Skip to content

Instantly share code, notes, and snippets.

@roblabla
Created March 6, 2019 14:13
Show Gist options
  • Save roblabla/74fad6cd443d31d9d078f8b64be31cc4 to your computer and use it in GitHub Desktop.
Save roblabla/74fad6cd443d31d9d078f8b64be31cc4 to your computer and use it in GitHub Desktop.
:ENCLU is vexMode=0 & byte=0x0f; byte=0x01; byte=0xd7 {
if ( EAX != 0x0 ) goto <leaf_1>;
enclu_ereport( RBX, RCX, RDX );
goto <done>;
<leaf_1>
if ( EAX != 0x1 ) goto <leaf_2>;
RAX = enclu_egetkey( RBX, RCX );
ZF = enclu_egetkey_ZF( RBX, RCX );
CF = 0;
PF = 0;
AF = 0;
OF = 0;
SF = 0;
goto <done>;
<leaf_2>
if ( EAX != 0x2 ) goto <leaf_3>;
tempBX:8 = RBX;
tempCX:8 = RCX;
EAX = enclu_eenter_EAX( tempBX, tempCX );
RCX = enclu_eenter_RCX( tempBX, tempCX );
TF = enclu_eenter_TF( tempBX, tempCX );
goto <done>;
<leaf_3>
if ( EAX != 0x3 ) goto <leaf_4>;
TF = enclu_eresume( RBX, RCX );
goto <done>;
<leaf_4>
if ( EAX != 0x4 ) goto <leaf_5>;
RCX = enclu_eexit( RBX );
TF = enclu_eexit_TF( RBX );
goto <done>;
<leaf_5>
if ( EAX != 0x5 ) goto <leaf_6>;
RAX = enclu_eaccept( RBX, RCX );
ZF = enclu_eaccept_ZF( RBX, RCX );
CF = 0;
PF = 0;
AF = 0;
OF = 0;
SF = 0;
goto <done>;
<leaf_6>
if ( EAX != 0x6 ) goto <leaf_7>;
enclu_emodpe( RBX, RCX );
goto <done>;
<leaf_7>
if ( EAX != 0x7 ) goto <unknown>;
RAX = enclu_eacceptcopy( RBX, RCX, RDX );
ZF = enclu_eacceptcopy_ZF( RBX, RCX, RDX );
CF = 0;
PF = 0;
AF = 0;
OF = 0;
SF = 0;
goto <done>;
<unknown>
enclu_unknown();
<done>
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment