Welcome to Qualcomm HypX’s documentation!

Warning

This is not official documentation. All of this knowledge has been gained through reverse engineering

This is some unofficial documentation for the Qualcomm HypX hypervisor. The goal is to uncover as much of the hypervisor as possible through reverse engineering, emulation, and other techniques.

If you’re not familiar with AArch64 architecture and system programming, I recommend checking out Intro to AArch64 Architecture. Otherwise, I would suggest starting at Intro to HypX

Note all the research for this project was done an SM-G9860 with a firmware version of G9860ZCS3HWC1.

Context

• Intro to AArch64 Architecture
  • Registers
  • Exception Levels
  • System Registers
  • Transitioning Between Exception Levels

Documentation

• Intro to HypX
  • What is HypX and what does it do?
  • Getting the Binary, Basic Reversing
  • uh_call Handler
  • HypX Register
• The Property Subsystem
  • Property Subsystem Inner Workings
• HypX Internal Logging Mechanism
  • Initializing the Log
  • A look at dprintf
• Value Reference