KVM on Windows

[startergo]

Shocker KVM works on Windows!
There is a QEMU fork in combination with the AEHD driver, which is providing full CPU passthrough to QEMU on Windows.

The Device Guard and Credential Guard hardware readiness tool released by Microsoft can disable the Hyper-V Windows 10 features along with Hyper-V. You can either run WHPX or HAXM/EAHD, but not both:

• Download the latest version of the tool from here. The following steps assume version 3.6.
• Unzip.
• Open an elevated (i.e. Run as administrator) Command Prompt:

@powershell -ExecutionPolicy RemoteSigned -Command "X:\path\to\dgreadiness_v3.6\DG_Readiness_Tool_v3.6.ps1 -Disable"

• To disable HAXM/EAHD and enable WHPX you have to run the tool in reverse order replacing -Disable switch with -Enable

The catch:
Can't boot any macOS there. As soon as AVX2 is passed through, the Sequoia panics at corecrypto module.

00:000 00:000 OCCPU: Failed to get FSBFrequency data using Apple Platform Info - Not Found
00:000 00:000 OC: Starting OpenCore...
00:000 00:000 OC: Booter path - \EFI\OC\OpenCore.efi
00:000 00:000 OCFS: Trying to locate filesystem on 7E6C2998 7BE41F98
00:000 00:000 OCFS: Filesystem DP - \EFI\OC\OpenCore.efi
00:000 00:000 OC: Absolute booter path - \EFI\OC\OpenCore.efi
00:000 00:000 OC: Storage root \EFI\OC\OpenCore.efi
00:000 00:000 OCST: Missing vault data, ignoring...
00:000 00:000 OC: OcMiscEarlyInit...
00:000 00:000 OC: Loaded configuration of 32231 bytes
00:000 00:000 OC: Got 8 drivers
00:000 00:000 OC: Watchdog status is 0
00:295 00:295 OC: OpenCore DBG-103-2024-12-03 is loading in Optional mode (0/0)...
00:508 00:213 OC: Boot timestamp - 2024.12.11 13:26:24
00:703 00:195 OCCPU: MP services threads 8 (enabled 8) - Success
00:885 00:181 OCCPU: MP services Pkg 1 Cores 8 Threads 1 - Success
01:060 00:174 OCCPU: Found 11th Gen Intel(R) Core(TM) i7-1185G7 @ 3.00GHz
01:248 00:188 OCCPU: Signature 806C1 Stepping 1 Model 8C Family 6 Type 0 ExtModel 8 ExtFamily 0 uCode 1 CPUID MAX (D/80000008)
01:461 00:212 OCCPU: Hypervisor detected
01:706 00:245 OCCPU: EIST CFG Lock 0
01:911 00:204 OCCPU: Timer address is 608 from LPC
02:112 00:201 OCCPU: Failed to get FSBFrequency data using Apple Platform Info - Not Found
02:407 00:294 OCCPU: Intel TSC:  2995206948Hz,  2995MHz; FSB:  2995206948Hz,  2995MHz; MaxBusRatio: 1
02:586 00:178 OCCPU: Detected Apple Processor Type: 07 -> 0709
02:766 00:180 OCCPU: CPUFrequencyFromTSC  2995206948Hz  2995MHz
02:939 00:173 OCCPU: CPUFrequency  2995206948Hz  2995MHz
03:160 00:220 OCCPU: FSBFrequency  2995206948Hz  2995MHz

Tried booting Mojave with disabled AVX2, but it panics too.
The machines were built with Quickemu on Endeavouros and they run fine there. See the issue here:
MateuszKrawczuk/qemu#2
You can test it like this:

qemu-system-x86_64.exe ^
-accel aehd ^
-global ICH9-LPC.disable_s3=1 ^
-machine q35,hpet=off,smm=off,vmport=off -cpu host,-pdpe1gb,+hypervisor ^
-smp 8 ^
-m 4096 ^
-device virtio-vga ^
-display sdl,gl=on ^
-audiodev dsound,id=snd0 ^
-device ich9-intel-hda ^
-device hda-duplex,audiodev=snd0 ^
-device ahci,id=ahci ^
-device ide-hd,bus=ahci.0,drive=BootLoader,bootindex=0 ^
-drive id=BootLoader,if=none,format=raw,file=fat:rw:"macos-sonoma\EFI",file.label=EFI ^
-device ide-hd,bus=ahci.2,drive=SystemDisk ^
-drive id=SystemDisk,if=none,format=qcow2,file="macos-sonoma\disk.qcow2" ^
-device ide-hd,bus=ahci.3,drive=SystemDisk1 ^
-drive id=SystemDisk1,if=none,format=qcow2,file="macos-mojave\disk.qcow2" ^
-rtc base=localtime ^
-bios "macos-sonoma\OVMF_combined.fd" ^
-drive file="macos-sonoma\EndeavourOS_Endeavour_neo-2024.09.22.iso",media=cdrom,readonly=on ^
-device nec-usb-xhci,id=xhci ^
-device usb-tablet ^
-device usb-kbd ^
-global nec-usb-xhci.msi=off ^
-device isa-applesmc,osk="ourhardworkbythesewordsguardedpleasedontsteal(c)AppleComputerInc" ^
-smbios type=2 ^
-nodefaults ^
-netdev user,id=net0 ^
-device virtio-net-pci,netdev=net0,id=net0,mac=52:54:00:11:22:33 ^
-device ich9-ahci,id=sata

• The EFI folder where Opencore bootloader resides is nested like this in the macos-sonoma folder macos-sonoma\EFI\EFI\boot\bootx64.efi

• Combine OVMF code and VARS files for Windows:

copy /B OVMF_VARS.fd + OVMF_CODE.fd OVMF_combined.fd

• Original Linux script:

#!/usr/bin/env bash
/usr/bin/qemu-system-x86_64 \
    -name macos-mojave,process=macos-mojave \
    -machine q35,hpet=off,smm=off,vmport=off,accel=kvm \
    -global kvm-pit.lost_tick_policy=discard \
    -global ICH9-LPC.disable_s3=1 \
    -device isa-applesmc,osk=ourhardworkbythesewordsguardedpleasedontsteal\(c\)AppleComputerInc \
    -cpu host,-pdpe1gb,+hypervisor \
    -smp cores=2,threads=2,sockets=1 \
    -m 16G \
    -rtc base=localtime,clock=host,driftfix=slew \
    -pidfile macos-mojave/macos-mojave.pid \
    -vga none \
    -device VGA,xres=1280,yres=800,vgamem_mb=256 \
    -display sdl,gl=on \
    -device virtio-rng-pci,rng=rng0 \
    -object rng-random,id=rng0,filename=/dev/urandom \
    -device usb-ehci,id=spicepass \
    -chardev spicevmc,id=usbredirchardev1,name=usbredir \
    -device usb-redir,chardev=usbredirchardev1,id=usbredirdev1 \
    -chardev spicevmc,id=usbredirchardev2,name=usbredir \
    -device usb-redir,chardev=usbredirchardev2,id=usbredirdev2 \
    -chardev spicevmc,id=usbredirchardev3,name=usbredir \
    -device usb-redir,chardev=usbredirchardev3,id=usbredirdev3 \
    -device pci-ohci,id=smartpass \
    -device usb-ccid \
    -chardev spicevmc,id=ccid,name=smartcard \
    -device ccid-card-passthru,chardev=ccid \
    -device usb-ehci,id=input \
    -device usb-kbd,bus=input.0 \
    -k en-us \
    -device usb-tablet,bus=input.0 \
    -audiodev pa,id=audio0 \
    -device intel-hda \
    -device hda-micro,audiodev=audio0 \
    -device vmxnet3,netdev=nic \
    -netdev user,hostname=macos-mojave,hostfwd=tcp::22220-:22,smb=/home/endeavour/Public,id=nic \
    -global driver=cfi.pflash01,property=secure,value=on \
    -drive if=pflash,format=raw,unit=0,file=macos-mojave/OVMF_CODE.fd,readonly=on \
    -drive if=pflash,format=raw,unit=1,file=macos-mojave/OVMF_VARS-1920x1080.fd \
    -device ahci,id=ahci \
    -device ide-hd,bus=ahci.0,drive=BootLoader,bootindex=0 \
    -drive id=BootLoader,if=none,format=qcow2,file=macos-mojave/OpenCore.qcow2 \
    -device ide-hd,bus=ahci.2,drive=SystemDisk \
    -drive id=SystemDisk,if=none,format=qcow2,file=macos-mojave/disk.qcow2 \
    -fsdev local,id=fsdev0,path=/home/endeavour/Public,security_model=mapped-xattr \
    -device virtio-9p-pci,fsdev=fsdev0,mount_tag=Public-endeavour \
    -monitor unix:macos-mojave/macos-mojave-monitor.socket,server,nowait \
    -serial unix:macos-mojave/macos-mojave-serial.socket,server,nowait 2>/dev/null

I can't understand what gives as I can boot Endeavouros and I can verify that the CPU is passed through and AVX2 is definitely there:

Any ideas? Why can't I boot macOS, which boots fine in Linux with the same configuration?