Create a gist now

Instantly share code, notes, and snippets.

Embed
What would you like to do?
DRAKVUF emulate no write of the shadow page
if (event->mem_event.out_access & VMI_MEMACCESS_W)
{
g_free(pass);
PRINT_DEBUG("Somebody try to write to the shadow page, let's emulate it instead\n");
return rsp | VMI_EVENT_RESPONSE_EMULATE_NOWRITE;
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment