From accba38deef3aae73af62dff8744a232bd490804 Mon Sep 17 00:00:00 2001 From: _xeroxz Date: Fri, 11 Jun 2021 00:48:29 -0700 Subject: [PATCH] vmexit lifter now puts the return address... --- src/vmlifters/vmexit.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/vmlifters/vmexit.cpp b/src/vmlifters/vmexit.cpp index b3eb4a3..55f7a9b 100644 --- a/src/vmlifters/vmexit.cpp +++ b/src/vmlifters/vmexit.cpp @@ -5,6 +5,6 @@ namespace vm::lifters vm::lifters::lifter_t vmexit = { // ret vm::handler::VMEXIT, []( vtil::basic_block *blk, vm::instrs::virt_instr_t *vinstr ) { - blk->vexit( vinstr->trace_data.vsp.qword[ 12 ] ); + blk->vexit( vtil::make_imm( vinstr->trace_data.vsp.qword[ 0x13 ] - vinstr->trace_data.regs.r13 ) ); } }; } \ No newline at end of file