added some docs to vmctx... updated test code...

main
John Doe 3 years ago
parent 14b145acc5
commit f252173d7c

@ -12,7 +12,15 @@ class vmctx_t {
const std::uintptr_t m_module_base, m_image_base, m_vm_entry_rva,
m_image_size;
/// <summary>
/// m_vip and m_vsp are volitile and are subject to change... they are set to
/// the ones used in vm enter but can be changed by external source code...
/// </summary>
zydis_register_t m_vip, m_vsp;
/// <summary>
/// the virtual machine enter flattened and deobfuscated...
/// </summary>
zydis_routine_t m_vm_entry;
};
} // namespace vm

@ -109,10 +109,10 @@ int __cdecl main(int argc, const char* argv[]) {
}
vm::utils::print(vmctx.m_vm_entry);
std::printf("> Virtual Instruction Pointer Register: %s\n",
std::printf("> Starting Virtual Instruction Pointer Register: %s\n",
ZydisRegisterGetString(vmctx.m_vip));
std::printf("> Virtual Stack Pointer Register: %s\n",
std::printf("> Starting Virtual Stack Pointer Register: %s\n",
ZydisRegisterGetString(vmctx.m_vsp));
// testing vmlocate port for vmp3...

Loading…
Cancel
Save