Page 1 of 1
Using virtual time sources.
Posted: 22. Apr 2015, 11:59
by IRabinovich
Hello!
I'm trying to activate virtual time sources for guest OSes, bit I still see real TSC, clocks and ticks. I'm setting up TM fields in the end of the TMR3Init function following way:
Code: Select all
pVM->tm.s.enmTSCMode = TMTSCMODE_VIRT_TSC_EMULATED;
pVM->tm.s.cTSCTicksPerSecond=_2G;
pVM->tm.s.cVirtualTicking=true;
pVM->tm.s.fVirtualSyncTicking=true;
What do I miss to activate virtual time sources for guest OSes? Any help would be very appreciate.
Re: Using virtual time sources.
Posted: 28. Apr 2015, 19:49
by scottgus1
I don't recognize those commands. What are they and where are you entering them?
Re: Using virtual time sources.
Posted: 29. Apr 2015, 20:47
by IRabinovich
Thanks for the reply, I add those commands in the very end of the TMR3Init function (TM.cpp file) in order to initiate virtual time/clock/TSC for the guest OSes. I thought they should do the job, but they didn't.
Re: Using virtual time sources.
Posted: 29. Apr 2015, 20:54
by scottgus1
Still not recognizing what you're doing. Is this the Virtualbox API you're working with, or modifying the OSE version? If so, the forums for those particular uses of Virtualbox might be a better place to post.
Re: Using virtual time sources.
Posted: 1. May 2015, 13:55
by IRabinovich
Yes, I'm modifying the OSE version. I'll write the question onto the VBox OSE topic, thank you.
Re: Using virtual time sources.
Posted: 1. May 2015, 14:22
by mpack
Cross posting is not allowed. I moved this topic for you.
Re: Using virtual time sources.
Posted: 1. May 2015, 14:44
by michaln
Maybe you should start by explain what it is you're trying to do, and what you're hoping to achieve.
Re: Using virtual time sources.
Posted: 4. May 2015, 14:37
by IRabinovich
OK, the main aim is to hide presence of virtual machine, this requires to return fake values with rdtsc(p), time and clock's ticks. This should avoid detection, based on rdtsc(p), GetTickCount (WinAPI) and GetLocalTime/GetSystemTime (WinAPI) calls.