mirror of
https://dev.lirent.ru/Vatrog/vm-introspection-engine.git
synced 2026-06-18 00:56:37 +03:00
lirent
25b8ed8ca9
A thin CLI proving the OS-agnostic dump path end to end: open one or more raw memory dumps as flat identity images (vmie_mem) and scan them all for an IDA-style pattern, printing each hit as source:gpa. Two-pass (count, then size the buffer exactly) so nothing is silently truncated. Kept separate from vmie_cli rather than folded in as a subcommand: vmie_cli demonstrates live win32 bring-up, this demonstrates the source-agnostic scan. Its source includes only the public memmodel/sigscan/scan headers and names no Windows symbol - it compiles against include/ alone.