Remove and Invalidate Hook in TLB */ Caution : This function won't remove entries from LIST_ENTRY, just invalidate the paging, use HvPerformPageUnHook

Remove and Invalidate Hook in TLB */ Caution : This function won't remove entries from LIST_ENTRY, just invalidate the paging, use HvPerformPageUnHook

Set up PML2 Entries */

Set up PML2 Entries */

Split 2MB (LargePage) into 4kb pages */

Split 2MB (LargePage) into 4kb pages */

Inject #BP to the guest (Event Injection) */

Find cr3 of system process*/

Handles Guest Access to control registers */

Handles Guest Access to control registers */

Handle Cpuid Vmexits*/

Handle Cpuid Vmexits*/

Handles in the cases when RDMSR causes a Vmexit*/

Handles in the cases when RDMSR causes a Vmexit*/

Handles in the cases when RDMSR causes a Vmexit*/

Handles in the cases when RDMSR causes a Vmexit*/

Check whether VMX Feature is supported or not */

Check whether VMX Feature is supported or not */

Notify all core to invalidate their EPT */

Notify all core to invalidate their EPT */

Remove all hooks from the hooked pages list and invalidate TLB */ Should be called from Vmx Non-root

Reset GDTR/IDTR and other old when you do vmxoff as the patchguard will detect them left modified */

Add the current instruction length to guest rip to resume to next instruction */

Add the current instruction length to guest rip to resume to next instruction */

Terminate Vmx on all logical cores. */

Terminate Vmx on all logical cores. */

Initialize Vmx */

Initialize Vmx */

Invalidates all contexts in ept cache table */

Invalidates a single context in ept cache table */

Initialize the buffer relating to log message tracing */

return of this function shows whether the read was successfull or not (e.g FALSE shows there's no new buffer available.)*/

Create an event-based usermode notifying mechanism*/

Register a new IRP Pending thread which listens for new buffers */

Uninitialize the buffer relating to log message tracing */

Converts Physical Address to Virtual Address */

Converts Physical Address to Virtual Address */

Find SSDT address of Nt fucntions and W32Table */

Find entry from SSDT table of Nt fucntions and W32Table syscalls */

Get the kernel base and Image size */

Test Vmcall (VMCALL_TEST) */

Test Vmcall (VMCALL_TEST) */

Allocate a buffer forr Msr Bitmap */

Allocate a buffer forr Msr Bitmap */

Allocate Vmcs region and set the Revision ID based on IA32_VMX_BASIC_MSR */

Allocate Vmcs region and set the Revision ID based on IA32_VMX_BASIC_MSR */

Allocate VMM Stack */

Allocate VMM Stack */

Allocates Vmxon region and set the Revision ID based on IA32_VMX_BASIC_MSR */

Allocates Vmxon region and set the Revision ID based on IA32_VMX_BASIC_MSR */

Clearing Vmcs status using Vmclear instruction */

Clearing Vmcs status using Vmclear instruction */

Initialize VMX Operation */

Initialize VMX Operation */

Implementation of Vmptrld instruction */

Implementation of Vmptrld instruction */

Create and Configure a Vmcs Layout */

Create and Configure a Vmcs Layout */

Broadcast to terminate VMX on all logical cores */

Broadcast to terminate VMX on all logical cores */

Main Vmcall Handler */

Main Vmcall Handler */

Prepare and execute Vmxoff instruction */

Prepare and execute Vmxoff instruction */