HypercallCallerInfo

final class ntoseye.HypercallCallerInfo

Subclass of BaseRecord.

The virtual processor whose hypercall a processor halted in the Windows hypervisor handles (cpu.hypercall_caller()), found as !hvcall and a hypercall breakpoint’s filter find it: the call as the caller made it, and the caller’s memory, which a hypercall breakpoint’s condition reads.

property hypercall: DecodedHypercall | None

The call with its input decoded, as !hvcall shows it, or None when the caller’s registers are not known.

property partition_id: int

The caller’s partition ID (the root partition’s is 1).

property root: bool

Whether the caller is a VP of the root partition (Windows itself) rather than of a guest partition.

property vp_index: int

The caller’s VP index in its partition.

property vtl: int

The VTL that made the call.