hyperhv.dll - Online Dependency Analysis & Download

Description

—

Authors

Unknown

File size

520.9 KB

Uploaded

2026-05-27 19:15

Views

SHA-256

5f663f01fb1c0b3db01495ef2e9326b8

Exported functions 292

BroadcastChangeAllMsrBitmapReadAllCores #1 · 0x18a0

BroadcastChangeAllMsrBitmapWriteAllCores #2 · 0x18c0

BroadcastDisableBreakpointExitingOnExceptionBitmapAllCores #3 · 0x18f0

BroadcastDisableDbAndBpExitingAllCores #4 · 0x1900

BroadcastDisableEferSyscallEventsOnAllProcessors #5 · 0x1910

BroadcastDisableMov2ControlRegsExitingForClearingEventsAllCores #6 · 0x1920

BroadcastDisableMov2DebugRegsExitingForClearingEventsAllCores #7 · 0x1940

BroadcastDisableMovDebugRegistersExitingAllCores #8 · 0x1950

BroadcastDisableMovToControlRegistersExitingAllCores #9 · 0x1960

BroadcastDisableMovToCr3ExitingOnAllProcessors #10 · 0x1980

BroadcastDisableRdpmcExitingAllCores #11 · 0x19b0

BroadcastDisableRdtscExitingAllCores #12 · 0x19c0

BroadcastDisableRdtscExitingForClearingEventsAllCores #13 · 0x19d0

BroadcastEnableBreakpointExitingOnExceptionBitmapAllCores #14 · 0x19e0

BroadcastEnableDbAndBpExitingAllCores #15 · 0x19f0

BroadcastEnableEferSyscallEventsOnAllProcessors #16 · 0x1a00

BroadcastEnableMovControlRegisterExitingAllCores #17 · 0x1a10

BroadcastEnableMovDebugRegistersExitingAllCores #18 · 0x1a30

BroadcastEnableMovToCr3ExitingOnAllProcessors #19 · 0x1a40

BroadcastEnableRdpmcExitingAllCores #20 · 0x1a70

BroadcastEnableRdtscExitingAllCores #21 · 0x1a80

BroadcastIoBitmapChangeAllCores #22 · 0x1a90

BroadcastIoBitmapResetAllCores #23 · 0x1ab0

BroadcastResetAllMsrBitmapWriteAllCores #24 · 0x1ae0

BroadcastResetChangeAllMsrBitmapReadAllCores #25 · 0x1af0

BroadcastResetExceptionBitmapAllCores #26 · 0x1b00

BroadcastSetExceptionBitmapAllCores #27 · 0x1b20

BroadcastSetExternalInterruptExitingAllCores #28 · 0x1b40

BroadcastUnsetExceptionBitmapAllCores #29 · 0x1b50

BroadcastUnsetExternalInterruptExitingOnlyOnClearingInterruptEventsAllCores #30 · 0x1b70

CheckAccessValidityAndSafety #31 · 0x8c70

CheckAccessValidityAndSafetyByProcessId #32 · 0x8c80

CheckAddressMaximumInstructionLength #33 · 0x8dd0

CheckAddressPhysical #34 · 0x8f00

CheckAddressValidityUsingTsx #35 · 0x8f20

ConfigureChangeIoBitmapOnSingleCore #36 · 0x72c0

ConfigureChangeMsrBitmapReadOnSingleCore #37 · 0x72d0

ConfigureChangeMsrBitmapWriteOnSingleCore #38 · 0x72e0

ConfigureDirtyLoggingInitializeOnAllProcessors #39 · 0x72f0

ConfigureDirtyLoggingUninitializeOnAllProcessors #40 · 0x7300

ConfigureDisableEferSyscallEventsOnAllProcessors #41 · 0x7310

ConfigureDisableMovToCr3ExitingOnAllProcessors #42 · 0x7320

ConfigureEnableEferSyscallEventsOnAllProcessors #43 · 0x7330

ConfigureEnableEferSyscallHookOnSingleCore #44 · 0x7340

ConfigureEnableMovToControlRegisterExitingOnSingleCore #45 · 0x7350

ConfigureEnableMovToCr3ExitingOnAllProcessors #46 · 0x7370

ConfigureEnableMovToDebugRegistersExitingOnSingleCore #47 · 0x7380

ConfigureEnableRdpmcExitingOnSingleCore #48 · 0x7390

ConfigureEnableRdtscExitingOnSingleCore #49 · 0x73a0

ConfigureEptHook #50 · 0x73b0

ConfigureEptHook2 #51 · 0x73c0

ConfigureEptHook2FromVmxRoot #52 · 0x73e0

ConfigureEptHookAllocateExtraHookingPagesForMemoryMonitorsAndExecEptHooks #53 · 0x7400

ConfigureEptHookFromVmxRoot #54 · 0x7410

ConfigureEptHookModifyInstructionFetchState #55 · 0x7420

ConfigureEptHookModifyPageReadState #56 · 0x7440

ConfigureEptHookModifyPageWriteState #57 · 0x7460

ConfigureEptHookMonitor #58 · 0x7480

ConfigureEptHookMonitorFromVmxRoot #59 · 0x74a0

ConfigureEptHookReservePreallocatedPoolsForEptHooks #60 · 0x74c0

ConfigureEptHookUnHookAllByHookingTag #61 · 0x74d0

ConfigureEptHookUnHookSingleAddress #62 · 0x74e0

ConfigureEptHookUnHookSingleAddressFromVmxRoot #63 · 0x74f0

ConfigureEptHookUnHookSingleHookByHookingTagFromVmxRoot #64 · 0x7500

ConfigureExecTrapAddProcessToWatchingList #65 · 0x7510

ConfigureExecTrapApplyMbecConfiguratinFromKernelSide #66 · 0x7520

ConfigureExecTrapRemoveProcessFromWatchingList #67 · 0x7540

ConfigureInitializeExecTrapOnAllProcessors #68 · 0x7550

ConfigureModeBasedExecHookUninitializeOnAllProcessors #69 · 0x7560

ConfigureSetEferSyscallOrSysretHookType #70 · 0x7570

ConfigureSetExceptionBitmapOnSingleCore #71 · 0x7590

ConfigureSetExternalInterruptExitingOnSingleCore #72 · 0x75a0

ConfigureUninitializeExecTrapOnAllProcessors #73 · 0x75b0

CounterThreadHandle #74 · 0x7d0c0

CounterUpdater #75 · 0x10670

DirectVmcallChangeIoBitmap #76 · 0x75c0

DirectVmcallChangeMsrBitmapRead #77 · 0x75e0

DirectVmcallChangeMsrBitmapWrite #78 · 0x7600

DirectVmcallDisableEferSyscallEvents #79 · 0x7620

DirectVmcallDisableMov2CrExitingForClearingCrEvents #80 · 0x7640

DirectVmcallDisableMov2DrExitingForClearingDrEvents #81 · 0x7660

DirectVmcallDisableRdpmcExiting #82 · 0x7680

DirectVmcallDisableRdtscExitingForClearingTscEvents #83 · 0x76a0

DirectVmcallEnableEferSyscall #84 · 0x76c0

DirectVmcallEnableExternalInterruptExiting #85 · 0x76e0

DirectVmcallEnableMov2DebugRegsExiting #86 · 0x7700

DirectVmcallEnableMovToCrExiting #87 · 0x7720

DirectVmcallEnableRdpmcExiting #88 · 0x7740

DirectVmcallEnableRdtscpExiting #89 · 0x7760

DirectVmcallInvalidateEptAllContexts #90 · 0x7780

DirectVmcallInvalidateSingleContext #91 · 0x77a0

DirectVmcallPerformVmcall #92 · 0x77c0

DirectVmcallResetExceptionBitmapOnlyOnClearingExceptionEvents #93 · 0x77e0

DirectVmcallResetIoBitmap #94 · 0x7800

DirectVmcallResetMsrBitmapRead #95 · 0x7820

DirectVmcallResetMsrBitmapWrite #96 · 0x7840

DirectVmcallSetDisableExternalInterruptExitingOnlyOnClearingInterruptEvents #97 · 0x7860

DirectVmcallSetExceptionBitmap #98 · 0x7880

DirectVmcallSetHiddenBreakpointHook #99 · 0x78a0

DirectVmcallTest #100 · 0x78c0

DirectVmcallUnhookSinglePage #101 · 0x78e0

DirectVmcallUnsetExceptionBitmap #102 · 0x7900

DisassemblerLengthDisassembleEngine #103 · 0x36f0

DisassemblerLengthDisassembleEngineByProcessId #104 · 0x37e0

DisassemblerLengthDisassembleEngineInVmxRootOnTargetProcess #105 · 0x3880

DisassemblerShowInstructionsInVmxNonRootMode #106 · 0x38f0

DisassemblerShowOneInstructionInVmxNonRootMode #107 · 0x3af0

DisassemblerShowOneInstructionInVmxRootMode #108 · 0x3ce0

DllInitialize #109 · 0x2bc0

DllUnload #110 · 0x2bc0

GetGuestCr0 #111 · 0xe380

GetGuestCr2 #112 · 0xe390

GetGuestCr3 #113 · 0xe3a0

GetGuestCr4 #114 · 0xe3b0

GetGuestCr8 #115 · 0xe3c0

GetGuestCs #116 · 0xe3d0

GetGuestDr0 #117 · 0xe420

GetGuestDr1 #118 · 0xe430

GetGuestDr2 #119 · 0xe440

GetGuestDr3 #120 · 0xe450

GetGuestDr6 #121 · 0xe460

GetGuestDr7 #122 · 0xe470

GetGuestDs #123 · 0xe480

GetGuestEs #124 · 0xe4d0

GetGuestFs #125 · 0xe520

GetGuestGdtr #126 · 0xe570

GetGuestGs #127 · 0xe580

GetGuestIdtr #128 · 0xe5d0

GetGuestLdtr #129 · 0xe5e0

GetGuestRFlags #130 · 0xe5f0

GetGuestRIP #131 · 0xe600

GetGuestSs #132 · 0xe610

GetGuestTr #133 · 0xe660

LayoutGetCr3ByProcessId #134 · 0x9140

LayoutGetCurrentProcessCr3 #135 · 0x9180

LayoutGetExactGuestProcessCr3 #136 · 0x91a0

LstarHook #137 · 0x7d018

MemoryManagerReadProcessMemoryNormal #138 · 0x91d0

MemoryManagerWritePhysicalMemoryNormal #139 · 0x9370

MemoryMapperCheckIfPageIsNxBitSetOnTargetProcess #140 · 0x9480

MemoryMapperCheckIfPdeIsLargePageOnTargetProcess #141 · 0x9550

MemoryMapperCheckPteIsPresentOnTargetProcess #142 · 0x9620

MemoryMapperFreeMemoryOnTargetProcess #143 · 0x9690

MemoryMapperGetPteVa #144 · 0x9790

MemoryMapperGetPteVaByCr3 #145 · 0x97a0

MemoryMapperGetPteVaOnTargetProcess #146 · 0x9800

MemoryMapperGetPteVaWithoutSwitchingByCr3 #147 · 0x9860

MemoryMapperReadMemorySafe #148 · 0x9a50

MemoryMapperReadMemorySafeByPhysicalAddress #149 · 0x9a80

MemoryMapperReadMemorySafeFromVmxNonRootByPhysicalAddress #150 · 0x9ab0

MemoryMapperReadMemorySafeOnTargetProcess #151 · 0x9ae0

MemoryMapperReadMemoryUnsafe #152 · 0x9d60

MemoryMapperReserveUsermodeAddressOnTargetProcess #153 · 0x9d90

MemoryMapperSetExecuteDisableToPteOnTargetProcess #154 · 0x9ee0

MemoryMapperSetSupervisorBitWithoutSwitchingByCr3 #155 · 0x9f60

MemoryMapperWriteMemorySafe #156 · 0xa060

MemoryMapperWriteMemorySafeByPhysicalAddress #157 · 0xa0a0

MemoryMapperWriteMemorySafeFromVmxNonRootyPhysicalAddress #158 · 0x9370

MemoryMapperWriteMemorySafeOnTargetProcess #159 · 0xa0d0

MemoryMapperWriteMemoryUnsafe #160 · 0xa3c0

NotifyRoutineActive #161 · 0x7d118

OrigLstar #162 · 0x7d0d0

PciReadCam #163 · 0x3470

PciWriteCam #164 · 0x35a0

PhysicalAddressToVirtualAddress #165 · 0x8f40

PhysicalAddressToVirtualAddressByCr3 #166 · 0x8f50

PhysicalAddressToVirtualAddressByProcessId #167 · 0x8fa0

PhysicalAddressToVirtualAddressOnTargetProcess #168 · 0x8ff0

PoolManagerCheckAndPerformAllocationAndDeallocation #169 · 0xa3f0

PoolManagerFreePool #170 · 0xa610

PoolManagerRequestAllocation #171 · 0xa700

PoolManagerRequestPool #172 · 0xa7a0

PoolManagerShowPreAllocatedPools #173 · 0xa8a0

ProcessExitCleanup #174 · 0x7d0b9

ProcessExitNotifyRoutine #175 · 0x10af0

ReadPhysicalMemoryUsingMapIoSpace #176 · 0x93a0

SetDebugRegisters #177 · 0x2bd0

SetGuestCr0 #178 · 0xe670

SetGuestCr2 #179 · 0xe680

SetGuestCr3 #180 · 0xe690

SetGuestCr4 #181 · 0xe6a0

SetGuestCr8 #182 · 0xe6b0

SetGuestCs #183 · 0xe6c0

SetGuestCsSel #184 · 0xe6f0

SetGuestDr0 #185 · 0xe700

SetGuestDr1 #186 · 0xe710

SetGuestDr2 #187 · 0xe720

SetGuestDr3 #188 · 0xe730

SetGuestDr6 #189 · 0xe740

SetGuestDr7 #190 · 0xe750

SetGuestDs #191 · 0xe760

SetGuestDsSel #192 · 0xe7b0

SetGuestEs #193 · 0xe7c0

SetGuestEsSel #194 · 0xe810

SetGuestFs #195 · 0xe820

SetGuestFsSel #196 · 0xe870

SetGuestGdtr #197 · 0xe880

SetGuestGs #198 · 0xe890

SetGuestGsSel #199 · 0xe8e0

SetGuestIdtr #200 · 0xe8f0

SetGuestLdtr #201 · 0xe900

SetGuestRFlags #202 · 0xd670

SetGuestRIP #203 · 0xd680

SetGuestRSP #204 · 0xe910

SetGuestSs #205 · 0xe920

SetGuestSsSel #206 · 0xe970

SetGuestTr #207 · 0xe980

StopCounterThread #208 · 0x7d0b8

SwitchToCurrentProcessMemoryLayout #209 · 0xaba0

SwitchToPreviousProcess #210 · 0xabc0

SwitchToProcessMemoryLayout #211 · 0xabd0

SwitchToProcessMemoryLayoutByCr3 #212 · 0xac20

SyscallBypassMagic #213 · 0x7d010

TargetDR3 #214 · 0x7d008

TargetProcessId #215 · 0x7d120

TargetSysHandler #216 · 0x7d0d8

TrackedProcessId #217 · 0x7d0c8

TransparentHideDebuggerWrapper #218 · 0x8b40

TransparentUnhideDebuggerWrapper #219 · 0x8c20

VirtualAddressToPhysicalAddress #220 · 0x9040

VirtualAddressToPhysicalAddressByProcessCr3 #221 · 0x9050

VirtualAddressToPhysicalAddressByProcessId #222 · 0x90a0

VirtualAddressToPhysicalAddressOnTargetProcess #223 · 0x90f0

VmFuncApicStoreIoApicFields #224 · 0x8580

VmFuncApicStoreLocalApicFields #225 · 0x8590

VmFuncChangeIgnoreOneMtfState #226 · 0x85a0

VmFuncChangeMtfUnsettingState #227 · 0x85c0

VmFuncCheckAndEnableExternalInterrupts #228 · 0x85e0

VmFuncClearSteppingBits #229 · 0x8600

VmFuncDisableExternalInterruptsAndInterruptWindow #230 · 0x8610

VmFuncEnableAndCheckForPreviousExternalInterrupts #231 · 0x8630

VmFuncEnableMtfAndChangeExternalInterruptState #232 · 0x8650

VmFuncEventInjectBreakpoint #233 · 0x8670

VmFuncEventInjectInterruption #234 · 0x8680

VmFuncEventInjectPageFaultRangeAddress #235 · 0x8690

VmFuncEventInjectPageFaultWithCr2 #236 · 0x86b0

VmFuncGetCsSelector #237 · 0x86d0

VmFuncGetInterruptibilityState #238 · 0x86e0

VmFuncGetLastVmexitRip #239 · 0x86f0

VmFuncGetRflags #240 · 0x8710

VmFuncGetRip #241 · 0x8720

VmFuncIdtQueryEntries #242 · 0x8730

VmFuncInitVmm #243 · 0x8740

VmFuncInjectPendingExternalInterrupts #244 · 0x8750

VmFuncInvalidateEptAllContexts #245 · 0x8770

VmFuncInvalidateEptSingleContext #246 · 0x8780

VmFuncNmiBroadcastInvalidateEptAllContexts #247 · 0x87a0

VmFuncNmiBroadcastInvalidateEptSingleContext #248 · 0x87c0

VmFuncNmiBroadcastRequest #249 · 0x87e0

VmFuncPerformRipIncrement #250 · 0x8800

VmFuncQueryModeExecTrap #251 · 0x8820

VmFuncReadExceptionBitmap #252 · 0x8830

VmFuncRegisterMtfBreak #253 · 0x8840

VmFuncSetExceptionBitmap #254 · 0x8860

VmFuncSetExternalInterruptExiting #255 · 0x8880

VmFuncSetInterruptWindowExiting #256 · 0x88a0

VmFuncSetInterruptibilityState #257 · 0x88b0

VmFuncSetLoadDebugControls #258 · 0x88c0

VmFuncSetMonitorTrapFlag #259 · 0x88d0

VmFuncSetMovControlRegsExiting #260 · 0x88e0

VmFuncSetMovDebugRegsExiting #261 · 0x88f0

VmFuncSetMovToCr3Vmexit #262 · 0x8910

VmFuncSetNmiExiting #263 · 0x8930

VmFuncSetNmiWindowExiting #264 · 0x8940

VmFuncSetPmcVmexit #265 · 0x8950

VmFuncSetRdtscExiting #266 · 0x8960

VmFuncSetRflagTrapFlag #267 · 0x8980

VmFuncSetRflags #268 · 0x8990

VmFuncSetRip #269 · 0x89a0

VmFuncSetSaveDebugControls #270 · 0x89b0

VmFuncSetTriggerEventForCpuids #271 · 0x89c0

VmFuncSetTriggerEventForVmcalls #272 · 0x89d0

VmFuncSetTriggerEventForXsetbvs #273 · 0x89e0

VmFuncSmmPerformSmiOperation #274 · 0x89f0

VmFuncSuppressRipIncrement #275 · 0x8a00

VmFuncUnRegisterMtfBreak #276 · 0x8a20

VmFuncUninitVmm #277 · 0x8a40

VmFuncUnsetExceptionBitmap #278 · 0x8a50

VmFuncVmxBroadcastInitialize #279 · 0x8a70

VmFuncVmxBroadcastUninitialize #280 · 0x8a80

VmFuncVmxCompatibleMemcmp #281 · 0x8a90

VmFuncVmxCompatibleMicroSleep #282 · 0x8aa0

VmFuncVmxCompatibleStrcmp #283 · 0x8ab0

VmFuncVmxCompatibleStrlen #284 · 0x8ac0

VmFuncVmxCompatibleStrncmp #285 · 0x8ad0

VmFuncVmxCompatibleWcscmp #286 · 0x8ae0

VmFuncVmxCompatibleWcslen #287 · 0x8af0

VmFuncVmxCompatibleWcsncmp #288 · 0x8b00

VmFuncVmxGetCurrentExecutionMode #289 · 0x8b10

VmFuncVmxVmcall #290 · 0x8b20

VmFuncWriteExceptionBitmap #291 · 0x8b30

WritePhysicalMemoryUsingMapIoSpace #292 · 0x9410

Imported DLLs & functions 54

HAL.dll 1

KeQueryPerformanceCounter 0x18001d000

hyperevade.dll 6

TransparentCheckAndModifyCpuid 0x18001d028

TransparentCheckAndModifyMsrRead 0x18001d030

TransparentCheckAndModifyMsrWrite 0x18001d038

TransparentHandleSystemCallHook 0x18001d018

TransparentHideDebugger 0x18001d010

TransparentUnhideDebugger 0x18001d020

ntoskrnl.exe 47

__C_specific_handler 0x18001d168

__chkstk 0x18001d088

ExAllocatePoolWithTag 0x18001d1b8

ExFreePoolWithTag 0x18001d1a8

IoAllocateMdl 0x18001d140

IoFreeMdl 0x18001d148

IoGetCurrentProcess 0x18001d0a0

KeBugCheckEx 0x18001d108

KeDelayExecutionThread 0x18001d110

KeGenericCallDpc 0x18001d198

KeGetCurrentIrql 0x18001d170

KeGetCurrentProcessorNumberEx 0x18001d0b8

KeInitializeDpc 0x18001d190

KeInsertQueueDpc 0x18001d188

KeQueryActiveProcessorCount 0x18001d178

KeSetTargetProcessorDpc 0x18001d180

KeSignalCallDpcDone 0x18001d048

KeSignalCallDpcSynchronize 0x18001d050

KeStackAttachProcess 0x18001d0d0

KeUnstackDetachProcess 0x18001d0d8

KfRaiseIrql 0x18001d058

MmAllocateContiguousMemory 0x18001d1a0

MmAllocateMappingAddress 0x18001d0e0

MmCopyMemory 0x18001d0c8

MmFreeContiguousMemory 0x18001d100

MmFreeMappingAddress 0x18001d0e8

MmGetPhysicalAddress 0x18001d090

MmGetVirtualForPhysical 0x18001d098

MmMapIoSpace 0x18001d068

MmMapIoSpaceEx 0x18001d0c0

MmMapLockedPagesSpecifyCache 0x18001d128

MmProbeAndLockPages 0x18001d118

MmUnlockPages 0x18001d120

MmUnmapIoSpace 0x18001d070

MmUnmapLockedPages 0x18001d130

ObfDereferenceObject 0x18001d0a8

PsAcquireProcessExitSynchronization 0x18001d158

PsGetCurrentProcessId 0x18001d078

PsGetCurrentThreadId 0x18001d080

PsGetProcessImageFileName 0x18001d060

PsInitialSystemProcess 0x18001d1b0

PsLookupProcessByProcessId 0x18001d0b0

PsReleaseProcessExitSynchronization 0x18001d160

PsSetCreateProcessNotifyRoutine 0x18001d150

PsTerminateSystemThread 0x18001d138

ZwAllocateVirtualMemory 0x18001d0f0

ZwFreeVirtualMemory 0x18001d0f8