You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
153 lines
23 KiB
153 lines
23 KiB
4 years ago
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
|
||
|
|
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
|
||
|
|
<meta name="generator" content="Doxygen 1.9.1"/>
|
||
|
|
<meta name="viewport" content="width=device-width, initial-scale=1"/>
|
||
|
|
<title>VMProfiler: D:/vmprofiler-qt/dependencies/vmprofiler/include/vmhandlers.hpp Source File</title>
|
||
|
|
<link href="tabs.css" rel="stylesheet" type="text/css"/>
|
||
|
|
<script type="text/javascript" src="jquery.js"></script>
|
||
|
|
<script type="text/javascript" src="dynsections.js"></script>
|
||
|
|
<link href="search/search.css" rel="stylesheet" type="text/css"/>
|
||
|
|
<script type="text/javascript" src="search/searchdata.js"></script>
|
||
|
|
<script type="text/javascript" src="search/search.js"></script>
|
||
|
|
<link href="doxygen.css" rel="stylesheet" type="text/css" />
|
||
|
|
</head>
|
||
|
|
<body>
|
||
|
|
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
|
||
|
|
<div id="titlearea">
|
||
|
|
<table cellspacing="0" cellpadding="0">
|
||
|
|
<tbody>
|
||
|
|
<tr style="height: 56px;">
|
||
|
|
<td id="projectlogo"><img alt="Logo" src="icon.png"/></td>
|
||
|
|
<td id="projectalign" style="padding-left: 0.5em;">
|
||
|
|
<div id="projectname">VMProfiler
|
||
|
|
 <span id="projectnumber">v1.8</span>
|
||
|
|
</div>
|
||
|
|
<div id="projectbrief">vmprofiler is a c++ library which is used to statically analyze VMProtect 2 polymorphic virtual machines. This project is inherited in vmprofiler-qt, vmprofiler-cli, and vmemu.</div>
|
||
|
|
</td>
|
||
|
|
</tr>
|
||
|
|
</tbody>
|
||
|
|
</table>
|
||
|
|
</div>
|
||
|
|
<!-- end header part -->
|
||
|
|
<!-- Generated by Doxygen 1.9.1 -->
|
||
|
|
<script type="text/javascript">
|
||
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
||
|
|
var searchBox = new SearchBox("searchBox", "search",false,'Search','.html');
|
||
|
|
/* @license-end */
|
||
|
|
</script>
|
||
|
|
<script type="text/javascript" src="menudata.js"></script>
|
||
|
|
<script type="text/javascript" src="menu.js"></script>
|
||
|
|
<script type="text/javascript">
|
||
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
||
|
|
$(function() {
|
||
|
|
initMenu('',true,false,'search.php','Search');
|
||
|
|
$(document).ready(function() { init_search(); });
|
||
|
|
});
|
||
|
|
/* @license-end */</script>
|
||
|
|
<div id="main-nav"></div>
|
||
|
|
<!-- window showing the filter options -->
|
||
|
|
<div id="MSearchSelectWindow"
|
||
|
|
onmouseover="return searchBox.OnSearchSelectShow()"
|
||
|
|
onmouseout="return searchBox.OnSearchSelectHide()"
|
||
|
|
onkeydown="return searchBox.OnSearchSelectKey(event)">
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- iframe showing the search results (closed by default) -->
|
||
|
|
<div id="MSearchResultsWindow">
|
||
|
|
<iframe src="javascript:void(0)" frameborder="0"
|
||
|
|
name="MSearchResults" id="MSearchResults">
|
||
|
|
</iframe>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<div id="nav-path" class="navpath">
|
||
|
|
<ul>
|
||
|
|
<li class="navelem"><a class="el" href="dir_d44c64559bbebec7f509842c48db8b23.html">include</a></li> </ul>
|
||
|
|
</div>
|
||
|
|
</div><!-- top -->
|
||
|
|
<div class="header">
|
||
|
|
<div class="headertitle">
|
||
|
|
<div class="title">vmhandlers.hpp</div> </div>
|
||
|
|
</div><!--header-->
|
||
|
|
<div class="contents">
|
||
|
|
<a href="vmhandlers_8hpp.html">Go to the documentation of this file.</a><div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno"> 1</span> <span class="preprocessor">#pragma once</span></div>
|
||
|
|
<div class="line"><a name="l00002"></a><span class="lineno"> 2</span> <span class="preprocessor">#include <<a class="code" href="transform_8hpp.html">transform.hpp</a>></span></div>
|
||
|
|
<div class="line"><a name="l00003"></a><span class="lineno"> 3</span> <span class="preprocessor">#include <<a class="code" href="vmprofiles_8hpp.html">vmprofiles.hpp</a>></span></div>
|
||
|
|
<div class="line"><a name="l00004"></a><span class="lineno"> 4</span>  </div>
|
||
|
|
<div class="line"><a name="l00005"></a><span class="lineno"><a class="line" href="namespacevm_1_1handler.html"> 5</a></span> <span class="keyword">namespace </span><a class="code" href="namespacevm_1_1handler.html">vm::handler</a></div>
|
||
|
|
<div class="line"><a name="l00006"></a><span class="lineno"> 6</span> {</div>
|
||
|
|
<div class="line"><a name="l00012"></a><span class="lineno"><a class="line" href="structvm_1_1handler_1_1handler__t.html"> 12</a></span>  <span class="keyword">struct </span><a class="code" href="structvm_1_1handler_1_1handler__t.html">handler_t</a></div>
|
||
|
|
<div class="line"><a name="l00013"></a><span class="lineno"> 13</span>  {</div>
|
||
|
|
<div class="line"><a name="l00017"></a><span class="lineno"><a class="line" href="structvm_1_1handler_1_1handler__t.html#a7c5be45604678830c9f8b433c94ef830"> 17</a></span>  <a class="code" href="vmutils_8hpp.html#ad24825e11b71d87e40f5c0e88dd980a0">u8</a> <a class="code" href="structvm_1_1handler_1_1handler__t.html#a7c5be45604678830c9f8b433c94ef830">imm_size</a>;</div>
|
||
|
|
<div class="line"><a name="l00018"></a><span class="lineno"> 18</span>  </div>
|
||
|
|
<div class="line"><a name="l00022"></a><span class="lineno"><a class="line" href="structvm_1_1handler_1_1handler__t.html#a47f9e94f5e156d9215e9ae585e928a92"> 22</a></span>  <a class="code" href="namespacevm_1_1transform.html#af3bd71c380a50beece9341287b7cc025">vm::transform::map_t</a> <a class="code" href="structvm_1_1handler_1_1handler__t.html#a47f9e94f5e156d9215e9ae585e928a92">transforms</a>;</div>
|
||
|
|
<div class="line"><a name="l00023"></a><span class="lineno"> 23</span>  </div>
|
||
|
|
<div class="line"><a name="l00027"></a><span class="lineno"><a class="line" href="structvm_1_1handler_1_1handler__t.html#adba165c7493524bf21b2b1aafc15c6be"> 27</a></span>  <a class="code" href="structvm_1_1handler_1_1profile__t.html">vm::handler::profile_t</a> *<a class="code" href="structvm_1_1handler_1_1handler__t.html#adba165c7493524bf21b2b1aafc15c6be">profile</a>;</div>
|
||
|
|
<div class="line"><a name="l00028"></a><span class="lineno"> 28</span>  </div>
|
||
|
|
<div class="line"><a name="l00032"></a><span class="lineno"><a class="line" href="structvm_1_1handler_1_1handler__t.html#a6c080e14331c4092909c3b0f0c27367d"> 32</a></span>  <a class="code" href="vmutils_8hpp.html#a5fdde6e9d3e6c6eca28ecadf2e837d3c">zydis_routine_t</a> <a class="code" href="structvm_1_1handler_1_1handler__t.html#a6c080e14331c4092909c3b0f0c27367d">instrs</a>;</div>
|
||
|
|
<div class="line"><a name="l00033"></a><span class="lineno"> 33</span>  </div>
|
||
|
|
<div class="line"><a name="l00037"></a><span class="lineno"><a class="line" href="structvm_1_1handler_1_1handler__t.html#afa8853308fc1039e4a2940594c3e443e"> 37</a></span>  std::uintptr_t <a class="code" href="structvm_1_1handler_1_1handler__t.html#afa8853308fc1039e4a2940594c3e443e">address</a>;</div>
|
||
|
|
<div class="line"><a name="l00038"></a><span class="lineno"> 38</span>  };</div>
|
||
|
|
<div class="line"><a name="l00039"></a><span class="lineno"> 39</span>  </div>
|
||
|
|
<div class="line"><a name="l00045"></a><span class="lineno"> 45</span>  <span class="keywordtype">bool</span> <a class="code" href="namespacevm_1_1handler.html#ab830e56e2b4ee32851937ae0fe1a4918">has_imm</a>( <span class="keyword">const</span> <a class="code" href="vmutils_8hpp.html#a5fdde6e9d3e6c6eca28ecadf2e837d3c">zydis_routine_t</a> &vm_handler );</div>
|
||
|
|
<div class="line"><a name="l00046"></a><span class="lineno"> 46</span>  </div>
|
||
|
|
<div class="line"><a name="l00052"></a><span class="lineno"> 52</span>  std::optional< std::uint8_t > <a class="code" href="namespacevm_1_1handler.html#a073cb14b6691023771ad8eada2452138">imm_size</a>( <span class="keyword">const</span> <a class="code" href="vmutils_8hpp.html#a5fdde6e9d3e6c6eca28ecadf2e837d3c">zydis_routine_t</a> &vm_handler );</div>
|
||
|
|
<div class="line"><a name="l00053"></a><span class="lineno"> 53</span>  </div>
|
||
|
|
<div class="line"><a name="l00062"></a><span class="lineno"> 62</span>  <span class="keywordtype">bool</span> <a class="code" href="namespacevm_1_1handler.html#aa04be3f452edc65f17c38ef91fbed341">get</a>( <a class="code" href="vmutils_8hpp.html#a5fdde6e9d3e6c6eca28ecadf2e837d3c">zydis_routine_t</a> &vm_entry, <a class="code" href="vmutils_8hpp.html#a5fdde6e9d3e6c6eca28ecadf2e837d3c">zydis_routine_t</a> &vm_handler, std::uintptr_t handler_addr );</div>
|
||
|
|
<div class="line"><a name="l00063"></a><span class="lineno"> 63</span>  </div>
|
||
|
|
<div class="line"><a name="l00074"></a><span class="lineno"><a class="line" href="namespacevm_1_1handler.html#ae40eade4312e1383ae334ad2e0adacbf"> 74</a></span>  <span class="keywordtype">bool</span> <a class="code" href="namespacevm_1_1handler.html#ae40eade4312e1383ae334ad2e0adacbf">get_all</a>( std::uintptr_t module_base, std::uintptr_t image_base, <a class="code" href="vmutils_8hpp.html#a5fdde6e9d3e6c6eca28ecadf2e837d3c">zydis_routine_t</a> &vm_entry,</div>
|
||
|
|
<div class="line"><a name="l00075"></a><span class="lineno"> 75</span>  std::uintptr_t *vm_handler_table, std::vector< handler_t > &vm_handlers );</div>
|
||
|
|
<div class="line"><a name="l00076"></a><span class="lineno"> 76</span>  </div>
|
||
|
|
<div class="line"><a name="l00084"></a><span class="lineno"> 84</span>  <span class="keywordtype">bool</span> <a class="code" href="namespacevm_1_1handler.html#ad63629408ca7f8b34169a38399ffcf02">get_operand_transforms</a>( <a class="code" href="vmutils_8hpp.html#a5fdde6e9d3e6c6eca28ecadf2e837d3c">zydis_routine_t</a> &vm_handler, <a class="code" href="namespacevm_1_1transform.html#af3bd71c380a50beece9341287b7cc025">transform::map_t</a> &<a class="code" href="namespacevm_1_1transform.html#ac5fcbe5497bc1e136caf781b61fbd8f1">transforms</a> );</div>
|
||
|
|
<div class="line"><a name="l00085"></a><span class="lineno"> 85</span>  </div>
|
||
|
|
<div class="line"><a name="l00091"></a><span class="lineno"> 91</span>  <a class="code" href="structvm_1_1handler_1_1profile__t.html">vm::handler::profile_t</a> *<a class="code" href="namespacevm_1_1handler.html#ad410231628efa1c4ee7fe9a8c4c7db90">get_profile</a>( <a class="code" href="structvm_1_1handler_1_1handler__t.html">handler_t</a> &vm_handler );</div>
|
||
|
|
<div class="line"><a name="l00092"></a><span class="lineno"> 92</span>  </div>
|
||
|
|
<div class="line"><a name="l00098"></a><span class="lineno"> 98</span>  <a class="code" href="structvm_1_1handler_1_1profile__t.html">vm::handler::profile_t</a> *<a class="code" href="namespacevm_1_1handler.html#ad410231628efa1c4ee7fe9a8c4c7db90">get_profile</a>( <a class="code" href="namespacevm_1_1handler.html#a83cdfb05acdea9268310c37165bd13c1">vm::handler::mnemonic_t</a> mnemonic );</div>
|
||
|
|
<div class="line"><a name="l00099"></a><span class="lineno"> 99</span>  </div>
|
||
|
|
<div class="line"><a name="l00100"></a><span class="lineno"><a class="line" href="namespacevm_1_1handler_1_1table.html"> 100</a></span>  <span class="keyword">namespace </span>table</div>
|
||
|
|
<div class="line"><a name="l00101"></a><span class="lineno"> 101</span>  {</div>
|
||
|
|
<div class="line"><a name="l00107"></a><span class="lineno"> 107</span>  std::uintptr_t *<a class="code" href="namespacevm_1_1handler_1_1table.html#a664a7f96f12e1305466df77d761d43fc">get</a>( <span class="keyword">const</span> <a class="code" href="vmutils_8hpp.html#a5fdde6e9d3e6c6eca28ecadf2e837d3c">zydis_routine_t</a> &vm_entry );</div>
|
||
|
|
<div class="line"><a name="l00108"></a><span class="lineno"> 108</span>  </div>
|
||
|
|
<div class="line"><a name="l00115"></a><span class="lineno"> 115</span>  <span class="keywordtype">bool</span> <a class="code" href="namespacevm_1_1handler_1_1table.html#a5e8586b80ccde98882291ded921749ff">get_transform</a>( <span class="keyword">const</span> <a class="code" href="vmutils_8hpp.html#a5fdde6e9d3e6c6eca28ecadf2e837d3c">zydis_routine_t</a> &vm_entry, <a class="code" href="vmutils_8hpp.html#ad180fbf8cef52662febedec0f54b6188">zydis_decoded_instr_t</a> *transform_instr );</div>
|
||
|
|
<div class="line"><a name="l00116"></a><span class="lineno"> 116</span>  </div>
|
||
|
|
<div class="line"><a name="l00125"></a><span class="lineno"> 125</span>  std::uint64_t <a class="code" href="namespacevm_1_1handler_1_1table.html#a69494eb8dca48abd03ff543c8adbf186">encrypt</a>( <a class="code" href="vmutils_8hpp.html#ad180fbf8cef52662febedec0f54b6188">zydis_decoded_instr_t</a> &transform_instr, std::uint64_t val );</div>
|
||
|
|
<div class="line"><a name="l00126"></a><span class="lineno"> 126</span>  </div>
|
||
|
|
<div class="line"><a name="l00133"></a><span class="lineno"> 133</span>  std::uint64_t <a class="code" href="namespacevm_1_1handler_1_1table.html#aa8ffcb4e9e445f940723179cf9c87818">decrypt</a>( <a class="code" href="vmutils_8hpp.html#ad180fbf8cef52662febedec0f54b6188">zydis_decoded_instr_t</a> &transform_instr, std::uint64_t val );</div>
|
||
|
|
<div class="line"><a name="l00134"></a><span class="lineno"> 134</span>  } <span class="comment">// namespace table</span></div>
|
||
|
|
<div class="line"><a name="l00135"></a><span class="lineno"> 135</span> } <span class="comment">// namespace vm::handler</span></div>
|
||
|
|
<div class="ttc" id="anamespacevm_1_1handler_1_1table_html_a5e8586b80ccde98882291ded921749ff"><div class="ttname"><a href="namespacevm_1_1handler_1_1table.html#a5e8586b80ccde98882291ded921749ff">vm::handler::table::get_transform</a></div><div class="ttdeci">bool get_transform(const zydis_routine_t &vm_entry, zydis_decoded_instr_t *transform_instr)</div><div class="ttdoc">get the single native instruction used to decrypt vm handler entries...</div><div class="ttdef"><b>Definition:</b> vmhandler.cpp:237</div></div>
|
||
|
|
<div class="ttc" id="anamespacevm_1_1handler_1_1table_html_a664a7f96f12e1305466df77d761d43fc"><div class="ttname"><a href="namespacevm_1_1handler_1_1table.html#a664a7f96f12e1305466df77d761d43fc">vm::handler::table::get</a></div><div class="ttdeci">std::uintptr_t * get(const zydis_routine_t &vm_entry)</div><div class="ttdoc">get the linear virtual address of the vm handler table give a deobfuscated, flattened,...</div><div class="ttdef"><b>Definition:</b> vmhandler.cpp:216</div></div>
|
||
|
|
<div class="ttc" id="anamespacevm_1_1handler_1_1table_html_a69494eb8dca48abd03ff543c8adbf186"><div class="ttname"><a href="namespacevm_1_1handler_1_1table.html#a69494eb8dca48abd03ff543c8adbf186">vm::handler::table::encrypt</a></div><div class="ttdeci">std::uint64_t encrypt(zydis_decoded_instr_t &transform_instr, std::uint64_t val)</div><div class="ttdoc">encrypt a linear virtual address given the transformation that is used to decrypt the vm handler tabl...</div><div class="ttdef"><b>Definition:</b> vmhandler.cpp:276</div></div>
|
||
|
|
<div class="ttc" id="anamespacevm_1_1handler_1_1table_html_aa8ffcb4e9e445f940723179cf9c87818"><div class="ttname"><a href="namespacevm_1_1handler_1_1table.html#aa8ffcb4e9e445f940723179cf9c87818">vm::handler::table::decrypt</a></div><div class="ttdeci">std::uint64_t decrypt(zydis_decoded_instr_t &transform_instr, std::uint64_t val)</div><div class="ttdoc">decrypts a vm handler table entry...</div><div class="ttdef"><b>Definition:</b> vmhandler.cpp:289</div></div>
|
||
|
|
<div class="ttc" id="anamespacevm_1_1handler_html"><div class="ttname"><a href="namespacevm_1_1handler.html">vm::handler</a></div><div class="ttdoc">contains all information pertaining to vm handler identification...</div><div class="ttdef"><b>Definition:</b> vmhandlers.hpp:6</div></div>
|
||
|
|
<div class="ttc" id="anamespacevm_1_1handler_html_a073cb14b6691023771ad8eada2452138"><div class="ttname"><a href="namespacevm_1_1handler.html#a073cb14b6691023771ad8eada2452138">vm::handler::imm_size</a></div><div class="ttdeci">std::optional< std::uint8_t > imm_size(const zydis_routine_t &vm_handler)</div><div class="ttdoc">gets the imm size of a vm handler...</div><div class="ttdef"><b>Definition:</b> vmhandler.cpp:108</div></div>
|
||
|
|
<div class="ttc" id="anamespacevm_1_1handler_html_a83cdfb05acdea9268310c37165bd13c1"><div class="ttname"><a href="namespacevm_1_1handler.html#a83cdfb05acdea9268310c37165bd13c1">vm::handler::mnemonic_t</a></div><div class="ttdeci">mnemonic_t</div><div class="ttdoc">vm handler mnemonic... so you dont need to compare strings!</div><div class="ttdef"><b>Definition:</b> vmprofiles.hpp:13</div></div>
|
||
|
|
<div class="ttc" id="anamespacevm_1_1handler_html_aa04be3f452edc65f17c38ef91fbed341"><div class="ttname"><a href="namespacevm_1_1handler.html#aa04be3f452edc65f17c38ef91fbed341">vm::handler::get</a></div><div class="ttdeci">bool get(zydis_routine_t &vm_entry, zydis_routine_t &vm_handler, std::uintptr_t handler_addr)</div><div class="ttdoc">gets a vm handler, puts all of the native instructions inside of the vm_handler param....</div><div class="ttdef"><b>Definition:</b> vmhandler.cpp:5</div></div>
|
||
|
|
<div class="ttc" id="anamespacevm_1_1handler_html_ab830e56e2b4ee32851937ae0fe1a4918"><div class="ttname"><a href="namespacevm_1_1handler.html#ab830e56e2b4ee32851937ae0fe1a4918">vm::handler::has_imm</a></div><div class="ttdeci">bool has_imm(const zydis_routine_t &vm_handler)</div><div class="ttdoc">given a vm handler returns true if the vm handler decrypts an operand...</div><div class="ttdef"><b>Definition:</b> vmhandler.cpp:102</div></div>
|
||
|
|
<div class="ttc" id="anamespacevm_1_1handler_html_ad410231628efa1c4ee7fe9a8c4c7db90"><div class="ttname"><a href="namespacevm_1_1handler.html#ad410231628efa1c4ee7fe9a8c4c7db90">vm::handler::get_profile</a></div><div class="ttdeci">vm::handler::profile_t * get_profile(handler_t &vm_handler)</div><div class="ttdoc">get a vm handler profile given a handler_t...</div><div class="ttdef"><b>Definition:</b> vmhandler.cpp:177</div></div>
|
||
|
|
<div class="ttc" id="anamespacevm_1_1handler_html_ad63629408ca7f8b34169a38399ffcf02"><div class="ttname"><a href="namespacevm_1_1handler.html#ad63629408ca7f8b34169a38399ffcf02">vm::handler::get_operand_transforms</a></div><div class="ttdeci">bool get_operand_transforms(zydis_routine_t &vm_handler, transform::map_t &transforms)</div><div class="ttdoc">get operand decryption instructions given a vm handler...</div><div class="ttdef"><b>Definition:</b> vmhandler.cpp:117</div></div>
|
||
|
|
<div class="ttc" id="anamespacevm_1_1handler_html_ae40eade4312e1383ae334ad2e0adacbf"><div class="ttname"><a href="namespacevm_1_1handler.html#ae40eade4312e1383ae334ad2e0adacbf">vm::handler::get_all</a></div><div class="ttdeci">bool get_all(std::uintptr_t module_base, std::uintptr_t image_base, zydis_routine_t &vm_entry, std::uintptr_t *vm_handler_table, std::vector< handler_t > &vm_handlers)</div><div class="ttdoc">get all 256 vm handlers...</div></div>
|
||
|
|
<div class="ttc" id="anamespacevm_1_1transform_html_ac5fcbe5497bc1e136caf781b61fbd8f1"><div class="ttname"><a href="namespacevm_1_1transform.html#ac5fcbe5497bc1e136caf781b61fbd8f1">vm::transform::transforms</a></div><div class="ttdeci">std::map< zydis_mnemonic_t, transform_t< T > > transforms</div><div class="ttdef"><b>Definition:</b> transform.hpp:207</div></div>
|
||
|
|
<div class="ttc" id="anamespacevm_1_1transform_html_af3bd71c380a50beece9341287b7cc025"><div class="ttname"><a href="namespacevm_1_1transform.html#af3bd71c380a50beece9341287b7cc025">vm::transform::map_t</a></div><div class="ttdeci">std::map< transform::type, zydis_decoded_instr_t > map_t</div><div class="ttdoc">map of transform type to zydis decoded instruction of the transform...</div><div class="ttdef"><b>Definition:</b> transform.hpp:150</div></div>
|
||
|
|
<div class="ttc" id="astructvm_1_1handler_1_1handler__t_html"><div class="ttname"><a href="structvm_1_1handler_1_1handler__t.html">vm::handler::handler_t</a></div><div class="ttdoc">handler_t contains all the information for a vm handler such as its immidate value size (zero if ther...</div><div class="ttdef"><b>Definition:</b> vmhandlers.hpp:13</div></div>
|
||
|
|
<div class="ttc" id="astructvm_1_1handler_1_1handler__t_html_a47f9e94f5e156d9215e9ae585e928a92"><div class="ttname"><a href="structvm_1_1handler_1_1handler__t.html#a47f9e94f5e156d9215e9ae585e928a92">vm::handler::handler_t::transforms</a></div><div class="ttdeci">vm::transform::map_t transforms</div><div class="ttdoc">transformations to decrypt imm...</div><div class="ttdef"><b>Definition:</b> vmhandlers.hpp:22</div></div>
|
||
|
|
<div class="ttc" id="astructvm_1_1handler_1_1handler__t_html_a6c080e14331c4092909c3b0f0c27367d"><div class="ttname"><a href="structvm_1_1handler_1_1handler__t.html#a6c080e14331c4092909c3b0f0c27367d">vm::handler::handler_t::instrs</a></div><div class="ttdeci">zydis_routine_t instrs</div><div class="ttdoc">native instructions of the vm handler... (calc_jmp/check_vsp is removed from this)....</div><div class="ttdef"><b>Definition:</b> vmhandlers.hpp:32</div></div>
|
||
|
|
<div class="ttc" id="astructvm_1_1handler_1_1handler__t_html_a7c5be45604678830c9f8b433c94ef830"><div class="ttname"><a href="structvm_1_1handler_1_1handler__t.html#a7c5be45604678830c9f8b433c94ef830">vm::handler::handler_t::imm_size</a></div><div class="ttdeci">u8 imm_size</div><div class="ttdoc">imm size in bits, zero if no imm...</div><div class="ttdef"><b>Definition:</b> vmhandlers.hpp:17</div></div>
|
||
|
|
<div class="ttc" id="astructvm_1_1handler_1_1handler__t_html_adba165c7493524bf21b2b1aafc15c6be"><div class="ttname"><a href="structvm_1_1handler_1_1handler__t.html#adba165c7493524bf21b2b1aafc15c6be">vm::handler::handler_t::profile</a></div><div class="ttdeci">vm::handler::profile_t * profile</div><div class="ttdoc">pointer to the profile, nullptr if none...</div><div class="ttdef"><b>Definition:</b> vmhandlers.hpp:27</div></div>
|
||
|
|
<div class="ttc" id="astructvm_1_1handler_1_1handler__t_html_afa8853308fc1039e4a2940594c3e443e"><div class="ttname"><a href="structvm_1_1handler_1_1handler__t.html#afa8853308fc1039e4a2940594c3e443e">vm::handler::handler_t::address</a></div><div class="ttdeci">std::uintptr_t address</div><div class="ttdoc">linear virtual address to the vm handler...</div><div class="ttdef"><b>Definition:</b> vmhandlers.hpp:37</div></div>
|
||
|
|
<div class="ttc" id="astructvm_1_1handler_1_1profile__t_html"><div class="ttname"><a href="structvm_1_1handler_1_1profile__t.html">vm::handler::profile_t</a></div><div class="ttdoc">pre defined vm handler profile containing all compiled time known information about a vm handler....</div><div class="ttdef"><b>Definition:</b> vmprofiles.hpp:84</div></div>
|
||
|
|
<div class="ttc" id="atransform_8hpp_html"><div class="ttname"><a href="transform_8hpp.html">transform.hpp</a></div></div>
|
||
|
|
<div class="ttc" id="avmprofiles_8hpp_html"><div class="ttname"><a href="vmprofiles_8hpp.html">vmprofiles.hpp</a></div></div>
|
||
|
|
<div class="ttc" id="avmutils_8hpp_html_a5fdde6e9d3e6c6eca28ecadf2e837d3c"><div class="ttname"><a href="vmutils_8hpp.html#a5fdde6e9d3e6c6eca28ecadf2e837d3c">zydis_routine_t</a></div><div class="ttdeci">std::vector< zydis_instr_t > zydis_routine_t</div><div class="ttdef"><b>Definition:</b> vmutils.hpp:29</div></div>
|
||
|
|
<div class="ttc" id="avmutils_8hpp_html_ad180fbf8cef52662febedec0f54b6188"><div class="ttname"><a href="vmutils_8hpp.html#ad180fbf8cef52662febedec0f54b6188">zydis_decoded_instr_t</a></div><div class="ttdeci">ZydisDecodedInstruction zydis_decoded_instr_t</div><div class="ttdef"><b>Definition:</b> vmutils.hpp:18</div></div>
|
||
|
|
<div class="ttc" id="avmutils_8hpp_html_ad24825e11b71d87e40f5c0e88dd980a0"><div class="ttname"><a href="vmutils_8hpp.html#ad24825e11b71d87e40f5c0e88dd980a0">u8</a></div><div class="ttdeci">unsigned char u8</div><div class="ttdef"><b>Definition:</b> vmutils.hpp:12</div></div>
|
||
|
|
</div><!-- fragment --></div><!-- contents -->
|
||
|
|
<!-- start footer part -->
|
||
|
|
<hr class="footer"/><address class="footer"><small>
|
||
|
|
Generated by <a href="https://www.doxygen.org/index.html"><img class="footer" src="doxygen.svg" width="104" height="31" alt="doxygen"/></a> 1.9.1
|
||
|
|
</small></address>
|
||
|
|
</body>
|
||
|
|
</html>
|