CmdQuerySystemDebugState Query the breakpoint manager's debug register state for all processors.

Test if the system is one of supported OS versions

++ Description: Clear an ept breakpoint on all processors. Parameters: Handle - The handle to the ept breakpoint to be cleared. Requireme

++ Description: Disable an active ept breakpoint. Parameters: Handle - The handle to the ept breakpoint to be disabled. Requirements:

============================================================================= Meta Interface =========================================================

++ Description: Initializes an ept breakpoint information object with information about all active and inactive ept breakpoints. Parameters

++ Description: Calculates the size in bytes required to store ept breakpoint information for all active and inactive ept breakpoints. Para

============================================================================= Public Vmx Non-Root Interface ==========================================

++ Description: Install an ept breakpoint on all processors. Parameters: ProcessId - The target process of the ept breakpoint. pVirtu

++ Description: Unregisters an EBM client. Parameters: ProcessId - The process id of the registered client. Requirements: This routi

++ Description: Creates an ept breakpoint object for the specified breakpoint parameters. Parameters: ProcessId - The target process of th

++ Description: Creates an ept breakpoint non-root entry for the specified ept breakpoint object and inserts it into the EBM client context

++ Description: Creates a locked page entry for the specified virtual address or returns an existing entry. Parameters: ProcessId - Th

++ Description: Creates a log context bookkeeping object for the specified ept breakpoint parameters. Parameters: ProcessId - The targ

++ Description: Releases the resources of an EBM client context. Parameters: pClientContext - Pointer to the EBM client context whose reso

++ Description: Search the specified locked page for conflicting ept breakpoints. Parameters: pLockedPageEntry - The locked page entry to

++ Description: Ept violation VM exit handler. Parameters: pGuestContext - Pointer to the guest context. Return Value: Returns TRUE

++ Description: Monitor trap flag VM exit handler. Parameters: pGuestContext - Pointer to the guest context. --*/

++ Description: Install an ept breakpoint on the current processor in vmx root mode. Parameters: pEptData - Pointer to the ept data for th

++ Description: Uninstall all ept breakpoints on the current processor in vmx root mode. Parameters: pEptData - Pointer to the ept data fo

++ Description: Uninstall an ept breakpoint on the current processor in vmx root mode. Parameters: pEptData - Pointer to the ept data for

++ Description: Uninstall all ept breakpoints by target process id on the current processor in vmx root mode. Parameters: pEptData - P

++ Description: Creates an ept breakpoint root entry for the specified ept breakpoint object, updates the access bits of the target physical

++ Description: Creates a hooked page entry for the specified guest physical page or returns an existing entry. Parameters: pProcessor

++ Description: Search the specified hooked page for conflicting ept breakpoints. Parameters: pHookedPageEntry - The hooked page entry to

++ Description: Print a range of elements from the specified ept breakpoint log. Parameters: hLog - Log handle for 'pLog'. pLog - The

Returns an EPT pointer from ept_data

Deal with EPT violation VM-exit.

Reads and stores all MTRRs to set a correct memory type for EPT

Checks if the system supports EPT technology sufficient enough

Frees all EPT stuff

Returns if the physical_address is device memory (which could not have a corresponding PFN entry)

ExecuteCecmAbsoluteAddress Whenever Context.WriteTarget is written to, Context.ReadTarget is read by the CECM callback.

ExecuteCecmIndirectAddress This test captures unique double values from an SSE instruction.

ExecuteCecmInvalidAddress This test issues a CECM request for an invalid address.

ExecuteCecmRequestForTrapPage This test issues a CECM request for an effective address which has been reserved and committed but not accessed. This

ExecuteCecmResultsOverflow This test uses an effective address which yields a number of unique results larger than the provided values buffer can sup

ExecuteTarget

ExecuteTarget

ExecutionTargetAddress NOTE This test will fail if this function is inlined.

ExecutionTargetAddress NOTE This test will fail if this function is inlined.

ExerciseBreakpoints

============================================================================= Meta Interface =========================================================

FcdVmxDriverEntry Initialize the fake debug registers using the current state of the guest's debug registers. We must perform this initialization af

FcdVmxDriverUnload Copy the state of the fake debug registers to the guest's actual debug registers. We must perform this termination as part of VM

FcdVmxProcessMovDrEvent NOTE Executing a software breakpoint in this function will usually hard-freeze the machine.

============================================================================= Private Interface ======================================================

GenerateRandomValue

Calls all constructors and register all destructor

HbmCleanupBreakpoints Uninstall all BPM-managed breakpoints from all processors.

============================================================================= Meta Interface =========================================================

HbmQuerySystemDebugState Query information about all BPM-managed breakpoints.

HbmpLogStatistics Print the statistics for this VM session.

HbmxProcessDebugExceptionEvent Interpret the guest's debug registers and VM exit qualification to determine if a BPM-managed breakpoint caused this e

HbmxSetHardwareBreakpoint Modify the target debug address register and its corresponding DR7 bits in the guest's context to (un)install a hardware br

HbmxpConsumeDebugException Set the resume flag in the guest flags VMCS field so that the guest can successfully re-execute the original instruction o

HbmxpInterpretBreakpointCondition Generate a logical representation of a breakpoint condition which caused a debug exception. Params Index: Debug ad

HbmxpInvokeBreakpointCallback

HbmxpIsValidConditionForBreakpoint NOTE This function assumes that the condition values are valid. NOTE We do not compare the L0-L3 or G0-G3 fields

Registers power callback

Constructor; call this only once before any other code in this module runs @param output_routine A function pointer for printing out results @param

InitializeAbsoluteAddressContext

InitializeFpuStateContext

InitializeIndirectAddressContext

InitializeInvalidAddressContext

InitializeResultsOverflowContext

InitializeRngSeed

InitializeSpanningPageContext

InitializeStressTestContext

InitializeTrapPageContext

InvalidAddressExecutionTargetAddress NOTE This test will fail if this function is inlined.

============================================================================= Private Interface ======================================================

Registers LogpReinitializationRoutine() for re-initialization.