hLunaaa
/ callback.c
Created
April 30, 2025 02:43
— forked from esoterix/callback.c
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| void InstrumentationCallback(CONTEXT *context) | |
| { | |
| TEB *teb = NtCurrentTeb(); | |
| context->Rip = teb->InstrumentationCallbackPreviousPc; | |
| context->Rsp = teb->InstrumentationCallbackPreviousSp; | |
| context->Rcx = context->R10; | |
| // Prevent recursion | |
| if (!teb->InstrumentationCallbackDisabled) { |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #pragma once | |
| // | |
| // https://www.intel.com/content/dam/www/public/us/en/documents/manuals/64-ia-32-architectures-software-developer-vol-3a-part-1-manual.pdf | |
| // | |
| #define __pfn_to_page(pfn) (pfn << PAGE_SHIFT) | |
| #define __page_to_pfn(pfn) (pfn >> PAGE_SHIFT) | |
| union virt_addr_t |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #include <iostream> | |
| #include <thread> | |
| static constexpr u32 dynamic_cycles = 10, | |
| standard_sleep = 500, | |
| vm_cycle_ratio = 100, | |
| cycle_ratio = 75; | |
| // -- rdtsc -- | |
| // https://github.com/hfiref0x/VBoxHardenedLoader |