Struct HiberfilBuilder 

pub struct HiberfilBuilder { /* private fields */ }

Build a synthetic Windows hibernation file (hiberfil.sys).

Produces a PO_MEMORY_IMAGE header with “hibr” magic, processor state page with CR3, a page table page with PFN entries, and Xpress LZ77 compressed data blocks.

Layout:

• Page 0 (offset 0x0000): PO_MEMORY_IMAGE header with “hibr” magic at 0x00, LengthSelf at 0x0C (256 = 64-bit), FirstTablePage at 0x68 (value 2).
• Page 1 (offset 0x1000): Processor state page with CR3 at offset 0x28.
• Page 2 (offset 0x2000): Page table – array of PFN entries (u64), terminated by 0xFFFF_FFFF_FFFF_FFFF.
• After header pages: Xpress LZ77 compressed blocks. Block header: sig(8) + num_pages_minus_1(1) + compressed_size_field(3 bytes)
  • padding to 0x20 + compressed data.

Implementations

impl HiberfilBuilder

pub fn new() -> Self

Create a new builder with default CR3 (0x1ab000).

pub fn cr3(self, cr3: u64) -> Self

Set the CR3 / DirectoryTableBase value stored in the processor state page.

pub fn add_page(self, pfn: u64, data: &[u8; 4096]) -> Self

Add a physical memory page at the given PFN.

pub fn build(self) -> Vec<u8>

Build the complete hibernation file as a byte vector.

Trait Implementations

impl Default for HiberfilBuilder

fn default() -> Self

Returns the “default value” for a type.