New HideVM plugin

[blsvntn]

Hello! This plugin is designed to impove stealth of Windows VM while analyzing malware.

1. It advances boot time by modifying KUSER_SHARED_DATA.TickCount and KUSER_SHARED_DATA.TickCountMultiplier fields;
2. Hooks IWbemServices::ExecQuery to spoof WQL-queries to WMI objects that aren't present on VM. Name of the requested object is overwritten to Win32_BIOS which is alway presented. It is done to bypass checks like in al-khaser project (https://github.com/LordNoteworthy/al-khaser/blob/06399c26a488c1bbdea29fe2023cf5360b640bb7/al-khaser/AntiVM/Generic.cpp#L1673)
3. Hooks NtDeviceIoControlFile syscall in 3 stages to provide fake data when MSAcpi_ThermalZoneTemperature object is requested to check current temperature.

[drakvuf-jenkins]

Can one of the admins verify this patch?

[tklengyel]

@drakvuf-jenkins Test this please

[tklengyel]

@drakvuf-jenkins Test this please

[tklengyel]

@drakvuf-jenkins Test this please

[tklengyel]

@blsvntn once review comments are resolved we are good to merge

[disaykin]

@tklengyel I already use this plugin and I think this PR is good enough to merge.

[tklengyel]

Sgtm