Reads natural-width VMCS

Writes natural-width VMCS

VivienneIoClearHardwareBreakpoint Uninstall a hardware breakpoint on all processors.

Reads natural-width MSR

Reads 64bit-width MSR

============================================================================= Utilities ==============================================================

AreAllHardwareBreakpointsCleared Returns TRUE if all debug registers on all processors are zero.

BreakpointStealthCheck View the debug register values for the current thread by exercising exception handlers to inspect thread context. Caller must

Checks if a system is x64 @return true if a system is x64

VivienneIoSetHardwareBreakpoint Install a hardware breakpoint on all processors.

Advances guest's IP to the next instruction

IsVirtualAddressValid Determine if the PTE for the specified address is valid.

VA -> PA

Returns a base address of the segment specified by SegmentSelector

Terminates the log functions.

Injects interruption to a guest

An alternative implementation of a C++ exception handler. Issues a bug check.

ParseMemoryDescriptionToken Valid input examples: 14FF20 rbx+rsi rbx+rsi+FFFF rbx+rsi*8-77777

Executes the INVEPT instruction and invalidates EPT entry cache _Use_decl_annotations_*/

Writes 64bit-width VMCS

Calls all registered destructors

Executes VMCALL

VivienneIoCaptureMemoryValues Install a hardware breakpoint on all processors which, when triggered, will record all unique values at the memory addr

Returns access right of the segment specified by the SegmentSelector for VMX

HwBpSizeToChar

HwBpTypeToChar

Sets a break point that works only when a debugger is present _Use_decl_annotations_*/

============================================================================= Tokenizer Interface ====================================================

PFN -> VA

Selects a register to be used based on the index

Frees all related memory

Returns true when a system is on the x86 PAE mode _Use_decl_annotations_*/

Terminates utility functions

Indicates successful VMCALL

============================================================================= Shared Interface =======================================================

++ Description: Determine if the caller is the registered EBM client. Return Value: Returns TRUE if the caller is the registered EBM clien

Frees all used EPT entries by walking through whole EPT

ExecuteCecmRequestForSpanningPage This test issues a CECM request which attempts to read an effective address that spans two pages. The effective add

Terminates a log file related code.

Unregister power callback

SetThreadLocalHardwareBreakpoint

Returns a kernel CR3 value of the current process; _Use_decl_annotations_*/

Adjust the requested control value with consulting a value of related MSR

ClearThreadLocalHardwareBreakpoint

++ Description: Destroys an ept breakpoint object. Parameters: pEptBreakpoint - The ept breakpoint object to be destroyed. --*/

++ Description: Destroys an ept breakpoint non-root entry. Parameters: pNonRootEntry - The non-root entry to be destroyed. Return Value:

++ Description: Destroys a log context bookkeeping object. Parameters: pLogContext - The log context to be destroyed. Requirements:

Initialize an EPT entry with a "pass through" attribute

GenerateBoundedRandomValue

GenerateUniqueRandomValues This function exists because TestCaptureRegisterValues generated a duplicate value once which caused the CECR request to r

Unregister power callback

PrintDebugRegisterContext

PromptDebuggerExceptionConfiguration Print a message to instruct the user to configure their debugger's exception handling settings.

ReadGuestGpRegisterValue Utility to read a register value from guest state.

============================================================================= From String Interface ==================================================

Execute a given callback routine on all processors in PASSIVE_LEVEL. Returns STATUS_SUCCESS when all callback returned STATUS_SUCCESS as well. When on

Loads the PDPTE registers from CR3 to VMCS

Reads 64bit-width VMCS

VivienneIoCaptureRegisterValues Install a hardware breakpoint on all processors which, when triggered, will examine the contents of the target regist

VivienneIoQuerySystemDebugState Query the breakpoint manager's debug register state for all processors.

BpmiClearHardwareBreakpoint Zero a debug address register value and its corresponding DR7 bits on all processors.

++ Description: Destroys a locked page entry. Parameters: pLockedPageEntry - The locked page entry to be destroyed. --*/

ExecuteCecmForInstructionAddress

GpRegToString

HbmClearHardwareBreakpoint

HbmInitializeBreakpoint Hardware breakpoint constructor.

HbmSetHardwareBreakpoint Install a validated hardware breakpoint on all processors.

HbmpClearHardwareBreakpoint Zero a debug address register value and its corresponding DR7 bits on all processors.

============================================================================= Public Interface =======================================================

Marks the message as it is already printed out, or clears the printed bit and restores it to the original