env_w32_dll_export_kernel32_hooks.h File Reference

#include <stdint.h>

Include dependency graph for env_w32_dll_export_kernel32_hooks.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Classes
struct	_PROCESS_INFORMATION
struct	_STARTUPINFO
Defines
#define	HANDLE   int32_t
#define	DWORD   uint32_t
#define	WORD   uint16_t
#define	LPTSTR   char *
#define	LPBYTE   char *
Typedefs
typedef struct _PROCESS_INFORMATION	PROCESS_INFORMATION
typedef struct _PROCESS_INFORMATION *	LPPROCESS_INFORMATION
typedef struct _STARTUPINFO	STARTUPINFO
typedef struct _STARTUPINFO *	LPSTARTUPINFO
Functions
int32_t	env_w32_hook_CloseHandle (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_CreateFileA (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_CreateProcessA (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_DeleteFileA (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_ExitProcess (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_ExitThread (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_GetProcAddress (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_GetSystemDirectoryA (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_GetTempPathA (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_GetTickCount (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_GetVersion (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook__hwrite (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook__lclose (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook__lcreat (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_LoadLibrayA (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook__lwrite (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_malloc (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_memset (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_SetUnhandledExceptionFilter (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_Sleep (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_WaitForSingleObject (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_WinExec (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_WriteFile (struct emu_env *env, struct emu_env_hook *hook)
int32_t	env_w32_hook_VirtualProtect (struct emu_env *env, struct emu_env_hook *hook)

---

Define Documentation

#define DWORD   uint32_t

Referenced by FETCH32(), and get_operand_string().

#define HANDLE   int32_t

#define LPBYTE   char *

#define LPTSTR   char *

#define WORD   uint16_t

Referenced by FETCH16().

---

Typedef Documentation

typedef struct _PROCESS_INFORMATION * LPPROCESS_INFORMATION

typedef struct _STARTUPINFO * LPSTARTUPINFO

typedef struct _PROCESS_INFORMATION PROCESS_INFORMATION

typedef struct _STARTUPINFO STARTUPINFO

---

Function Documentation

int32_t env_w32_hook__hwrite	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References env_w32_hook__lwrite().

Here is the call graph for this function:

int32_t env_w32_hook__lclose	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook__lcreat	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_read_string(), emu_string_char(), emu_string_free(), emu_string_new(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook__lwrite	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_read_block(), logDebug, and POP_DWORD.

Referenced by env_w32_hook__hwrite().

Here is the call graph for this function:

int32_t env_w32_hook_CloseHandle	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_CreateFileA	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_read_string(), emu_string_char(), emu_string_free(), emu_string_new(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_CreateProcessA	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References _STARTUPINFO::cb, _STARTUPINFO::cbReserved2, _STARTUPINFO::dwFillAttribute, _STARTUPINFO::dwFlags, _PROCESS_INFORMATION::dwProcessId, _PROCESS_INFORMATION::dwThreadId, _STARTUPINFO::dwX, _STARTUPINFO::dwXCountChars, _STARTUPINFO::dwXSize, _STARTUPINFO::dwY, _STARTUPINFO::dwYCountChars, _STARTUPINFO::dwYSize, eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_read_dword(), emu_memory_read_string(), emu_memory_write_dword(), emu_string_char(), emu_string_free(), emu_string_new(), _PROCESS_INFORMATION::hProcess, _STARTUPINFO::hStdError, _STARTUPINFO::hStdInput, _STARTUPINFO::hStdOutput, _PROCESS_INFORMATION::hThread, logDebug, _STARTUPINFO::lpDesktop, _STARTUPINFO::lpReserved, _STARTUPINFO::lpReserved2, _STARTUPINFO::lpTitle, POP_DWORD, si, and _STARTUPINFO::wShowWindow.

Here is the call graph for this function:

int32_t env_w32_hook_DeleteFileA	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References emu_cpu_eip_set(), emu_cpu_get(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_ExitProcess	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References emu_cpu_eip_set(), emu_cpu_get(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_ExitThread	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References emu_cpu_eip_set(), emu_cpu_get(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_GetProcAddress	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References emu_env_w32_dll::baseaddr, eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_hashtable_search(), emu_memory_get(), emu_memory_read_string(), emu_string_char(), emu_string_free(), emu_string_new(), emu_env_w32_dll::exports_by_fnname, logDebug, POP_DWORD, emu_cpu::reg, and emu_hashtable_item::value.

Here is the call graph for this function:

int32_t env_w32_hook_GetSystemDirectoryA	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_write_block(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_GetTempPathA	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_write_block(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_GetTickCount	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_GetVersion	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_LoadLibrayA	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_env_w32_load_dll(), emu_memory_get(), emu_memory_read_string(), emu_string_char(), emu_string_free(), emu_string_new(), logDebug, POP_DWORD, and emu_cpu::reg.

Here is the call graph for this function:

int32_t env_w32_hook_malloc	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_alloc(), logDebug, emu_cpu::mem, POP_DWORD, and PUSH_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_memset	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, POP_DWORD, and PUSH_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_SetUnhandledExceptionFilter	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_Sleep	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_VirtualProtect	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_WaitForSingleObject	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_WinExec	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_read_string(), emu_string_char(), emu_string_free(), emu_string_new(), logDebug, and POP_DWORD.

Here is the call graph for this function:

int32_t env_w32_hook_WriteFile	(	struct emu_env *	env,
		struct emu_env_hook *	hook
	)

References eax, emu_cpu_eip_set(), emu_cpu_get(), emu_cpu_reg32_set(), emu_memory_get(), emu_memory_read_block(), emu_memory_write_dword(), logDebug, and POP_DWORD.

Here is the call graph for this function: