Fixing name issue with Rekall VMCS - To test

plugin/hypervisors/vmcs_layouts/nehalem.py

@@ -27,7 +27,7 @@
 "GUEST_FS_ATTR": 0x9d,
 "HOST_IA32_PAT_HIGH": 0xc9,
 "VIRTUAL_APIC_PAGE_ADDR_HIGH": 0x39,
-"APIC_ACCESS_ADDR_FULL": 0x1e,
+"APIC_ACCESS_ADDR": 0x1e,
 "GUEST_FS_BASE": 0x9a,
 "GUEST_IA32_EFER_HIGH": 0x45,
 "GUEST_IDTR_BASE": 0xb2,
@@ -42,21 +42,21 @@
 "EXIT_MSR_LOAD_COUNT": 0x51,
 "ENTRY_MSR_LOAD_ADDR_HIGH": 0x33,
 "PAGEFAULT_ERRCODE_MASK": 0x4c,
-"IO_BITMAP_A_FULL": 0x28,
+"IO_BITMAP_A": 0x28,
 "IDT_VECTORING_ERRCODE": 0x5f,
 "ABORT_INDICATOR": 0x1,
 "GUEST_IDTR_LIMIT": 0xb5,
 "CR4_READ_SHADOW": 0xf6,
 "GUEST_IA32_SYSENTER_CS": 0x65,
 "GUEST_IA32_PAT_HIGH": 0x43,
 "IS_SHADOW_VMCS": 0x0,
-"EPT_POINTER_FULL": 0x3a,
+"EPT_POINTER": 0x3a,
 "GUEST_PENDING_DEBUG_EXCEPT": 0x7a,
 "GUEST_ES_BASE": 0x82,
 "HOST_FS_BASE": 0xd4,
 "HOST_FS_SEL": 0xc4,
-"GUEST_PDPTE2_FULL": 0xec,
-"GUEST_PHYSICAL_ADDR_FULL": 0x3c,
+"GUEST_PDPTE2": 0xec,
+"GUEST_PHYSICAL_ADDR": 0x3c,
 "VPID": 0xbc,
 "HOST_CR3": 0xd0,
 "HOST_CR0": 0xce,
@@ -72,16 +72,16 @@
 "IO_BITMAP_B_HIGH": 0x2b,
 "GUEST_SS_BASE": 0x8e,
 "GUEST_IA32_SYSENTER_ESP": 0x7c,
-"ENTRY_MSR_LOAD_ADDR_FULL": 0x32,
+"ENTRY_MSR_LOAD_ADDR": 0x32,
 "EXIT_INSTR_LEN": 0x60,
-"GUEST_IA32_DEBUGCTL_FULL": 0x40,
+"GUEST_IA32_DEBUGCTL": 0x40,
 "GUEST_LDTR_ATTR": 0xa9,
 "HOST_ES_SEL": 0xc0,
 "EXIT_INTERRUPT_INFO": 0x5c,
 "GUEST_LDTR_LIMIT": 0xa8,
 "GUEST_DS_LIMIT": 0x96,
 "GUEST_RIP": 0x76,
-"GUEST_IA32_PERF_CTL_FULL": 0x46,
+"GUEST_IA32_PERF_CTL": 0x46,
 "GUEST_TR_LIMIT": 0xae,
 "PAGEFAULT_ERRCODE_MATCH": 0x4d,
 "INSTR_INFO": 0x61,
@@ -117,21 +117,21 @@
 "GUEST_ES_ATTR": 0x85,
 "EXIT_REASON": 0x5b,
 "GUEST_PHYSICAL_ADDR_HIGH": 0x3d,
-"HOST_IA32_EFER_FULL": 0xca,
+"HOST_IA32_EFER": 0xca,
 "GUEST_GS_LIMIT": 0xa2,
 "GUEST_GS_SEL": 0x9e,
 "APIC_ACCESS_ADDR_HIGH": 0x1f,
 "GUEST_SMBASE": 0x64,
-"HOST_IA32_PAT_FULL": 0xc8,
+"HOST_IA32_PAT": 0xc8,
 "HOST_GS_SEL": 0xc5,
 "CR3_TARGET_COUNT": 0x4e,
 "HOST_RSP": 0xe2,
 "HOST_RIP": 0xe4,
 "PROC_VM_EXEC_CONTROLS2": 0x49,
-"EXIT_MSR_STORE_ADDR_FULL": 0x2e,
+"EXIT_MSR_STORE_ADDR": 0x2e,
 "IO_BITMAP_A_HIGH": 0x29,
-"EXECUTIVE_VMCS_PTR_FULL": 0x34,
-"HOST_IA32_PERF_CTL_FULL": 0xcc,
+"EXECUTIVE_VMCS_PTR": 0x34,
+"HOST_IA32_PERF_CTL": 0xcc,
 "HOST_TR_BASE": 0xd8,
 "GUEST_CS_LIMIT": 0x8a,
 "EXIT_QUALIFICATION": 0x66,
@@ -144,44 +144,44 @@
 "IO_RIP": 0x6e,
 "ENTRY_CONTROLS": 0x52,
 "GUEST_PDPTE0_HIGH": 0xe9,
-"GUEST_IA32_PAT_FULL": 0x42,
+"GUEST_IA32_PAT": 0x42,
 "CR3_TARGET_2": 0xfc,
 "GUEST_GS_ATTR": 0xa3,
 "GUEST_TR_SEL": 0xaa,
 "HOST_IA32_SYSENTER_ESP": 0xde,
 "GUEST_IA32_DEBUGCTL_HIGH": 0x41,
-"IO_BITMAP_B_FULL": 0x2a,
-"GUEST_PDPTE0_FULL": 0xe8,
+"IO_BITMAP_B": 0x2a,
+"GUEST_PDPTE0": 0xe8,
 "EPT_POINTER_HIGH": 0x3b,
 "GUEST_GDTR_BASE": 0xb0,
 "INSTR_ERROR": 0x3,
-"VIRTUAL_APIC_PAGE_ADDR_FULL": 0x38,
-"GUEST_PDPTE3_FULL": 0xee,
+"VIRTUAL_APIC_PAGE_ADDR": 0x38,
+"GUEST_PDPTE3": 0xee,
 "GUEST_CR0": 0xb6,
 "GUEST_CR3": 0xb8,
 "GUEST_CR4": 0xba,
 "HOST_IDTR_BASE": 0xdc,
-"GUEST_PDPTE1_FULL": 0xea,
-"EXIT_MSR_LOAD_ADDR_FULL": 0x30,
+"GUEST_PDPTE1": 0xea,
+"EXIT_MSR_LOAD_ADDR": 0x30,
 "CR4_MASK": 0xf2,
 "ENTRY_MSR_LOAD_COUNT": 0x53,
-"GUEST_IA32_EFER_FULL": 0x44,
+"GUEST_IA32_EFER": 0x44,
 "PIN_VM_EXEC_CONTROLS": 0x4a,
 "GUEST_SS_SEL": 0x8c,
 "HOST_IA32_PERF_CTL_HIGH": 0xcd,
 "GUEST_DR7": 0x72,
 "GUEST_DS_ATTR": 0x97,
 "CR0_MASK": 0xf0,
 "EXECUTIVE_VMCS_PTR_HIGH": 0x35,
-"VMCS_LINK_PTR_FULL": 0x3e,
+"VMCS_LINK_POINTER": 0x3e,
 "GUEST_ES_SEL": 0x80,
 "VMCS_LINK_PTR_HIGH": 0x3f,
-"MSR_BITMAP_FULL": 0x2c,
+"MSR_BITMAP": 0x2c,
 "GUEST_IA32_PERF_CTL_HIGH": 0x47,
 "EXIT_MSR_STORE_ADDR_HIGH": 0x2f,
 "EXIT_MSR_LOAD_ADDR_HIGH": 0x31,
 "GUEST_RSP": 0x74,
-"TSC_OFFSET_FULL": 0x36,
+"TSC_OFFSET": 0x36,
 "GUEST_IA32_SYSENTER_EIP": 0x7e,
 "GUEST_INTERRUPTIBILITY_INFO": 0x62,
 "EXIT_MSR_STORE_COUNT": 0x50,