Merge branch 'dev' into 'master'

fixed vmexit profile

See merge request vmp2/vmprofiler!6
merge-requests/7/merge v1.6
_xeroxz 4 years ago
commit 5129d39eb7

@ -7,22 +7,19 @@ namespace vm
namespace profile namespace profile
{ {
vm::handler::profile_t vmexit = { vm::handler::profile_t vmexit = {
// MOV RAX, RBP // MOV RSP, RBP
// POPFQ
// RET // RET
"VMEXIT", "VMEXIT",
VMEXIT, VMEXIT,
NULL, NULL,
{ { // MOV RAX, RBP { { // MOV RSP, RBP
[]( const zydis_decoded_instr_t &instr ) -> bool { []( const zydis_decoded_instr_t &instr ) -> bool {
return instr.mnemonic == ZYDIS_MNEMONIC_MOV && return instr.mnemonic == ZYDIS_MNEMONIC_MOV &&
instr.operands[ 0 ].type == ZYDIS_OPERAND_TYPE_REGISTER && instr.operands[ 0 ].type == ZYDIS_OPERAND_TYPE_REGISTER &&
instr.operands[ 0 ].reg.value == ZYDIS_REGISTER_RAX && instr.operands[ 0 ].reg.value == ZYDIS_REGISTER_RSP &&
instr.operands[ 1 ].type == ZYDIS_OPERAND_TYPE_REGISTER && instr.operands[ 1 ].type == ZYDIS_OPERAND_TYPE_REGISTER &&
instr.operands[ 1 ].reg.value == ZYDIS_REGISTER_RBP; instr.operands[ 1 ].reg.value == ZYDIS_REGISTER_RBP;
}, },
// POPFQ
[]( const zydis_decoded_instr_t &instr ) -> bool { return instr.mnemonic == ZYDIS_MNEMONIC_POPFQ; },
// RET // RET
[]( const zydis_decoded_instr_t &instr ) -> bool { []( const zydis_decoded_instr_t &instr ) -> bool {
return instr.mnemonic == ZYDIS_MNEMONIC_RET; return instr.mnemonic == ZYDIS_MNEMONIC_RET;

Loading…
Cancel
Save