Class EptHandler

Kernel-Bridge/API/Hypervisor.cpp:1187–1450

    static size_t vmread(size_t field);

    class EptHandler final
    {
    private:
        EPT_TABLES* m_Ept;
        std::unordered_map<uint64_t, LARGE_PAGE_DESCRIPTOR> m_PageDescriptors; // Guest PA (aligned by 2Mb) -> 4Kb PTEs describing a 2Mb page
        std::unordered_map<uint64_t, EPT_PTE_HANDLER> m_Handlers; // Guest PA (aligned by 4Kb) -> Page handlers (EPT entries for RWX)
        VMX::INVEPT_DESCRIPTOR m_InveptDescriptor;

        struct
        {
            const void* Rip;
            EPT_PTE* Pte;
            EPT_PTE PendingPrevEntry;
        } m_PendingHandler;

        constexpr static unsigned int PageSize = 4096;
        constexpr static unsigned int LargePageSize = 2 * 1048576;

        inline void invept()
        {
            __invept(VMX::INVEPT_TYPE::SingleContextInvalidation, &m_InveptDescriptor);
        }

    public:
        EptHandler(__in EPT_TABLES* Ept)
            : m_Ept(Ept)
            , m_PendingHandler({})
            , m_InveptDescriptor({})
        {}

        ~EptHandler()
        {
            for (auto& [_, Desc] : m_PageDescriptors)
            {
                *Desc.Pde = Desc.OriginalPde;
                Supplementation::FreePhys(Desc.Layout);
            }
        }

        void CompleteInitialization(VMX::EPTP Eptp)
        {
            m_InveptDescriptor.Eptp = Eptp.Value;
        }

        void InterceptPage(
            unsigned long long Pa,
            unsigned long long ReadPa,
            unsigned long long WritePa,
            unsigned long long ExecutePa,
            unsigned long long ExecuteReadPa,
            unsigned long long ExecuteWritePa
        ) {
            unsigned long long Pa4Kb = ALIGN_DOWN_BY(Pa, PageSize);
            auto HandlerEntry = m_Handlers.find(Pa4Kb);
            if (HandlerEntry != m_Handlers.end())
            {
                PAGE_HANDLER Handler = {};
                BuildPageHandler(static_cast<MTRR_MEMORY_TYPE>(HandlerEntry->second.Handlers.OnRead.Page4Kb.Type), ReadPa, WritePa, ExecutePa, ExecuteReadPa, ExecuteWritePa, OUT Handler);