One Hat Cyber Team
Your IP :
172.16.0.254
Server IP :
58.26.163.33
Server :
Windows NT DGPENSV2LPKMN 10.0 build 14393 (Windows Server 2016) AMD64
Server Software :
Apache/2.4.46 (Win64) OpenSSL/1.1.1h PHP/7.3.25
PHP Version :
7.3.25
Buat File
|
Buat Folder
Eksekusi
Dir :
C:
/
Windows
/
System32
/
Edit File:
hypervisor.mof
#pragma classflags("forceupdate") #pragma namespace ("\\\\.\\Root\\WMI") #pragma autorecover [Dynamic, Description("Hypervisor Trace") : amended, Guid("{52FC89F8-995E-434c-A91E-199986449890}") ] class HypervisorTrace:EventTrace { }; [Dynamic, Description("Hypervisor Trace Event") : amended, Guid("{7f2a405c-69b5-4bf9-a1f5-30e8f1afab5e}"), DisplayName("HvEvent") : amended ] class HvEvent:HypervisorTrace { }; [Dynamic, Description("Hypercall") : amended, EventType{0x1d1a}, EventTypeName{"Hypercall"} : amended ] class HvHypercall:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("Input Value") : amended, read] uint64 InputValue; }; [Dynamic, Description("Guest Exception") : amended, EventType{0x1d20}, EventTypeName{"GuestException"} : amended ] class HvGuestException:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("Type") : amended, read] uint64 Type; }; [Dynamic, Description("MSR Read") : amended, EventType{0x1d21}, EventTypeName{"MsrRead"} : amended ] class HvMsrRead:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("Index") : amended, read] uint64 Index; [WmiDataId(3), Description("Value") : amended, read] uint64 Value; }; [Dynamic, Description("MSR Write") : amended, EventType{0x1d22}, EventTypeName{"MsrWrite"} : amended ] class HvMsrWrite:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("Index") : amended, read] uint64 Index; [WmiDataId(3), Description("Value") : amended, read] uint64 Value; }; [Dynamic, Description("Control Register Read") : amended, EventType{0x1d23}, EventTypeName{"CrRead"} : amended ] class HvCrRead:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("Index") : amended, read] uint64 Index; [WmiDataId(3), Description("Value") : amended, read] uint64 Value; }; [Dynamic, Description("Control Register Write") : amended, EventType{0x1d24}, EventTypeName{"CrWrite"} : amended ] class HvCrWrite:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("Index") : amended, read] uint64 Index; [WmiDataId(3), Description("Value") : amended, read] uint64 Value; }; [Dynamic, Description("HLT Instruction") : amended, EventType{0x1d25}, EventTypeName{"HltInstruction"} : amended ] class HvHltInstruction:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; }; [Dynamic, Description("MWAIT Instruction") : amended, EventType{0x1d26}, EventTypeName{"MwaitInstruction"} : amended ] class HvMwaitInstruction:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("MWAIT Extension") : amended, read] uint64 MwaitExtension; [WmiDataId(3), Description("MWAIT Hint") : amended, read] uint64 MwaitHint; }; [Dynamic, Description("CPUID Instruction") : amended, EventType{0x1d27}, EventTypeName{"CpuidInstruction"} : amended ] class HvCpuidInstruction:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("EAX Input") : amended, read] uint64 EaxInput; [WmiDataId(3), Description("ECX Input") : amended, read] uint64 EcxInput; }; [Dynamic, Description("IO Port Read") : amended, EventType{0x1d28}, EventTypeName{"IoPortRead"} : amended ] class HvIoPortRead:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("Port") : amended, read] uint64 Port; [WmiDataId(3), Description("Value") : amended, read] uint64 Value; }; [Dynamic, Description("IO Port Write") : amended, EventType{0x1d29}, EventTypeName{"IoPortWrite"} : amended ] class HvIoPortWrite:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("Port") : amended, read] uint64 Port; [WmiDataId(3), Description("Value") : amended, read] uint64 Value; }; [Dynamic, Description("External Interrupt") : amended, EventType{0x1d2a}, EventTypeName{"ExternalInterrupt"} : amended ] class HvExternalInterrupt:HvEvent { [WmiDataId(1), Description("Vector") : amended, read] uint64 Vector; }; [Dynamic, Description("Virtual Interrupt Pending") : amended, EventType{0x1d2b}, EventTypeName{"InterruptPending"} : amended ] class HvInterruptPending:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; }; [Dynamic, Description("Guest Shutdown") : amended, EventType{0x1d2c}, EventTypeName{"GuestShutdown"} : amended ] class HvGuestShutdown:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; }; [Dynamic, Description("Emulated Instruction") : amended, EventType{0x1d2d}, EventTypeName{"EmulatedInstruction"} : amended ] class HvEmulatedInstruction:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; }; [Dynamic, Description("Non-Maskable Interrupt") : amended, EventType{0x1d2e}, EventTypeName{"NmiInterrupt"} : amended ] class HvNmiInterrupt:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; }; [Dynamic, Description("INVLPG Instruction") : amended, EventType{0x1d2f}, EventTypeName{"InvlpgInstruction"} : amended ] class HvInvlpgInstruction:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("Guest VA") : amended, read] uint64 GuestVa; }; [Dynamic, Description("IRET Instruction") : amended, EventType{0x1d30}, EventTypeName{"IretInstruction"} : amended ] class HvIretInstruction:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; }; [Dynamic, Description("Task Switch") : amended, EventType{0x1d31}, EventTypeName{"TaskSwitch"} : amended ] class HvTaskSwitch:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; }; [Dynamic, Description("INVD Instruction") : amended, EventType{0x1d32}, EventTypeName{"InvdInstruction"} : amended ] class HvInvdInstruction:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; }; [Dynamic, Description("Debug Register Access") : amended, EventType{0x1d33}, EventTypeName{"DrAccess"} : amended ] class HvDrAccess:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; }; [Dynamic, Description("FERR Freeze") : amended, EventType{0x1d34}, EventTypeName{"FerrFreeze"} : amended ] class HvFerrFreeze:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; }; [Dynamic, Description("Emulated Real-Mode Interrupt") : amended, EventType{0x1d35}, EventTypeName{"RealModeInterrupt"} : amended ] class HvRealModeInterrupt:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; }; [Dynamic, Description("Memory Intercept") : amended, EventType{0x1d36}, EventTypeName{"MemoryIntercept"} : amended ] class HvMemoryIntercept:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("GPA Intercept Type") : amended, read] uint64 GpaInterceptType; }; [Dynamic, Description("Reflected Exception") : amended, EventType{0x1d37}, EventTypeName{"ReflectedException"} : amended ] class HvReflectedException:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("Exception Number") : amended, read] uint64 ExceptionNumber; }; [Dynamic, Description("APIC EOI") : amended, EventType{0x1d38}, EventTypeName{"ApicEoi"} : amended ] class HvApicEoi:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("Vector") : amended, read] uint64 Vector; }; [Dynamic, Description("APIC Write") : amended, EventType{0x1d39}, EventTypeName{"ApicWrite"} : amended ] class HvApicWrite:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("Byte Offset") : amended, read] uint64 ByteOffset; [WmiDataId(3), Description("Data") : amended, read] uint64 Data; }; [Dynamic, Description("APIC Access") : amended, EventType{0x1d3a}, EventTypeName{"ApicAccess"} : amended ] class HvApicAccess:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; }; [Dynamic, Description("Nested Page Fault") : amended, EventType{0x1d3b}, EventTypeName{"NestedPageFault"} : amended ] class HvNestedPageFault:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; [WmiDataId(2), Description("Access Type") : amended, read] uint64 AccessType; [WmiDataId(3), Description("GPA") : amended, read] uint64 Gpa; }; [Dynamic, Description("Pause Loop Exit") : amended, EventType{0x1d3c}, EventTypeName{"PauseLoopExit"} : amended ] class HvPauseLoopExit:HvEvent { [WmiDataId(1), Description("Guest RIP") : amended, read] uint64 GuestRip; }; [Dynamic, Description("Create Partition") : amended, EventType{0x1d40}, EventTypeName{"CreatePartition"} : amended ] class HvCreatePartition:HvEvent { [WmiDataId(1), Description("Partition ID") : amended, read] uint64 PartitionId; [WmiDataId(2), Description("Hv Status") : amended, read] uint64 HvStatus; }; [Dynamic, Description("Delete Partition") : amended, EventType{0x1d41}, EventTypeName{"DeletePartition"} : amended ] class HvDeletePartition:HvEvent { [WmiDataId(1), Description("Partition ID") : amended, read] uint64 PartitionId; [WmiDataId(2), Description("Hv Status") : amended, read] uint64 HvStatus; }; [Dynamic, Description("Restore Partition") : amended, EventType{0x1d42}, EventTypeName{"RestorePartition"} : amended ] class HvRestorePartition:HvEvent { [WmiDataId(1), Description("Partition ID") : amended, read] uint64 PartitionId; [WmiDataId(2), Description("TSC Offset") : amended, read] uint64 TscOffset; [WmiDataId(3), Description("Reference Time Offset") : amended, read] uint64 ReferenceTimeOffset; }; [Dynamic, Description("Rundown Partition") : amended, EventType{0x1d43}, EventTypeName{"RundownPartition"} : amended ] class HvRundownPartition:HvEvent { [WmiDataId(1), Description("Partition ID") : amended, read] uint64 PartitionId; [WmiDataId(2), Description("TSC Offset") : amended, read] uint64 TscOffset; [WmiDataId(3), Description("Reference Time Offset") : amended, read] uint64 ReferenceTimeOffset; }; [Dynamic, Description("Init Partition") : amended, EventType{0x1d44}, EventTypeName{"InitPartition"} : amended ] class HvInitPartition:HvEvent { [WmiDataId(1), Description("Partition ID") : amended, read] uint64 PartitionId; [WmiDataId(2), Description("TSC Offset") : amended, read] uint64 TscOffset; [WmiDataId(3), Description("Reference Time Offset") : amended, read] uint64 ReferenceTimeOffset; }; [Dynamic, Description("Scrub Partition") : amended, EventType{0x1d45}, EventTypeName{"ScrubPartition"} : amended ] class HvScrubPartition:HvEvent { [WmiDataId(1), Description("Partition ID") : amended, read] uint64 PartitionId; [WmiDataId(2), Description("TSC Offset") : amended, read] uint64 TscOffset; [WmiDataId(3), Description("Reference Time Offset") : amended, read] uint64 ReferenceTimeOffset; }; [Dynamic, Description("Partition Reference Time") : amended, EventType{0x1d46}, EventTypeName{"ReferenceTime"} : amended ] class HvReferenceTime:HvEvent { [WmiDataId(1), Description("TSC Offset") : amended, read] uint64 TscOffset; [WmiDataId(2), Description("Reference Time Offset") : amended, read] uint64 ReferenceTimeOffset; }; [Dynamic, Description("Create Virtual Processor") : amended, EventType{0x1d4b}, EventTypeName{"CreateVp"} : amended ] class HvCreateVp:HvEvent { [WmiDataId(1), Description("Partition ID") : amended, read] uint64 PartitionId; [WmiDataId(2), Description("Thread ID") : amended, read] uint64 ThreadId; [WmiDataId(3), Description("Hv Status") : amended, read] uint64 HvStatus; }; [Dynamic, Description("Delete Virtual Processor") : amended, EventType{0x1d4c}, EventTypeName{"DeleteVp"} : amended ] class HvDeleteVp:HvEvent { [WmiDataId(1), Description("Partition ID") : amended, read] uint64 PartitionId; [WmiDataId(2), Description("Thread ID") : amended, read] uint64 ThreadId; [WmiDataId(3), Description("Hv Status") : amended, read] uint64 HvStatus; }; [Dynamic, Description("Interrupt Mapping") : amended, EventType{0x1d50}, EventTypeName{"DumpIntMapping"} : amended ] class HvDumpIntMapping:HvEvent { [WmiDataId(1), Description("Device ID") : amended, read] uint64 DeviceId; [WmiDataId(2), Description("Partition ID") : amended, read] uint64 PartitionId; [WmiDataId(3), Description("Target Info") : amended, read] uint64 TargetInfo; [WmiDataId(4), Description("Target LpSet0") : amended, read] uint64 TargetLpset0; [WmiDataId(5), Description("Target LpSet1") : amended, read] uint64 TargetLpset1; [WmiDataId(6), Description("Target VpSet") : amended, read] uint64 TargetVpset; }; [Dynamic, Description("Create Interrupt Mapping") : amended, EventType{0x1d51}, EventTypeName{"CreateIntMapping"} : amended ] class HvCreateIntMapping:HvEvent { [WmiDataId(1), Description("Device ID") : amended, read] uint64 DeviceId; [WmiDataId(2), Description("Partition ID") : amended, read] uint64 PartitionId; [WmiDataId(3), Description("Target Info") : amended, read] uint64 TargetInfo; [WmiDataId(4), Description("Target LpSet0") : amended, read] uint64 TargetLpset0; [WmiDataId(5), Description("Target LpSet1") : amended, read] uint64 TargetLpset1; [WmiDataId(6), Description("Target VpSet") : amended, read] uint64 TargetVpset; }; [Dynamic, Description("Delete Interrupt Mapping") : amended, EventType{0x1d52}, EventTypeName{"FreeIntMapping"} : amended ] class HvFreeIntMapping:HvEvent { [WmiDataId(1), Description("Device ID") : amended, read] uint64 DeviceId; [WmiDataId(2), Description("Partition ID") : amended, read] uint64 PartitionId; [WmiDataId(3), Description("Target Info") : amended, read] uint64 TargetInfo; [WmiDataId(4), Description("Target LpSet0") : amended, read] uint64 TargetLpset0; [WmiDataId(5), Description("Target LpSet1") : amended, read] uint64 TargetLpset1; [WmiDataId(6), Description("Target VpSet") : amended, read] uint64 TargetVpset; }; [Dynamic, Description("Throttle Interrupt") : amended, EventType{0x1d53}, EventTypeName{"Throttle"} : amended ] class HvThrottle:HvEvent { [WmiDataId(1), Description("Physical Vector") : amended, read] uint64 PhysicalVector; [WmiDataId(2), Description("Partition ID") : amended, read] uint64 PartitionId; [WmiDataId(3), Description("Virtual Vector") : amended, read] uint64 VirtualVector; [WmiDataId(4), Description("End Time") : amended, read] uint64 EndTime; }; [Dynamic, Description("Unthrottle Interrupt") : amended, EventType{0x1d54}, EventTypeName{"Unthrottle"} : amended ] class HvUnthrottle:HvEvent { [WmiDataId(1), Description("Physical Vector") : amended, read] uint64 PhysicalVector; [WmiDataId(2), Description("Partition ID") : amended, read] uint64 PartitionId; }; [Dynamic, Description("Interrupt Mapping LpSet") : amended, EventType{0x1d55}, EventTypeName{"LpsetIntMapping"} : amended ] class HvLpsetIntMapping:HvEvent { [WmiDataId(1), Description("Target LpSet2") : amended, read] uint64 TargetLpset2; [WmiDataId(2), Description("Target LpSet3") : amended, read] uint64 TargetLpset3; [WmiDataId(3), Description("Target LpSet4") : amended, read] uint64 TargetLpset4; [WmiDataId(4), Description("Target LpSet5") : amended, read] uint64 TargetLpset5; [WmiDataId(5), Description("Target LpSet6") : amended, read] uint64 TargetLpset6; [WmiDataId(6), Description("Target LpSet7") : amended, read] uint64 TargetLpset7; }; [Dynamic, Description("Grow Virtual TLB") : amended, EventType{0x1d70}, EventTypeName{"GvaGrowVirtualTlb"} : amended ] class HvGvaGrowVirtualTlb:HvEvent { [WmiDataId(1), Description("Old Count") : amended, read] uint64 OldCount; [WmiDataId(2), Description("New Count") : amended, read] uint64 NewCount; }; [Dynamic, Description("Shrink Virtual TLB") : amended, EventType{0x1d71}, EventTypeName{"GvaShrinkVirtualTlb"} : amended ] class HvGvaShrinkVirtualTlb:HvEvent { [WmiDataId(1), Description("Old Count") : amended, read] uint64 OldCount; [WmiDataId(2), Description("New Count") : amended, read] uint64 NewCount; [WmiDataId(3), Description("Free Count") : amended, read] uint64 FreeCount; }; [Dynamic, Description("Flush Virtual TLB") : amended, EventType{0x1d72}, EventTypeName{"GvaFlushVirtualTlb"} : amended ] class HvGvaFlushVirtualTlb:HvEvent { [WmiDataId(1), Description("Partition ID") : amended, read] uint64 PartitionId; }; [Dynamic, Description("Context Switch") : amended, EventType{0x1db0}, EventTypeName{"ContextSwitch"} : amended ] class HvContextSwitch:HvEvent { [WmiDataId(1), Description("Process ID") : amended, read] uint64 ProcessId; [WmiDataId(2), Description("Thread ID") : amended, read] uint64 ThreadId; [WmiDataId(3), Description("TSC Offset") : amended, read] uint64 TscOffset; [WmiDataId(4), Description("Reason") : amended, read] uint64 Reason; [WmiDataId(5), Description("Wait Time") : amended, read] uint64 WaitTime; [WmiDataId(6), Description("Quantum") : amended, read] uint64 Quantum; }; [Dynamic, Description("Thread Runnable Local") : amended, EventType{0x1db1}, EventTypeName{"ThreadRunnableLocal"} : amended ] class HvThreadRunnableLocal:HvEvent { [WmiDataId(1), Description("Process ID") : amended, read] uint64 ProcessId; [WmiDataId(2), Description("Thread ID") : amended, read] uint64 ThreadId; [WmiDataId(3), Description("CPU Reserves") : amended, read] uint64 CpuReserves; }; [Dynamic, Description("Thread Runnable Defer") : amended, EventType{0x1db2}, EventTypeName{"ThreadRunnableDefer"} : amended ] class HvThreadRunnableDefer:HvEvent { [WmiDataId(1), Description("Process ID") : amended, read] uint64 ProcessId; [WmiDataId(2), Description("Thread ID") : amended, read] uint64 ThreadId; [WmiDataId(3), Description("CPU Reserves") : amended, read] uint64 CpuReserves; [WmiDataId(4), Description("CPU Index") : amended, read] uint64 CpuIndex; }; [Dynamic, Description("Express Request") : amended, EventType{0x1db3}, EventTypeName{"Express"} : amended ] class HvExpress:HvEvent { [WmiDataId(1), Description("Target Processor Set") : amended, read] uint64 TargetProcessorSet; [WmiDataId(2), Description("Signaled Processor Set") : amended, read] uint64 SignaledProcessorSet; }; [Dynamic, Description("Express Request Fail") : amended, EventType{0x1db4}, EventTypeName{"ExpressFail"} : amended ] class HvExpressFail:HvEvent { [WmiDataId(1), Description("Request Counter") : amended, read] uint64 RequestCounter; }; [Dynamic, Description("Evaluate Caps") : amended, EventType{0x1db5}, EventTypeName{"ApplyCap"} : amended ] class HvApplyCap:HvEvent { [WmiDataId(1), Description("Now Time") : amended, read] uint64 NowTime; [WmiDataId(2), Description("Previous Deadline") : amended, read] uint64 PreviousDeadline; [WmiDataId(3), Description("Base Cap") : amended, read] uint64 BaseCap; [WmiDataId(4), Description("Utilization") : amended, read] uint64 Utilization; [WmiDataId(5), Description("Input Time Slice Ratio") : amended, read] uint64 InputTimeSliceRatio; [WmiDataId(6), Description("Adjusted Cap") : amended, read] uint64 AdjustedCap; }; [Dynamic, Description("Set Cap Timer") : amended, EventType{0x1db6}, EventTypeName{"SetCapTimer"} : amended ] class HvSetCapTimer:HvEvent { [WmiDataId(1), Description("Expiration Time") : amended, read] uint64 ExpirationTime; }; [Dynamic, Description("Time Slice Evaluation") : amended, EventType{0x1db7}, EventTypeName{"ComputeTimeslice"} : amended ] class HvComputeTimeslice:HvEvent { [WmiDataId(1), Description("Time Slice") : amended, read] uint64 TimeSlice; [WmiDataId(2), Description("Time Slice Ratio") : amended, read] uint64 TimeSliceRatio; [WmiDataId(3), Description("Now Time") : amended, read] uint64 NowTime; [WmiDataId(4), Description("Scheduling Interval") : amended, read] uint64 SchedulingInterval; [WmiDataId(5), Description("Local Run List Size") : amended, read] uint64 LocalRunListSize; }; [Dynamic, Description("Scheduling Unit Switch") : amended, EventType{0x1dc0}, EventTypeName{"SchedulingUnitSwitch"} : amended ] class HvSchedulingUnitSwitch:HvEvent { [WmiDataId(1), Description("Scheduler ID") : amended, read] uint64 SchedulerId; [WmiDataId(2), Description("Process ID") : amended, read] uint64 ProcessId; [WmiDataId(3), Description("Scheduling Unit ID") : amended, read] uint64 SchedulingUnitId; [WmiDataId(4), Description("Switch Reason") : amended, read] uint64 SwitchReason; [WmiDataId(5), Description("Wait Time") : amended, read] uint64 WaitTime; [WmiDataId(6), Description("Quantum") : amended, read] uint64 Quantum; }; [Dynamic, Description("Scheduling Unit Runnable Local") : amended, EventType{0x1dc1}, EventTypeName{"SchedulingUnitRunnableLocal"} : amended ] class HvSchedulingUnitRunnableLocal:HvEvent { [WmiDataId(1), Description("Scheduler ID") : amended, read] uint64 SchedulerId; [WmiDataId(2), Description("Process ID") : amended, read] uint64 ProcessId; [WmiDataId(3), Description("Scheduling Unit ID") : amended, read] uint64 SchedulingUnitId; [WmiDataId(4), Description("Local Run List Size") : amended, read] uint64 LocalRunListSize; [WmiDataId(5), Description("Scheduler Reserves") : amended, read] uint64 SchedulerReserves; }; [Dynamic, Description("Scheduling Unit Runnable Deferred") : amended, EventType{0x1dc2}, EventTypeName{"SchedulingUnitRunnableDeferred"} : amended ] class HvSchedulingUnitRunnableDeferred:HvEvent { [WmiDataId(1), Description("Scheduler ID") : amended, read] uint64 SchedulerId; [WmiDataId(2), Description("Process ID") : amended, read] uint64 ProcessId; [WmiDataId(3), Description("Scheduling Unit ID") : amended, read] uint64 SchedulingUnitId; [WmiDataId(4), Description("Local Run List Size") : amended, read] uint64 LocalRunListSize; [WmiDataId(5), Description("Scheduler Reserves") : amended, read] uint64 SchedulerReserves; }; [Dynamic, Description("Express Schedule Request") : amended, EventType{0x1dc3}, EventTypeName{"ExpressSchedule"} : amended ] class HvExpressSchedule:HvEvent { [WmiDataId(1), Description("Scheduler ID") : amended, read] uint64 SchedulerId; [WmiDataId(2), Description("Signaled Processor Set") : amended, read] uint64 SignaledProcessorSet; }; [Dynamic, Description("Express Schedule Request Fail") : amended, EventType{0x1dc4}, EventTypeName{"ExpressScheduleFail"} : amended ] class HvExpressScheduleFail:HvEvent { [WmiDataId(1), Description("Scheduler ID") : amended, read] uint64 SchedulerId; [WmiDataId(2), Description("Process ID") : amended, read] uint64 ProcessId; [WmiDataId(3), Description("Scheduling Unit ID") : amended, read] uint64 SchedulingUnitId; [WmiDataId(4), Description("Request Counter") : amended, read] uint64 RequestCounter; }; [Dynamic, Description("Cap Activation") : amended, EventType{0x1dc5}, EventTypeName{"SchedulingUnitActivateCap"} : amended ] class HvSchedulingUnitActivateCap:HvEvent { [WmiDataId(1), Description("Scheduler ID") : amended, read] uint64 SchedulerId; [WmiDataId(2), Description("Process ID") : amended, read] uint64 ProcessId; [WmiDataId(3), Description("Scheduling Unit ID") : amended, read] uint64 SchedulingUnitId; [WmiDataId(4), Description("Cap") : amended, read] uint64 Cap; [WmiDataId(5), Description("Max Capped Quantum") : amended, read] uint64 MaxCappedQuantum; [WmiDataId(6), Description("Cap End Time") : amended, read] uint64 CapEndTime; }; [Dynamic, Description("Time Slice Update") : amended, EventType{0x1dc6}, EventTypeName{"SchedulingUnitUpdateTimeslice"} : amended ] class HvSchedulingUnitUpdateTimeslice:HvEvent { [WmiDataId(1), Description("Scheduler ID") : amended, read] uint64 SchedulerId; [WmiDataId(2), Description("Process ID") : amended, read] uint64 ProcessId; [WmiDataId(3), Description("Scheduling Unit ID") : amended, read] uint64 SchedulingUnitId; [WmiDataId(4), Description("Time Slice") : amended, read] uint64 TimeSlice; [WmiDataId(5), Description("Scheduling Interval") : amended, read] uint64 SchedulingInterval; [WmiDataId(6), Description("Local Run List Size") : amended, read] uint64 LocalRunListSize; }; [Dynamic, Description("Successful Livedump invocation") : amended, EventType{0x1dd2}, EventTypeName{"Livedump"} : amended ] class HvLivedump:HvEvent { [WmiDataId(1), Description("Pages Copied") : amended, read] uint64 PagesCopied; [WmiDataId(2), Description("Deposited Page Count") : amended, read] uint64 DepositedPageCount; [WmiDataId(3), Description("Duration") : amended, read] uint64 Duration; }; [Dynamic, Description("PPM Summary Info") : amended, EventType{0x1dd4}, EventTypeName{"PpmSummaryInfo"} : amended ] class HvPpmSummaryInfo:HvEvent { [WmiDataId(1), Description("LP Index") : amended, read] uint64 LpIndex; [WmiDataId(2), Description("Domain ID") : amended, read] uint64 DomainId; [WmiDataId(3), Description("Idle State Count") : amended, read] uint64 IdleStateCount; [WmiDataId(4), Description("Perf State Count") : amended, read] uint64 PerfStateCount; [WmiDataId(5), Description("Throttle State Count") : amended, read] uint64 ThrottleStateCount; [WmiDataId(6), Description("PCC Enabled") : amended, read] uint64 PccEnabled; }; [Dynamic, Description("PPM C-state Info") : amended, EventType{0x1dd5}, EventTypeName{"PpmCstateInfo"} : amended ] class HvPpmCstateInfo:HvEvent { [WmiDataId(1), Description("Type 0") : amended, read] uint64 Type0; [WmiDataId(2), Description("Power Consumption 0") : amended, read] uint64 PowerConsumption0; [WmiDataId(3), Description("Type 1") : amended, read] uint64 Type1; [WmiDataId(4), Description("Power Consumption 1") : amended, read] uint64 PowerConsumption1; [WmiDataId(5), Description("Type 2") : amended, read] uint64 Type2; [WmiDataId(6), Description("Power Consumption 2") : amended, read] uint64 PowerConsumption2; }; [Dynamic, Description("PPM P-state Info") : amended, EventType{0x1dd6}, EventTypeName{"PpmPstateInfo"} : amended ] class HvPpmPstateInfo:HvEvent { [WmiDataId(1), Description("Frequency 0") : amended, read] uint64 Frequency0; [WmiDataId(2), Description("Percentage of Max Frequency 0") : amended, read] uint64 PercentageOfMaxFrequency0; [WmiDataId(3), Description("Frequency 1") : amended, read] uint64 Frequency1; [WmiDataId(4), Description("Percentage of Max Frequency 1") : amended, read] uint64 PercentageOfMaxFrequency1; [WmiDataId(5), Description("Frequency 2") : amended, read] uint64 Frequency2; [WmiDataId(6), Description("Percentage of Max Frequency 2") : amended, read] uint64 PercentageOfMaxFrequency2; }; [Dynamic, Description("PPM T-state Info") : amended, EventType{0x1dd7}, EventTypeName{"PpmTstateInfo"} : amended ] class HvPpmTstateInfo:HvEvent { [WmiDataId(1), Description("Percentage of Frequency 0") : amended, read] uint64 PercentageOfFrequency0; [WmiDataId(2), Description("Percentage of Min Frequency 0") : amended, read] uint64 PercentageOfMinFrequency0; [WmiDataId(3), Description("Percentage of Frequency 1") : amended, read] uint64 PercentageOfFrequency1; [WmiDataId(4), Description("Percentage of Min Frequency 1") : amended, read] uint64 PercentageOfMinFrequency1; [WmiDataId(5), Description("Percentage of Frequency 2") : amended, read] uint64 PercentageOfFrequency2; [WmiDataId(6), Description("Percentage of Min Frequency 2") : amended, read] uint64 PercentageOfMinFrequency2; }; [Dynamic, Description("PPM Summary Info Rundown") : amended, EventType{0x1dd8}, EventTypeName{"PpmRundownSummaryInfo"} : amended ] class HvPpmRundownSummaryInfo:HvEvent { [WmiDataId(1), Description("Idle State Count") : amended, read] uint64 IdleStateCount; [WmiDataId(2), Description("Perf State Count") : amended, read] uint64 PerfStateCount; [WmiDataId(3), Description("Throttle State Count") : amended, read] uint64 ThrottleStateCount; [WmiDataId(4), Description("PCC Enabled") : amended, read] uint64 PccEnabled; }; [Dynamic, Description("PPM C-state Info Rundown") : amended, EventType{0x1dd9}, EventTypeName{"PpmRundownCstateInfo"} : amended ] class HvPpmRundownCstateInfo:HvEvent { [WmiDataId(1), Description("Type 0") : amended, read] uint64 Type0; [WmiDataId(2), Description("Power Consumption 0") : amended, read] uint64 PowerConsumption0; [WmiDataId(3), Description("Type 1") : amended, read] uint64 Type1; [WmiDataId(4), Description("Power Consumption 1") : amended, read] uint64 PowerConsumption1; [WmiDataId(5), Description("Type 2") : amended, read] uint64 Type2; [WmiDataId(6), Description("Power Consumption 2") : amended, read] uint64 PowerConsumption2; }; [Dynamic, Description("PPM P-state Info Rundown") : amended, EventType{0x1dda}, EventTypeName{"PpmRundownPstateInfo"} : amended ] class HvPpmRundownPstateInfo:HvEvent { [WmiDataId(1), Description("Frequency 0") : amended, read] uint64 Frequency0; [WmiDataId(2), Description("Percentage of Max Frequency 0") : amended, read] uint64 PercentageOfMaxFrequency0; [WmiDataId(3), Description("Frequency 1") : amended, read] uint64 Frequency1; [WmiDataId(4), Description("Percentage of Max Frequency 1") : amended, read] uint64 PercentageOfMaxFrequency1; [WmiDataId(5), Description("Frequency 2") : amended, read] uint64 Frequency2; [WmiDataId(6), Description("Percentage of Max Frequency 2") : amended, read] uint64 PercentageOfMaxFrequency2; }; [Dynamic, Description("PPM T-state Info Rundown") : amended, EventType{0x1ddb}, EventTypeName{"PpmRundownTstateInfo"} : amended ] class HvPpmRundownTstateInfo:HvEvent { [WmiDataId(1), Description("Percentage of Frequency 0") : amended, read] uint64 PercentageOfFrequency0; [WmiDataId(2), Description("Percentage of Min Frequency 0") : amended, read] uint64 PercentageOfMinFrequency0; [WmiDataId(3), Description("Percentage of Frequency 1") : amended, read] uint64 PercentageOfFrequency1; [WmiDataId(4), Description("Percentage of Min Frequency 1") : amended, read] uint64 PercentageOfMinFrequency1; [WmiDataId(5), Description("Percentage of Frequency 2") : amended, read] uint64 PercentageOfFrequency2; [WmiDataId(6), Description("Percentage of Min Frequency 2") : amended, read] uint64 PercentageOfMinFrequency2; }; [Dynamic, Description("Intercept Overrun") : amended, EventType{0x1de0}, EventTypeName{"Overrun"} : amended ] class HvOverrun:HvEvent { [WmiDataId(1), Description("Run Time") : amended, read] uint64 RunTime; [WmiDataId(2), Description("Intercept State") : amended, read] uint64 InterceptState; [WmiDataId(3), Description("Call Code") : amended, read] uint64 CallCode; [WmiDataId(4), Description("Param 1") : amended, read] uint64 Param1; [WmiDataId(5), Description("Param 2") : amended, read] uint64 Param2; }; [Dynamic, Description("Intercept Overrun Params") : amended, EventType{0x1de1}, EventTypeName{"OverrunParams"} : amended ] class HvOverrunParams:HvEvent { [WmiDataId(1), Description("Param 1") : amended, read] uint64 Param1; [WmiDataId(2), Description("Param 2") : amended, read] uint64 Param2; [WmiDataId(3), Description("Param 3") : amended, read] uint64 Param3; }; [Dynamic, Description("Cpu Mapping") : amended, EventType{0x1de2}, EventTypeName{"CpuMapping"} : amended ] class HvCpuMapping:HvEvent { [WmiDataId(1), Description("Cpu Number") : amended, read] uint64 CpuNumber; [WmiDataId(2), Description("LP Index") : amended, read] uint64 LpIndex; }; [Dynamic, Description("PPM Idle") : amended, EventType{0x1de3}, EventTypeName{"PpmIdle"} : amended ] class HvPpmIdle:HvEvent { [WmiDataId(1), Description("Idle Duration") : amended, read] uint64 IdleDuration; [WmiDataId(2), Description("Idle State") : amended, read] uint64 IdleState; [WmiDataId(3), Description("Interrupt Vector") : amended, read] uint64 InterruptVector; }; [Dynamic, Description("PPM Policy Change") : amended, EventType{0x1de4}, EventTypeName{"PpmPolicyChange"} : amended ] class HvPpmPolicyChange:HvEvent { [WmiDataId(1), Description("Setting Id") : amended, read] uint64 SettingId; [WmiDataId(2), Description("Value Requested") : amended, read] uint64 ValueRequested; [WmiDataId(3), Description("Value Current") : amended, read] uint64 ValueCurrent; [WmiDataId(4), Description("Value Applied") : amended, read] uint64 ValueApplied; }; [Dynamic, Description("PPM Core Park") : amended, EventType{0x1de5}, EventTypeName{"PpmCorePark"} : amended ] class HvPpmCorePark:HvEvent { [WmiDataId(1), Description("Perf Check Time") : amended, read] uint64 PerfCheckTime; [WmiDataId(2), Description("LP Index") : amended, read] uint64 LpIndex; }; [Dynamic, Description("PPM Core Un Park") : amended, EventType{0x1de6}, EventTypeName{"PpmCoreUnpark"} : amended ] class HvPpmCoreUnpark:HvEvent { [WmiDataId(1), Description("Perf Check Time") : amended, read] uint64 PerfCheckTime; [WmiDataId(2), Description("LP Index") : amended, read] uint64 LpIndex; }; [Dynamic, Description("PPM Cap Event") : amended, EventType{0x1de7}, EventTypeName{"PpmCapEvent"} : amended ] class HvPpmCapEvent:HvEvent { [WmiDataId(1), Description("LP Index") : amended, read] uint64 LpIndex; [WmiDataId(2), Description("P State Cap") : amended, read] uint64 PStateCap; [WmiDataId(3), Description("T State Cap") : amended, read] uint64 TStateCap; [WmiDataId(4), Description("Thermal Cap") : amended, read] uint64 ThermalCap; }; [Dynamic, Description("PPM Perf Check Start") : amended, EventType{0x1de8}, EventTypeName{"PpmPerfCheckStart"} : amended ] class HvPpmPerfCheckStart:HvEvent { [WmiDataId(1), Description("Perf Check Time") : amended, read] uint64 PerfCheckTime; }; [Dynamic, Description("PPM Perf Check Stop") : amended, EventType{0x1de9}, EventTypeName{"PpmPerfCheckStop"} : amended ] class HvPpmPerfCheckStop:HvEvent { [WmiDataId(1), Description("Perf Check Time") : amended, read] uint64 PerfCheckTime; }; [Dynamic, Description("PPM Recorded Utility") : amended, EventType{0x1dea}, EventTypeName{"PpmRecordedUtility"} : amended ] class HvPpmRecordedUtility:HvEvent { [WmiDataId(1), Description("Perf Check Time") : amended, read] uint64 PerfCheckTime; [WmiDataId(2), Description("Idle Time") : amended, read] uint64 IdleTime; [WmiDataId(3), Description("Busy Time") : amended, read] uint64 BusyTime; [WmiDataId(4), Description("Percentage of Max Frequency") : amended, read] uint64 PercentageOfMaxFrequency; [WmiDataId(5), Description("Utility") : amended, read] uint64 Utility; [WmiDataId(6), Description("LP Index") : amended, read] uint64 LpIndex; }; [Dynamic, Description("PPM Expected Utility") : amended, EventType{0x1deb}, EventTypeName{"PpmExpectedUtility"} : amended ] class HvPpmExpectedUtility:HvEvent { [WmiDataId(1), Description("Perf Check Time") : amended, read] uint64 PerfCheckTime; [WmiDataId(2), Description("Idle Time") : amended, read] uint64 IdleTime; [WmiDataId(3), Description("Excess Busy Time") : amended, read] uint64 ExcessBusyTime; [WmiDataId(4), Description("Percentage of Max Frequency") : amended, read] uint64 PercentageOfMaxFrequency; [WmiDataId(5), Description("LP Index") : amended, read] uint64 LpIndex; }; [Dynamic, Description("PPM Domain Perf State Change") : amended, EventType{0x1dec}, EventTypeName{"PpmDomainPerfStateChange"} : amended ] class HvPpmDomainPerfStateChange:HvEvent { [WmiDataId(1), Description("Perf Check Time") : amended, read] uint64 PerfCheckTime; [WmiDataId(2), Description("CurrentState") : amended, read] uint64 Currentstate; [WmiDataId(3), Description("Current Percentage of Max Frequency") : amended, read] uint64 CurrentPercentageOfMaxFrequency; [WmiDataId(4), Description("Target Percentage of Max Frequency") : amended, read] uint64 TargetPercentageOfMaxFrequency; [WmiDataId(5), Description("Desired Percentage of Max Frequency") : amended, read] uint64 DesiredPercentageOfMaxFrequency; [WmiDataId(6), Description("Domain ID") : amended, read] uint64 DomainId; }; [Dynamic, Description("PPM Processor Perf State Change") : amended, EventType{0x1ded}, EventTypeName{"PpmProcessorPerfStateChange"} : amended ] class HvPpmProcessorPerfStateChange:HvEvent { [WmiDataId(1), Description("Perf Check Time") : amended, read] uint64 PerfCheckTime; [WmiDataId(2), Description("CurrentState") : amended, read] uint64 Currentstate; [WmiDataId(3), Description("Current Percentage of Max Frequency") : amended, read] uint64 CurrentPercentageOfMaxFrequency; [WmiDataId(4), Description("Target Percentage of Max Frequency") : amended, read] uint64 TargetPercentageOfMaxFrequency; [WmiDataId(5), Description("LP Index") : amended, read] uint64 LpIndex; [WmiDataId(6), Description("Domain ID") : amended, read] uint64 DomainId; }; [Dynamic, Description("PPM Platform State Change") : amended, EventType{0x1dee}, EventTypeName{"PpmPlatformStateChange"} : amended ] class HvPpmPlatformStateChange:HvEvent { [WmiDataId(1), Description("Platform Idle Count") : amended, read] uint64 PlatformIdleCount; }; [Dynamic, Description("Sampling Profile") : amended, EventType{0x1df0}, EventTypeName{"Sample"} : amended ] class HvSample:HvEvent { [WmiDataId(1), Description("Partition Id") : amended, read] uint64 PartitionId; [WmiDataId(2), Description("Vp Id") : amended, read] uint64 VpId; [WmiDataId(3), Description("Cr3") : amended, read] uint64 Cr3; [WmiDataId(4), Description("Ip") : amended, read] uint64 Ip; [WmiDataId(5), Description("Profile Source") : amended, read] uint64 ProfileSource; [WmiDataId(6), Description("Vp Tsc") : amended, read] uint64 VpTsc; }; [Dynamic, Description("Hypervisor Module") : amended, EventType{0x1df1}, EventTypeName{"HvModule"} : amended ] class HvHvModule:HvEvent { [WmiDataId(1), Description("Hypervisor Base Address") : amended, read] uint64 HypervisorBaseAddress; };
Simpan