mirror of
https://dev.lirent.ru/Vatrog/vm-introspection-engine.git
synced 2026-06-18 06:36:37 +03:00
Windows guest VMI core: host library, CLI, guest agent
Static library over a flat RW mmap of guest RAM: GPA/GVA paging walks, beacon-driven bootstrap, dynamic struct-offset profiling, process and module enumeration, a region map, and value/pointer/signature scanners on a shared windowed sweep. Public API in include/; internals under src/. Thin CLI demonstrator over the public API. Guest agent cross-compiled to Windows x86-64 via mingw-w64. CMake: static library + CLI + guest target, C17.
This commit is contained in:
@@ -0,0 +1,27 @@
|
||||
#ifndef CONTRACT_MAGIC0
|
||||
#define CONTRACT_MAGIC0 0x3A7C1E94B2D6F058ull
|
||||
#endif
|
||||
|
||||
#ifndef CONTRACT_MAGIC1
|
||||
#define CONTRACT_MAGIC1 0x9F41D80E6BC57A23ull
|
||||
#endif
|
||||
|
||||
#ifndef CONTRACT_ACK
|
||||
#define CONTRACT_ACK 0xACED5EEDACED5EEDull
|
||||
#endif
|
||||
|
||||
#ifndef W32MS_CONTRACT_H
|
||||
#define W32MS_CONTRACT_H
|
||||
|
||||
#include <stdint.h>
|
||||
|
||||
#pragma pack(push, 1)
|
||||
typedef struct {
|
||||
uint64_t magic0;
|
||||
uint64_t magic1;
|
||||
uint64_t va_self;
|
||||
uint64_t ack;
|
||||
} contract;
|
||||
#pragma pack(pop)
|
||||
|
||||
#endif
|
||||
Reference in New Issue
Block a user