsigned __int64 IgnorePAT : 1; // bit 6
unsigned __int64 Ignored1 : 1; // bit 7
unsigned __int64 AccessedFlag : 1; // bit 8
unsigned __int64 DirtyFlag : 1; // bit 9
unsigned __int64 ExecuteForUserMode : 1; // bit 10
unsigned __int64 Ignored2 : 1; // bit 11
unsigned __int64 PhysicalAddress : 36; // bit (N-1):12 or Page-Frame-Number
unsigned __int64 Reserved : 4; // bit 51:N
unsigned __int64 Ignored3 : 11; // bit 62:52
unsigned __int64 SuppressVE : 1; // bit 63
}Fields;
};