emu_shellcode.h File Reference

#include <stdint.h>

Include dependency graph for emu_shellcode.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Classes
struct	emu_stats
Functions
int32_t	emu_shellcode_test (struct emu *e, uint8_t *data, uint16_t size)
struct emu_stats *	emu_stats_new (void)
void	emu_stats_free (struct emu_stats *es)

---

Function Documentation

int32_t emu_shellcode_test	(	struct emu *	e,
		uint8_t *	data,
		uint16_t	size
	)

Tests a given buffer for possible shellcodes

Parameters:

	e	the emu
	data	the buffer to test
	size	the size of the buffer

Returns:

on success, the offset within the buffer where the shellcode is suspected on failure (no shellcode detected), -1

References emu_stats::cpu, emu_list_item::data, emu_stats::eip, emu_cpu_eflags_set(), emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_getpc_check(), emu_hashtable_free(), emu_hashtable_new(), emu_hashtable_ptr_cmp(), emu_hashtable_ptr_hash(), emu_list_item_create(), emu_memory_get(), emu_memory_mode_ro(), emu_memory_mode_rw(), emu_memory_write_block(), emu_shellcode_run_and_track(), emu_source_instruction_graph_create(), emu_stats_free(), emu_track_and_source_free(), emu_track_and_source_new(), esp, logDebug, logPF, STATIC_OFFSET, emu_stats::steps, tested_positions_cmp(), and emu_list_item::uint32.

Here is the call graph for this function:

void emu_stats_free

(

struct emu_stats *

es

)

Referenced by emu_shellcode_test().

struct emu_stats* emu_stats_new

(

void

)

[read]

Referenced by emu_shellcode_run_and_track().