env_w32_dll_export_kernel32_hooks.c File Reference

#include <stdlib.h>
#include <string.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <sys/wait.h>
#include <unistd.h>
#include <errno.h>
#include "../../../config.h"
#include "emu/emu.h"
#include "emu/emu_log.h"
#include "emu/emu_memory.h"
#include "emu/emu_cpu.h"
#include "emu/emu_cpu_data.h"
#include "emu/emu_cpu_stack.h"
#include "emu/emu_hashtable.h"
#include "emu/emu_string.h"
#include "emu/environment/emu_env.h"
#include "emu/environment/emu_profile.h"
#include "emu/environment/win32/emu_env_w32.h"
#include "emu/environment/win32/emu_env_w32_dll.h"
#include "emu/environment/win32/emu_env_w32_dll_export.h"
#include "emu/environment/win32/env_w32_dll_export_kernel32_hooks.h"

Include dependency graph for env_w32_dll_export_kernel32_hooks.c:

Functions
int32_t	env_w32_hook_CloseHandle (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_CreateFileA (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_CreateProcessA (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_DeleteFileA (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_ExitProcess (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_ExitThread (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_GetVersion (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_GetProcAddress (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_GetSystemDirectoryA (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_GetTempPathA (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_GetTickCount (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook__hwrite (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook__lcreat (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook__lclose (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook__lwrite (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_LoadLibrayA (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_malloc (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_memset (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_Sleep (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_SetUnhandledExceptionFilter (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_WaitForSingleObject (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_WinExec (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_WriteFile (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_VirtualProtect (struct emu_env *env, struct emu_env_hook *hook)

---

Function Documentation

int32_t env_w32_hook__hwrite	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References env_w32_hook__lwrite().

Here is the call graph for this function:

int32_t env_w32_hook__lclose	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook__lcreat	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_read_string(), emu_string_char(), emu_string_free(), emu_string_new(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook__lwrite	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_read_block(), logDebug, and POP_DWORD.

Referenced by env_w32_hook__hwrite().

Here is the call graph for this function:

int32_t env_w32_hook_CloseHandle	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_CreateFileA	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_read_string(), emu_string_char(), emu_string_free(), emu_string_new(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_CreateProcessA	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References _STARTUPINFO::cb, _STARTUPINFO::cbReserved2, _STARTUPINFO::dwFillAttribute, _STARTUPINFO::dwFlags, _PROCESS_INFORMATION::dwProcessId, _PROCESS_INFORMATION::dwThreadId, _STARTUPINFO::dwX, _STARTUPINFO::dwXCountChars, _STARTUPINFO::dwXSize, _STARTUPINFO::dwY, _STARTUPINFO::dwYCountChars, _STARTUPINFO::dwYSize, eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_read_dword(), emu_memory_read_string(), emu_memory_write_dword(), emu_string_char(), emu_string_free(), emu_string_new(), _PROCESS_INFORMATION::hProcess, _STARTUPINFO::hStdError, _STARTUPINFO::hStdInput, _STARTUPINFO::hStdOutput, _PROCESS_INFORMATION::hThread, logDebug, _STARTUPINFO::lpDesktop, _STARTUPINFO::lpReserved, _STARTUPINFO::lpReserved2, _STARTUPINFO::lpTitle, POP_DWORD, si, and _STARTUPINFO::wShowWindow.

Here is the call graph for this function:

int32_t env_w32_hook_DeleteFileA	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References emu_cpu_eip_set(), emu_cpu_get(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_ExitProcess	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References emu_cpu_eip_set(), emu_cpu_get(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_ExitThread	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References emu_cpu_eip_set(), emu_cpu_get(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_GetProcAddress	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References emu_env_w32_dll::baseaddr, eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_hashtable_search(), emu_memory_get(), emu_memory_read_string(), emu_string_char(), emu_string_free(), emu_string_new(), emu_env_w32_dll::exports_by_fnname, logDebug, POP_DWORD, emu_cpu::reg, and emu_hashtable_item::value.

Here is the call graph for this function:

int32_t env_w32_hook_GetSystemDirectoryA	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_write_block(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_GetTempPathA	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_write_block(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_GetTickCount	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_GetVersion	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_LoadLibrayA	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_env_w32_load_dll(), emu_memory_get(), emu_memory_read_string(), emu_string_char(), emu_string_free(), emu_string_new(), logDebug, POP_DWORD, and emu_cpu::reg.

Here is the call graph for this function:

int32_t env_w32_hook_malloc	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_alloc(), logDebug, emu_cpu::mem, POP_DWORD, and PUSH_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_memset	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, POP_DWORD, and PUSH_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_SetUnhandledExceptionFilter	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_Sleep	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_VirtualProtect	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_WaitForSingleObject	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_WinExec	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_read_string(), emu_string_char(), emu_string_free(), emu_string_new(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_WriteFile	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_read_block(), emu_memory_write_dword(), logDebug, and POP_DWORD.

Here is the call graph for this function: