jono

Have you tried this? https://github.com/jonomango/hv/issues/13#issuecomment-1429118423

Sorry, the example in the um project won't work. It is leftover code from when I was debugging EAC and that virtual address is most likely invalid.

The `hv_size` variable is probably wrong then. It should be set to the `SizeOfImage` for the compiled hv.sys. You can find this with PE-Bear or a similar tool. If the...

I've actually noticed this as well in my own tests recently. I'm not sure what I've changed, but it's failing to pass pafish and my own detection suite most of...

BTW, was this test done with the latest commit? It would probably be a good idea to remove the logging since that adds some overhead.

This is super weird... I'm testing using the following code and getting strange results: ```cpp int info[4]; while (true) { auto const start = __rdtsc(); __cpuidex(info, 0, 0); auto const...

Hi @clown444, please check out this commit: https://github.com/jonomango/hv/commit/a4059677b225ff72cdb2c0a7d2cc68d8d9475106. I've modified the timing evasion algorithm and it (mostly) evades pafish on my machine. Unfortunately, it is still very inconsistent, but it'll...

@AIVDNL Thank you. I'm working on a new solution which I *think* should fix all the issues, but I'm having a bit of trouble with the actual implementation details... The...

The reason is because the host has its own interrupt descriptor table. Other hypervisors simply share the guest IDT, which is not a good idea.

Thats actually pretty interesting, thanks. I have something similar on my TODO list already, but haven't gotten around to implementing it yet... https://github.com/jonomango/hv/blob/main/hv/ept.cpp#L42-L44.