 |
miasm
Reverse engineering framework
|
Go to the documentation of this file. 1 #ifndef MIASM_RT_EXPORT_H
2 #define MIASM_RT_EXPORT_H
5 #define _MIASM_EXPORT __declspec(dllexport)
7 #define _MIASM_EXPORT __attribute__((visibility("default")))
def advapi32_CryptAcquireContextA(jitter)
Definition: win_api_x86_32.py:493
def kernel32_WaitForSingleObject(jitter)
Definition: win_api_x86_32.py:1833
loadfrommem
Definition: pe_init.py:272
Ehdr
Definition: elf_init.py:831
def get_sym(self)
Definition: elf_init.py:134
Definition: new_cstruct.py:171
Definition: minidump.py:173
mutex
Definition: win_api_x86_32.py:186
def virt2off(self, addr)
Definition: pe_init.py:508
modules
Definition: win_api_x86_32_seh.py:221
int ctimensec
Definition: environment.py:71
def kernel32_CreateFileMappingA(jitter)
Definition: win_api_x86_32.py:2661
def xxx___libc_start_main(jitter)
Definition: linux_stdlib.py:31
_sex
Definition: pe_init.py:193
parent
Definition: elf_init.py:618
def ntdll_ZwFreeVirtualMemory(jitter)
Definition: win_api_x86_32.py:1936
def set_win_str_a(jitter, addr, value)
Definition: common.py:45
list _fields
Definition: new_cstruct.py:173
def get(self, rva_start, rva_stop=None)
Definition: pe_init.py:43
def prepare_loader_arml(jitter, argv, envp, auxv, linux_env, hlt_address=0x13371acc)
Definition: environment.py:904
int numberOfProcessors
Definition: win_api_x86_32.py:1105
def hal_ExAcquireFastMutex(jitter)
Definition: win_api_x86_32.py:1394
def kernel32_CreateDirectoryA(jitter)
Definition: win_api_x86_32.py:1807
def kernel32_GetTempPathA(jitter)
Definition: win_api_x86_32.py:3025
Definition: pe_init.py:24
def socket(self, family, type_, protocol)
Definition: environment.py:375
Definition: minidump.py:82
def kernel32_GetModuleFileName(jitter, funcname, set_str)
Definition: win_api_x86_32.py:899
Definition: win_api_x86_32_seh.py:216
Definition: elf_init.py:284
def sys_x86_64_pread64(jitter, linux_env)
Definition: syscall.py:868
Definition: environment.py:669
def write(self, fd, data)
Definition: environment.py:495
def fix_size(fields, wsize)
Definition: cstruct.py:23
Definition: win_32_structs.py:72
def __setitem__(self, item, data)
Definition: pe_init.py:436
int AT_PAGESZ
Definition: environment.py:738
getversion
Definition: win_api_x86_32.py:153
int dwPageSize
Definition: win_api_x86_32.py:1101
base_path
Definition: environment.py:211
Definition: environment.py:682
def ntdll_RtlInitAnsiString(jitter)
Definition: win_api_x86_32.py:1207
def kernel32_TlsFree(jitter)
Definition: win_api_x86_32.py:2423
int lastaccesstime
Definition: win_api_x86_32.py:3052
def __init__(self)
Definition: win_api_x86_32.py:135
def advapi32_RegOpenKeyExA(jitter)
Definition: win_api_x86_32.py:2315
def ntoskrnl_KeInitializeEvent(jitter)
Definition: win_api_x86_32.py:1360
def __init__(self, pestr=None, loadfrommem=False, parse_resources=True, parse_delay=True, parse_reloc=True, wsize=32, **kwargs)
Definition: pe_init.py:187
def __init__(self, base_path, linux_env)
Definition: environment.py:210
type
Definition: elf_init.py:152
def kernel32_FlsSetValue(self, jitter)
Definition: win_api_x86_32.py:3308
def msvcrt_malloc(jitter)
Definition: win_api_x86_32.py:2924
content
Definition: elf_init.py:214
def advapi32_RegSetValueExA(jitter)
Definition: win_api_x86_32.py:2349
def __getitem__(self, item)
Definition: strpatchwork.py:44
parent_head
Definition: new_cstruct.py:176
def test_ProcessAndThreadFunctions(self)
Definition: win_api_x86_32.py:165
minidumpHDR
Definition: minidump_init.py:99
Definition: minidump.py:476
parent
Definition: elf_init.py:666
def __init__(self, ad, l)
Definition: win_api_x86_32.py:263
Definition: minidump_init.py:11
int blocksize
Definition: environment.py:199
Definition: win_32_structs.py:177
def kernel32_VirtualFree(jitter)
Definition: win_api_x86_32.py:884
_lst
Definition: cstruct.py:139
def getphbyvad(self, ad)
Definition: elf_init.py:858
heap
Definition: linux_stdlib.py:25
int nb_avail_block
Definition: environment.py:203
def __bytes__(self)
Definition: strpatchwork.py:36
def hexdump(src, length=16)
Definition: utils.py:140
_virt
Definition: elf_init.py:819
def __set__(self, owner, new_content)
Definition: elf_init.py:175
int AT_PHDR
Definition: environment.py:736
def set_shstrndx(self, val)
Definition: elf_init.py:71
int filesizehigh
Definition: win_api_x86_32.py:3054
DirExport
Definition: pe_init.py:214
def __str__(self)
Definition: cstruct.py:145
getforegroundwindow
Definition: win_api_x86_32.py:154
def init_seh(jitter)
Definition: win_api_x86_32_seh.py:444
def my_CreateDirectory(jitter, funcname, get_str)
Definition: win_api_x86_32.py:1797
def __init__(self, parent)
Definition: pe_init.py:40
def __bytes__(self)
Definition: elf_init.py:553
Definition: minidump.py:209
def item2virtitem(self, item)
Definition: elf_init.py:709
s_cache
Definition: strpatchwork.py:33
Definition: elf_init.py:129
def advapi32_CryptDestroyHash(jitter)
Definition: win_api_x86_32.py:590
real_path
Definition: environment.py:133
def __repr__(self)
Definition: elf_init.py:58
def unix_to_sbpath(path)
Definition: common.py:129
def pretty_protect(self)
Definition: minidump_init.py:55
def protect(self)
Definition: minidump_init.py:49
Definition: locationdb.py:1
int blksize
Definition: environment.py:63
alloc_align
Definition: linux_stdlib.py:24
def find(self, pattern, start=0)
Definition: elf_init.py:789
int dwFlags
Definition: win_api_x86_32.py:2490
def my_GetVolumeInformation(jitter, funcname, get_str, set_str)
Definition: win_api_x86_32.py:1629
def kernel32_FlushFileBuffers(jitter)
Definition: win_api_x86_32.py:2870
def __getitem__(self, item)
Definition: elf_init.py:542
def __setitem__(self, item, data)
Definition: pe_init.py:83
def mod_name(self, name, new_name)
Definition: elf_init.py:406
def __str__(self)
Definition: pe_init.py:594
Definition: win_32_structs.py:117
def shell32_SHGetPathFromIDListW(jitter)
Definition: win_api_x86_32.py:991
Definition: elf_init.py:813
def shell32_CommandLineToArgvW(jitter)
Definition: win_api_x86_32.py:1153
def sys_arml_newuname(jitter, linux_env)
Definition: syscall.py:154
Definition: minidump.py:520
def lseek(self, offset, whence)
Definition: environment.py:165
int brk_current
Definition: environment.py:397
def test_GetCurrentDirectory(self)
Definition: win_api_x86_32.py:88
def __get__(self, owner, x)
Definition: elf_init.py:171
def user32_IsCharAlphaW(jitter)
Definition: win_api_x86_32.py:2202
module_name
Definition: win_api_x86_32.py:149
Definition: elf_init.py:320
def force_bytes(value)
Definition: utils.py:87
find_data
Definition: win_api_x86_32.py:189
def sys_x86_64_prlimit64(jitter, linux_env)
Definition: syscall.py:439
def msvcrt__wcsicmp(jitter)
Definition: win_api_x86_32.py:1500
def findfirst(self, pattern)
Definition: win_api_x86_32.py:3098
Definition: elf_init.py:292
int dwY
Definition: win_api_x86_32.py:2484
def exists(self, path)
Definition: environment.py:299
files_hwnd
Definition: win_api_x86_32.py:163
def real_fmt(fmt, wsize)
Definition: new_cstruct.py:58
Definition: elf_init.py:260
def ntoskrnl_MmMapLockedPagesSpecifyCache(jitter)
Definition: win_api_x86_32.py:1425
def ntdll_ZwAllocateVirtualMemory(jitter)
Definition: win_api_x86_32.py:1915
def advapi32_RegSetValueW(jitter)
Definition: win_api_x86_32.py:2361
parent
Definition: elf_init.py:250
def is_in_virt_address(self, ad)
Definition: elf_init.py:878
modulelist
Definition: minidump_init.py:79
Definition: minidump.py:129
def get_name(self, ofs)
Definition: elf_init.py:394
def ntoskrnl_RtlVerifyVersionInfo(jitter)
Definition: win_api_x86_32.py:1384
def advapi32_RegOpenKeyEx(jitter, funcname, get_str)
Definition: win_api_x86_32.py:2293
reltab
Definition: elf_init.py:475
def msvcrt_free(jitter)
Definition: win_api_x86_32.py:2930
int cb
Definition: win_api_x86_32.py:2479
is_closed
Definition: environment.py:75
def array_tobytes(arr)
Definition: strpatchwork.py:12
def sys_x86_64_newstat(jitter, linux_env)
Definition: syscall.py:215
Definition: win_32_structs.py:15
def getsectionbyvad(self, vad)
Definition: pe_init.py:454
Definition: elf_init.py:165
def msvcrt_realloc(jitter)
Definition: win_api_x86_32.py:2043
def kernel32_SetFileAttributesA(jitter)
Definition: win_api_x86_32.py:1857
def xxx_snprintf(jitter)
Definition: linux_stdlib.py:149
def __init__(self, parent_head=None, _sex=None, _wsize=None, **kargs)
Definition: new_cstruct.py:175
def kernel32_LoadLibraryExA(jitter)
Definition: win_api_x86_32.py:1045
Definition: strpatchwork.py:1
Definition: locationdb.py:11
def msvcrt_sprintf_str(jitter, get_str)
Definition: win_api_x86_32.py:2218
def get_sym(self)
Definition: elf_init.py:122
systeminfo
Definition: minidump_init.py:83
def sys_x86_64_arch_prctl(jitter, linux_env)
Definition: syscall.py:375
def advapi32_CryptReleaseContext(jitter)
Definition: win_api_x86_32.py:570
def msvcrt_strlen(jitter)
Definition: win_api_x86_32.py:3250
Definition: new_cstruct.py:1
def getsectionbyoff(self, off)
Definition: pe_init.py:457
def kernel32_lstrcmpiA(jitter)
Definition: win_api_x86_32.py:1526
def fix_InInitializationOrderModuleList(jitter, modules_info)
Definition: win_api_x86_32_seh.py:380
def get_virt(self)
Definition: elf_init.py:821
def __init__(self, number, flags, filesystem, real_fd)
Definition: environment.py:149
def __bytes__(self)
Definition: elf_init.py:643
def __getattr__(self, key)
Definition: minidump.py:23
int dwXSize
Definition: win_api_x86_32.py:2485
def get_linksection(self)
Definition: elf_init.py:226
int fragment_size
Definition: environment.py:207
int dwXCountChars
Definition: win_api_x86_32.py:2487
def sys_arml_writev(jitter, linux_env)
Definition: syscall.py:268
def kernel32_HeapAlloc(jitter)
Definition: win_api_x86_32.py:276
cryptcontext_bnum
Definition: win_api_x86_32.py:156
Definition: environment.py:117
def ntdll_RtlAnsiStringToUnicodeString(jitter)
Definition: win_api_x86_32.py:1953
def __repr__(self)
Definition: win_api_x86_32.py:95
def kernel32_SetFilePointerEx(jitter)
Definition: win_api_x86_32.py:2832
def user32_GetWindowLongA(jitter)
Definition: win_api_x86_32.py:889
int dwX
Definition: win_api_x86_32.py:2483
def kernel32_GetDiskFreeSpace(jitter, funcname, get_str)
Definition: win_api_x86_32.py:2740
def kernel32_CreateDirectoryW(jitter)
Definition: win_api_x86_32.py:1803
def user32_GetKeyboardType(jitter)
Definition: win_api_x86_32.py:2441
def kernel32_lstrcpyn(jitter)
Definition: win_api_x86_32.py:1571
def advapi32_CryptHashData(jitter)
Definition: win_api_x86_32.py:532
def get_type(self)
Definition: elf_init.py:99
def user32_IsCharAlpha(jitter, funcname, get_str)
Definition: win_api_x86_32.py:2184
def msvcrt_srand(jitter)
Definition: win_api_x86_32.py:2800
def __init__(self)
Definition: win_api_x86_32.py:101
def isPE(self)
Definition: pe_init.py:283
Definition: elf_init.py:141
def shlwapi_StrToInt64ExA(jitter)
Definition: win_api_x86_32.py:2176
def shlwapi_StrToIntA(jitter)
Definition: win_api_x86_32.py:2149
def __init__(self, parent, sh=None)
Definition: elf_init.py:249
def msvcrt_memcmp(jitter)
Definition: win_api_x86_32.py:2054
int AT_HWCAP
Definition: environment.py:745
memory_desc
Definition: minidump_init.py:16
Definition: win_api_x86_32.py:1099
SHList
Definition: pe_init.py:208
filesystem
Definition: environment.py:454
def iteritems(self)
Definition: environment.py:787
int mtime
Definition: environment.py:68
flist
Definition: win_api_x86_32.py:3088
int nb_free_fnode
Definition: environment.py:205
def cryptdll_MD5Update(jitter)
Definition: win_api_x86_32.py:1182
def build_content(self)
Definition: pe_init.py:545
def __bytes__(self)
Definition: cstruct.py:118
def kernel32_myGetTempPath(jitter, set_str)
Definition: win_api_x86_32.py:3017
Definition: environment.py:109
def __setitem__(self, item, data)
Definition: pe_init.py:99
def msvcrt_fprintf(jitter)
Definition: win_api_x86_32.py:2239
def sys_generic_brk(jitter, linux_env)
Definition: syscall.py:83
def find(self, pattern, start=0, end=None)
Definition: strpatchwork.py:98
def fix_InLoadOrderModuleList(jitter, modules_info)
Definition: win_api_x86_32_seh.py:327
def ad2mdl(ad)
Definition: win_api_x86_32.py:1403
def sys_generic_getgid(jitter, linux_env)
Definition: syscall.py:803
cryptcontext
Definition: win_api_x86_32.py:158
Definition: environment.py:382
def advapi32_RegSetValueExW(jitter)
Definition: win_api_x86_32.py:2353
def encode_win_str_a(value)
Definition: common.py:36
def kernel32_GetCommandLine(jitter, set_str)
Definition: win_api_x86_32.py:1138
def sys_x86_64_statfs(jitter, linux_env)
Definition: syscall.py:463
def regs2ctxt(jitter, context_address)
Definition: win_api_x86_32_seh.py:467
def __contains__(self, val)
Definition: strpatchwork.py:89
def listdir(self)
Definition: environment.py:137
def kernel32_LoadLibraryExW(jitter)
Definition: win_api_x86_32.py:1049
def kernel32_GetVersionEx(jitter, str_size, encode_str)
Definition: win_api_x86_32.py:379
def get_str(vm, addr, enc, max_char=None, end=u'\x00')
Definition: types.py:162
Definition: minidump.py:201
def __getitem__(self, item)
Definition: new_cstruct.py:266
Definition: win_32_structs.py:22
def kernel32_GetCommandLineA(jitter)
Definition: win_api_x86_32.py:1145
def add_list(self, pattern, flist)
Definition: win_api_x86_32.py:3092
def user32_GetTopWindow(jitter)
Definition: win_api_x86_32.py:473
def get_name(self)
Definition: elf_init.py:151
Definition: minidump.py:234
def set_linksection(self, val)
Definition: elf_init.py:229
def shell32_SHGetSpecialFolderLocation(jitter)
Definition: win_api_x86_32.py:974
lastwin32error
Definition: win_api_x86_32.py:185
Definition: linux_stdlib.py:18
Definition: minidump.py:9
def kernel32_GetLocaleInfo(jitter, funcname, set_str)
Definition: win_api_x86_32.py:2391
def cryptdll_MD5Init(jitter)
Definition: win_api_x86_32.py:1172
int max_filename_len
Definition: environment.py:206
def xxx_isprint(jitter)
Definition: linux_stdlib.py:90
parent
Definition: elf_init.py:53
def kernel32_TlsSetValue(jitter)
Definition: win_api_x86_32.py:2428
def kernel32_GetSystemInfo(jitter)
Definition: win_api_x86_32.py:1125
def user32_MessageBoxA(jitter)
Definition: win_api_x86_32.py:3005
Definition: elf_init.py:495
int file_mode
Definition: environment.py:50
def __getitem__(self, item)
Definition: elf_init.py:631
def kernel32_GetUserGeoID(jitter)
Definition: win_api_x86_32.py:1618
Definition: win_api_x86_32.py:1
def ntdll_RtlExtendedIntegerMultiply(jitter)
Definition: win_api_x86_32.py:1291
def mdl2ad(n)
Definition: win_api_x86_32.py:1399
def sys_x86_64_getpid(jitter, linux_env)
Definition: syscall.py:745
def kernel32_CreateToolhelp32Snapshot(jitter)
Definition: win_api_x86_32.py:326
def kernel32_GetCurrentProcessId(jitter)
Definition: win_api_x86_32.py:336
ioctl_disallowed
Definition: environment.py:417
def sys_generic_exit_group(jitter, linux_env)
Definition: syscall.py:287
streams
Definition: minidump_init.py:86
def add_process_parameters(jitter)
Definition: win_api_x86_32_seh.py:423
def compute_crc(raw, olds)
Definition: pe_init.py:160
def dump_seh(jitter)
Definition: win_api_x86_32_seh.py:625
def build_teb(jitter, teb_address)
Definition: win_api_x86_32_seh.py:89
def kernel32_FindFirstFileW(jitter)
Definition: win_api_x86_32.py:3131
handle_mapped
Definition: win_api_x86_32.py:172
def getattr_(self, path, follow_link=True)
Definition: environment.py:318
notes
Definition: elf_init.py:327
Definition: environment.py:125
module_fname_nux
Definition: win_api_x86_32.py:148
def kernel32_SetLastError(jitter)
Definition: win_api_x86_32.py:1004
def __init__(self, parent, sex, size)
Definition: elf_init.py:497
def kernel32_GetTempPathW(jitter)
Definition: win_api_x86_32.py:3029
Definition: cstruct.py:136
Definition: elf_init.py:157
def sys_generic_access(jitter, linux_env)
Definition: syscall.py:185
def kernel32_GetLocaleInfoW(jitter)
Definition: win_api_x86_32.py:2413
list _fields
Definition: cstruct.py:52
def kernel32_GetDriveTypeA(jitter)
Definition: win_api_x86_32.py:2732
def get_rva(self)
Definition: pe_init.py:533
def set_link_list_entry(jitter, loaded_modules, modules_info, offset)
Definition: win_api_x86_32_seh.py:309
def sys_arml_set_tls(jitter, linux_env)
Definition: syscall.py:837
Definition: win_api_x86_32.py:89
def get_sym(self)
Definition: elf_init.py:94
def advapi32_RegSetValueEx(jitter, funcname, get_str)
Definition: win_api_x86_32.py:2333
def my_CreateEvent(jitter, funcname, get_str)
Definition: win_api_x86_32.py:1812
def __getitem__(self, item)
Definition: pe_init.py:96
memory
Definition: minidump_init.py:91
string alternamefilename
Definition: win_api_x86_32.py:3059
def ntoskrnl_RtlGetVersion(jitter)
Definition: win_api_x86_32.py:1369
def ntoskrnl_MmUnlockPages(jitter)
Definition: win_api_x86_32.py:1444
def kernel32_IsProcessorFeaturePresent(jitter)
Definition: win_api_x86_32.py:3389
family
Definition: environment.py:182
Definition: environment.py:694
def next_fd(self)
Definition: environment.py:457
phparent
Definition: elf_init.py:251
hkey_handles
Definition: win_api_x86_32.py:173
_rva
Definition: pe_init.py:188
nt_mdl
Definition: win_api_x86_32.py:179
def pretty_processor_architecture(self)
Definition: minidump.py:543
Definition: environment.py:369
Definition: environment.py:187
def sys_x86_64_socket(jitter, linux_env)
Definition: syscall.py:665
def msvcrt__wfopen(jitter)
Definition: win_api_x86_32.py:3242
Definition: elf_init.py:418
def ntdll_ZwUnmapViewOfSection(jitter)
Definition: win_api_x86_32.py:1350
def kernel32_GetFileSize(jitter)
Definition: win_api_x86_32.py:748
def kernel32_FindFirstFileExW(jitter)
Definition: win_api_x86_32.py:3149
def kernel32_GetDiskFreeSpaceA(jitter)
Definition: win_api_x86_32.py:2753
def pop(ir, instr, a)
Definition: sem.py:1279
def ntdll_RtlCompareMemory(jitter)
Definition: win_api_x86_32.py:1326
def kernel32_LoadLibraryW(jitter)
Definition: win_api_x86_32.py:1030
string _packformat
Definition: cstruct.py:51
int ProcessorsType
Definition: win_api_x86_32.py:1106
def size(self)
Definition: minidump_init.py:26
def sys_generic_setgid(jitter, linux_env)
Definition: syscall.py:811
NThdr
Definition: pe_init.py:205
def __getitem__(self, item)
Definition: cstruct.py:126
def user32_IsCharAlphaNumericA(jitter)
Definition: win_api_x86_32.py:2206
def __setitem__(self, item, data)
Definition: elf_init.py:764
handle_pool
Definition: win_api_x86_32.py:171
def kernel32_CreateMutexW(jitter)
Definition: win_api_x86_32.py:970
int dwActiveProcessorMask
Definition: win_api_x86_32.py:1104
def shlwapi_PathIsFileSpecW(jitter)
Definition: win_api_x86_32.py:2145
Definition: minidump.py:363
def test_TimeFunctions(self)
Definition: win_api_x86_32.py:195
def kernel32_lstrlenW(jitter)
Definition: win_api_x86_32.py:1594
def kernel32_GetModuleHandleW(jitter)
Definition: win_api_x86_32.py:1090
def kernel32_GetSystemDirectoryA(jitter)
Definition: win_api_x86_32.py:1789
def __str__(self)
Definition: elf_init.py:61
def ntoskrnl_ExAllocatePoolWithTagPriority(jitter)
Definition: win_api_x86_32.py:1474
def msvcrt_wcscmp(jitter)
Definition: win_api_x86_32.py:1493
def msvcrt__mbscpy(jitter)
Definition: win_api_x86_32.py:1561
def syscall_arml_exception_handler(linux_env, syscall_callbacks, jitter)
Definition: syscall.py:1034
network
Definition: environment.py:455
def kernel32_QueryPerformanceCounter(jitter)
Definition: win_api_x86_32.py:3257
def pretty_name(self)
Definition: minidump.py:125
def kernel32_GetFileType(jitter)
Definition: win_api_x86_32.py:3372
def kernel32_lstrcatA(jitter)
Definition: win_api_x86_32.py:1610
ph
Definition: elf_init.py:833
int ProcessorRevision
Definition: win_api_x86_32.py:1109
def write(self, data)
Definition: environment.py:113
def sys_generic_close(jitter, linux_env)
Definition: syscall.py:365
int AT_GID
Definition: environment.py:742
def close(self)
Definition: environment.py:161
def kernel32_lstrcatW(jitter)
Definition: win_api_x86_32.py:1614
def kernel32_GetCurrentDirectoryA(jitter)
Definition: win_api_x86_32.py:2283
parent
Definition: pe_init.py:41
int align_addr
Definition: linux_stdlib.py:21
def ntdll_ZwQuerySystemInformation(jitter)
Definition: win_api_x86_32.py:1877
Definition: minidump.py:355
def kernel32_CreateMutex(jitter, funcname, get_str)
Definition: win_api_x86_32.py:940
_content
Definition: minidump_init.py:76
Definition: elf_init.py:296
def test_MemoryManagementFunctions(self)
Definition: win_api_x86_32.py:115
Definition: environment.py:144
def kernel32_GlobalFree(jitter)
Definition: win_api_x86_32.py:316
Definition: types.py:1364
def kernel32_SetEndOfFile(jitter)
Definition: win_api_x86_32.py:2860
Definition: environment.py:34
def sys_x86_64_set_tid_address(jitter, linux_env)
Definition: syscall.py:410
module_path
Definition: win_api_x86_32.py:150
def kernel32_EnterCriticalSection(jitter)
Definition: win_api_x86_32.py:3273
def __bytes__(self)
Definition: elf_init.py:850
ptrs
Definition: environment.py:777
def __repr__(self)
Definition: new_cstruct.py:261
def set_infosection(self, val)
Definition: elf_init.py:242
def shlwapi_PathGetDriveNumberA(jitter)
Definition: win_api_x86_32.py:2133
def __init__(self)
Definition: environment.py:430
def sys_x86_64_sysinfo(jitter, linux_env)
Definition: syscall.py:753
def wsock32_WSAStartup(jitter)
Definition: win_api_x86_32.py:2566
def kernel32_InitializeCriticalSectionEx(jitter)
Definition: win_api_x86_32.py:3263
def resize(self, old, new)
Definition: elf_init.py:216
Definition: minidump_init.py:61
def read(self, count)
Definition: environment.py:158
linux_env
Definition: environment.py:373
inode
Definition: environment.py:55
def next_addr(self, size)
Definition: common.py:64
def ntdll_RtlLargeIntegerShiftRight(jitter)
Definition: win_api_x86_32.py:1307
filesystem
Definition: environment.py:132
img_rva
Definition: pe_init.py:190
threads
Definition: minidump_init.py:87
def my_lstrcat(jitter, funcname, get_str, set_str)
Definition: win_api_x86_32.py:1602
Definition: elf_init.py:68
def sys_generic_write(jitter, linux_env)
Definition: syscall.py:527
def kernel32_UnmapViewOfFile(jitter)
Definition: win_api_x86_32.py:2701
pck64
Definition: utils.py:26
name2module
Definition: win_api_x86_32_seh.py:222
wrapped
Definition: elf_init.py:49
def getsectionbyrva(self, rva)
Definition: pe_init.py:440
def kernel32_GetTempFileNameA(jitter)
Definition: win_api_x86_32.py:3036
def kernel32_GetPriorityClass(jitter)
Definition: win_api_x86_32.py:412
memory64list
Definition: minidump_init.py:80
int AT_EGID
Definition: environment.py:743
def kernel32_GetSystemTime(jitter)
Definition: win_api_x86_32.py:2634
int mmap_current
Definition: environment.py:398
def shell32_SHGetPathFromIDListA(jitter)
Definition: win_api_x86_32.py:995
def kernel32_VirtualProtect(jitter)
Definition: win_api_x86_32.py:787
def xxx_strcpy(jitter)
Definition: linux_stdlib.py:178
phhash_crypt_md5
Definition: win_api_x86_32.py:159
def set(self, rva, data)
Definition: pe_init.py:61
def kernel32_GetEnvironmentVariableA(jitter)
Definition: win_api_x86_32.py:1766
def kernel32_IsBadReadPtr(jitter)
Definition: win_api_x86_32.py:1355
def __bytes__(self)
Definition: elf_init.py:64
def __repr__(self)
Definition: cstruct.py:121
def kernel32_GetSystemDefaultLangID(jitter)
Definition: win_api_x86_32.py:2919
def seek(self, offset)
Definition: environment.py:171
def parse_content(self, sex, size)
Definition: elf_init.py:376
events_pool
Definition: win_api_x86_32.py:188
int base_time
Definition: environment.py:420
def xxx_printf(jitter)
Definition: linux_stdlib.py:169
def kernel32_Process32First(jitter)
Definition: win_api_x86_32.py:341
int f_type
Definition: environment.py:200
def set(self, item, data)
Definition: elf_init.py:738
int fileattrib
Definition: win_api_x86_32.py:3050
Definition: elf_init.py:316
def user32_GetForegroundWindow(jitter)
Definition: win_api_x86_32.py:457
def __str__(self)
Definition: strpatchwork.py:39
def kernel32_SetFilePointer(jitter)
Definition: win_api_x86_32.py:2809
int ctime
Definition: environment.py:70
def __getitem__(self, item)
Definition: pe_init.py:433
def pack(self)
Definition: win_api_x86_32.py:1111
DirTls
Definition: pe_init.py:218
Definition: win_32_structs.py:7
def user32_GetSystemMetrics(jitter)
Definition: win_api_x86_32.py:2555
def get(self, virt_start, virt_stop=None)
Definition: pe_init.py:105
def kernel32_GetEnvironmentVariableW(jitter)
Definition: win_api_x86_32.py:1773
def kernel32_GetCommandLineW(jitter)
Definition: win_api_x86_32.py:1149
def sys_generic_open(jitter, linux_env)
Definition: syscall.py:517
def __len__(self)
Definition: strpatchwork.py:86
def msvcrt_wcsrchr(jitter)
Definition: win_api_x86_32.py:2029
rel
Definition: elf_init.py:476
def kernel32_LoadLibraryA(jitter)
Definition: win_api_x86_32.py:1026
def kernel32_GetStartupInfoA(jitter)
Definition: win_api_x86_32.py:2537
def sys_x86_32_newuname(jitter, linux_env)
Definition: syscall.py:92
StatInfo
Definition: environment.py:18
def __repr__(self)
Definition: elf_init.py:545
def kernel32_GlobalAlloc(jitter)
Definition: win_api_x86_32.py:287
Definition: minidump.py:191
hcurmodule
Definition: win_api_x86_32.py:151
def advapi32_CryptCreateHash(jitter)
Definition: win_api_x86_32.py:501
Definition: elf_init.py:373
def __contains__(self, e)
Definition: win_api_x86_32.py:123
def kernel32_GetStartupInfoW(jitter)
Definition: win_api_x86_32.py:2541
number
Definition: environment.py:74
def sys_generic_mmap2(jitter, linux_env)
Definition: syscall.py:343
def kernel32_FindFirstFileA(jitter)
Definition: win_api_x86_32.py:3125
def is_rva_ok(self, rva)
Definition: pe_init.py:473
type
Definition: full.py:35
def parse_content(self, sex, size)
Definition: elf_init.py:323
def fake_seh_handler(jitter, except_code, previous_seh=None)
Definition: win_api_x86_32_seh.py:555
Definition: elf_init.py:268
def sys_x86_64_set_robust_list(jitter, linux_env)
Definition: syscall.py:419
uid
Definition: environment.py:59
def add(self, name, info=None)
Definition: win_api_x86_32.py:105
def ioctl(self, fd, cmd, arg)
Definition: environment.py:539
int nb_free_block
Definition: environment.py:202
def ntdll_RtlInitString(jitter)
Definition: win_api_x86_32.py:1944
int AT_SECURE
Definition: environment.py:746
def add_name(self, name)
Definition: elf_init.py:397
def shlwapi_PathIsDirectoryW(jitter)
Definition: win_api_x86_32.py:2096
def kernel32_CloseHandle(jitter)
Definition: win_api_x86_32.py:422
Definition: minidump.py:182
def sys_x86_64_clock_gettime(jitter, linux_env)
Definition: syscall.py:688
Doshdr
Definition: pe_init.py:195
res
Definition: elf_init.py:378
def kernel32_GetCurrentProcess(jitter)
Definition: win_api_x86_32.py:331
memoryinfolist
Definition: minidump_init.py:82
def add(self, name, module, module_entry)
Definition: win_api_x86_32_seh.py:226
Definition: types.py:1155
int device_id
Definition: environment.py:198
def msvcrt_rewind(jitter)
Definition: win_api_x86_32.py:2957
int base_addr
Definition: linux_stdlib.py:20
def kernel32_CreateFile(jitter, funcname, get_str)
Definition: win_api_x86_32.py:603
def fix_size(fields, wsize)
Definition: new_cstruct.py:42
def kernel32_LoadLibraryEx(jitter, get_str)
Definition: win_api_x86_32.py:1034
def advapi32_RegCreateKeyW(jitter)
Definition: win_api_x86_32.py:2263
def parse_content(self, sex, size)
Definition: elf_init.py:222
Definition: environment.py:713
def kernel32_lstrcpyW(jitter)
Definition: win_api_x86_32.py:1550
def shlwapi_PathRemoveFileSpecW(jitter)
Definition: win_api_x86_32.py:2073
def user32_SetWindowLongA(jitter)
Definition: win_api_x86_32.py:894
def kernel32_GetTickCount(jitter)
Definition: win_api_x86_32.py:368
parent
Definition: elf_init.py:498
def __init__(self)
Definition: win_api_x86_32.py:3294
def kernel32_IsValidCodePage(jitter)
Definition: win_api_x86_32.py:3471
int oemId
Definition: win_api_x86_32.py:1100
def kernel32_TlsAlloc(jitter)
Definition: win_api_x86_32.py:2417
Definition: elf_init.py:615
def sys_arml_lstat64(jitter, linux_env)
Definition: syscall.py:617
int dwYSize
Definition: win_api_x86_32.py:2486
phlist
Definition: elf_init.py:619
Definition: elf_init.py:117
def kernel32_GetLocaleInfoA(jitter)
Definition: win_api_x86_32.py:2409
def sys_arml_gettimeofday(jitter, linux_env)
Definition: syscall.py:886
_shift
Definition: cstruct.py:140
def lstat(self, path)
Definition: environment.py:484
def socket(self, family, type_, protocol)
Definition: environment.py:469
dw_pid_explorer
Definition: win_api_x86_32.py:145
dw_pid_dummy2
Definition: win_api_x86_32.py:146
def xxx_puts(jitter)
Definition: linux_stdlib.py:127
Definition: elf_init.py:82
Definition: win_api_x86_32.py:2453
def msvcrt_wcsncpy(jitter)
Definition: win_api_x86_32.py:1514
filesystem
Definition: environment.py:152
windowlong_dw
Definition: win_api_x86_32.py:164
Definition: elf_init.py:280
def findnext(self, h)
Definition: win_api_x86_32.py:3105
def user32_GetMessagePos(jitter)
Definition: win_api_x86_32.py:1340
def parse_content(self, sex, size)
Definition: elf_init.py:341
def alloc(self, jitter, size, perm=PAGE_READ|PAGE_WRITE, cmt="")
Definition: common.py:74
gid
Definition: environment.py:60
def advapi32_RegCloseKey(jitter)
Definition: win_api_x86_32.py:2343
_virt
Definition: pe_init.py:189
def write(self, data)
Definition: environment.py:155
int cbReserved2
Definition: win_api_x86_32.py:2492
def kernel32_LoadLibrary(jitter, get_str)
Definition: win_api_x86_32.py:1017
def __init__(self, elf_phdr_vaddr, entry_point, linux_env, **kwargs)
Definition: environment.py:750
int lpMaximumApplicationAddress
Definition: win_api_x86_32.py:1103
def advapi32_CryptDecrypt(jitter)
Definition: win_api_x86_32.py:595
def msvcrt_atexit(jitter)
Definition: win_api_x86_32.py:3000
def kernel32_SetPriorityClass(jitter)
Definition: win_api_x86_32.py:417
def export_funcs(self)
Definition: pe_init.py:599
size
Definition: elf_init.py:829
Definition: pe_init.py:184
def toStruct(self, encode_str=encode_win_str_w)
Definition: win_api_x86_32.py:3065
int AT_EUID
Definition: environment.py:741
def kernel32_IsDebuggerPresent(jitter)
Definition: win_api_x86_32.py:321
name
Definition: win_api_x86_32.py:92
def get_name(self)
Definition: elf_init.py:85
def vm_alloc(self, vm, size, perm=PAGE_READ|PAGE_WRITE, cmt="")
Definition: common.py:82
cryptcontext_hwnd
Definition: win_api_x86_32.py:155
def sys_x86_64_newlstat(jitter, linux_env)
Definition: syscall.py:599
def ntdll_RtlComputeCrc32(jitter)
Definition: win_api_x86_32.py:1284
def __len__(self)
Definition: cstruct.py:110
def __str__(self)
Definition: new_cstruct.py:253
def int2base(x, base)
Definition: win_api_x86_32.py:3191
def ntdll_ZwProtectVirtualMemory(jitter)
Definition: win_api_x86_32.py:1894
def raw2guid(r)
Definition: win_api_x86_32.py:3183
int hStdError
Definition: win_api_x86_32.py:2496
type_
Definition: environment.py:183
Definition: minidump.py:116
Definition: minidump.py:156
def kernel32_lstrlenA(jitter)
Definition: win_api_x86_32.py:1590
int hStdInput
Definition: win_api_x86_32.py:2494
def parse_content(self)
Definition: elf_init.py:827
def kernel32_GetDriveType(jitter, funcname, get_str)
Definition: win_api_x86_32.py:2717
def get_fmt_args(jitter, fmt, cur_arg)
Definition: linux_stdlib.py:145
int atimensec
Definition: environment.py:67
def kernel32_HeapFree(jitter)
Definition: win_api_x86_32.py:282
Definition: win_32_structs.py:1
def __bytes__(self)
Definition: pe_init.py:591
def kernel32_CreateFileW(jitter)
Definition: win_api_x86_32.py:714
def kernel32_GetFileSizeEx(jitter)
Definition: win_api_x86_32.py:764
def kernel32_FlushInstructionCache(jitter)
Definition: win_api_x86_32.py:782
def xxx_sprintf(jitter)
Definition: linux_stdlib.py:160
int lpReserved
Definition: win_api_x86_32.py:2480
def kernel32_GetStdHandle(jitter)
Definition: win_api_x86_32.py:3345
def __init__(self, parent, sex, size, *args, **kargs)
Definition: elf_init.py:51
def sys_generic_geteuid(jitter, linux_env)
Definition: syscall.py:779
def kernel32_LocalFree(jitter)
Definition: win_api_x86_32.py:293
def kernel32_SetCurrentDirectoryA(jitter)
Definition: win_api_x86_32.py:2379
def close(self, fd)
Definition: environment.py:488
def is_in_virt_address(self, addr)
Definition: pe_init.py:520
ad
Definition: win_api_x86_32.py:264
def statfs(self)
Definition: environment.py:309
def off2virt(self, off)
Definition: pe_init.py:517
def kernel32_VirtualLock(jitter)
Definition: win_api_x86_32.py:1094
def clock_gettime(self)
Definition: environment.py:460
def resize(self, old, new)
Definition: pe_init.py:430
def build_content(self)
Definition: elf_init.py:841
int AT_PHNUM
Definition: environment.py:737
Definition: elf_init.py:288
Definition: elf_init.py:489
Definition: minidump.py:272
patterns
Definition: win_api_x86_32.py:3087
int wProcessorLevel
Definition: win_api_x86_32.py:1108
def __init__(self, elfstr)
Definition: elf_init.py:815
def msvcrt_fopen(jitter)
Definition: win_api_x86_32.py:3246
Definition: elf_init.py:300
def __getitem__(self, item)
Definition: elf_init.py:365
def msvcrt_sprintf(jitter)
Definition: win_api_x86_32.py:2223
def ntdll_RtlLargeIntegerAdd(jitter)
Definition: win_api_x86_32.py:1300
def tell(self)
Definition: environment.py:168
memorylist
Definition: minidump_init.py:81
Definition: elf_init.py:338
def read(self, fd, count)
Definition: environment.py:503
def rva2off(self, rva)
Definition: pe_init.py:476
int dwFillAttribute
Definition: win_api_x86_32.py:2489
module2name
Definition: win_api_x86_32_seh.py:224
def sys_x86_64_lseek(jitter, linux_env)
Definition: syscall.py:700
Definition: types.py:1133
def parse_context(self, content, offset)
Definition: minidump.py:486
def get_infosection(self)
Definition: elf_init.py:236
string cfilename
Definition: win_api_x86_32.py:3058
protocol
Definition: environment.py:184
def fix_InMemoryOrderModuleList(jitter, modules_info)
Definition: win_api_x86_32_seh.py:354
Definition: callback.py:1
DirReloc
Definition: pe_init.py:216
content
Definition: elf_init.py:825
sh
Definition: elf_init.py:832
int dwAllocationgranularity
Definition: win_api_x86_32.py:1107
def resize(self, sec, diff)
Definition: elf_init.py:653
def kernel32_GetStartupInfo(jitter, funcname, set_str)
Definition: win_api_x86_32.py:2520
def kernel32_RestoreLastError(jitter)
Definition: win_api_x86_32.py:1013
def parse_content(self, parse_resources=True, parse_delay=True, parse_reloc=True)
Definition: pe_init.py:288
def __init__(self, s=b"", paddingbyte=b"\x00")
Definition: strpatchwork.py:27
heap
Definition: win_api_x86_32.py:138
def sys_arml_ioctl(jitter, linux_env)
Definition: syscall.py:498
Definition: win_api_x86_32.py:3293
Definition: win_32_structs.py:201
def advapi32_RegSetValue(jitter, funcname, get_str)
Definition: win_api_x86_32.py:2323
Definition: environment.py:94
def close(self)
Definition: environment.py:90
_inv_info
Definition: minidump.py:15
DirDelay
Definition: pe_init.py:215
def kernel32_CreateMutexA(jitter)
Definition: win_api_x86_32.py:966
def kernel32_GetModuleFileNameW(jitter)
Definition: win_api_x86_32.py:936
def parse_content(self, sex, size)
Definition: elf_init.py:421
def array_frombytes(arr, value)
Definition: strpatchwork.py:9
def sys_x86_64_munmap(jitter, linux_env)
Definition: syscall.py:717
module2entry
Definition: win_api_x86_32_seh.py:223
def kernel32_MultiByteToWideChar(jitter)
Definition: win_api_x86_32.py:1672
def kernel32_GetVolumeInformationA(jitter)
Definition: win_api_x86_32.py:1663
def get_name(self)
Definition: elf_init.py:144
int nb_total_block
Definition: environment.py:201
module_cur_hwnd
Definition: win_api_x86_32.py:165
def get_type(self)
Definition: elf_init.py:137
Definition: elf_init.py:75
def get_drva(self)
Definition: pe_init.py:529
Coffhdr
Definition: pe_init.py:197
def sys_arml_fstat64(jitter, linux_env)
Definition: syscall.py:320
pck16
Definition: utils.py:24
def my_GetSystemDirectory(jitter, funcname, set_str)
Definition: win_api_x86_32.py:1780
ioctl_allowed
Definition: environment.py:416
def __init__(self, x)
Definition: elf_init.py:665
def xxx_strncmp(jitter)
Definition: linux_stdlib.py:209
def __getitem__(self, item)
Definition: pe_init.py:77
def sys_generic_mprotect(jitter, linux_env)
Definition: syscall.py:355
def sys_generic_read(jitter, linux_env)
Definition: syscall.py:297
def xxx_memcpy(jitter)
Definition: linux_stdlib.py:102
def sys_generic_mmap(jitter, linux_env)
Definition: syscall.py:332
def __init__(self, number)
Definition: environment.py:73
def kernel32_FlsGetValue(self, jitter)
Definition: win_api_x86_32.py:3319
def __init__(self, parent, sex, size)
Definition: elf_init.py:617
def create_modules_chain(jitter, name2module)
Definition: win_api_x86_32_seh.py:242
def my_GetEnvironmentVariable(jitter, funcname, get_str, set_str, mylen)
Definition: win_api_x86_32.py:1751
def user32_IsCharAlphaA(jitter)
Definition: win_api_x86_32.py:2198
_packstring
Definition: cstruct.py:67
def ntoskrnl_MmProbeAndLockPages(jitter)
Definition: win_api_x86_32.py:1417
int mount_flags
Definition: environment.py:208
int AT_RANDOM
Definition: environment.py:747
def test_msvcrt_sprintf(self)
Definition: win_api_x86_32.py:32
def whoami()
Definition: utils.py:69
handle_curprocess
Definition: win_api_x86_32.py:141
def __str__(self)
Definition: cstruct.py:113
tickcount
Definition: win_api_x86_32.py:143
def __setitem__(self, item, val)
Definition: strpatchwork.py:67
def _pack(self)
Definition: cstruct.py:88
def user32_IsCharUpperA(jitter)
Definition: win_api_x86_32.py:2907
def __set__(self, owner, new_content)
Definition: pe_init.py:30
alloc_ad
Definition: linux_stdlib.py:23
toolhelpsnapshot_info
Definition: win_api_x86_32.py:140
s
Definition: strpatchwork.py:31
int blocks
Definition: environment.py:64
def kernel32_CreateFileMapping(jitter, funcname, get_str)
Definition: win_api_x86_32.py:2641
def get_caller_name(caller_num=0)
Definition: utils.py:59
def kernel32_LeaveCriticalSection(jitter)
Definition: win_api_x86_32.py:3283
def __getattr__(self, attr)
Definition: cstruct.py:142
def ctxt2regs(jitter, ctxt_ptr)
Definition: win_api_x86_32_seh.py:518
def ntdll_RtlHashUnicodeString(jitter)
Definition: win_api_x86_32.py:1217
def kernel32_MapViewOfFile(jitter)
Definition: win_api_x86_32.py:2669
def kernel32_IsWow64Process(jitter)
Definition: win_api_x86_32.py:1132
def __init__(self, parent)
Definition: pe_init.py:93
def get_current_filetime()
Definition: win_api_x86_32.py:2572
Definition: win_api_x86_32_seh.py:1
def rfind(self, pattern, start=0, end=None)
Definition: pe_init.py:144
def find(self, pattern, start=0, end=None)
Definition: pe_init.py:133
tls_index
Definition: win_api_x86_32.py:169
def __repr__(self)
Definition: win_api_x86_32_seh.py:238
def pack(self)
Definition: new_cstruct.py:201
def advapi32_RegSetValueA(jitter)
Definition: win_api_x86_32.py:2357
int user_gid
Definition: environment.py:392
_wsize
Definition: new_cstruct.py:190
def kernel32_EncodePointer(jitter)
Definition: win_api_x86_32.py:426
dynamic
Definition: elf_init.py:345
def cmp_elts(elt1, elt2)
Definition: utils.py:123
def kernel32_GetDiskFreeSpaceW(jitter)
Definition: win_api_x86_32.py:2757
def __str__(self)
Definition: win_api_x86_32.py:270
def __delitem__(self, item)
Definition: win_api_x86_32.py:129
Definition: types.py:1023
Definition: cstruct.py:49
Definition: win_32_structs.py:150
def sys_x86_64_readlink(jitter, linux_env)
Definition: syscall.py:727
Definition: pe_init.py:91
def __init__(self, sex, wsize, *args, **kargs)
Definition: cstruct.py:58
_size
Definition: new_cstruct.py:177
def open_(self, path, flags, follow_link=True)
Definition: environment.py:329
def max_addr(self)
Definition: pe_init.py:128
def set_win_fs_0(jitter, fs=4)
Definition: win_api_x86_32_seh.py:645
def do_add_section(self, section)
Definition: elf_init.py:531
def __init__(self)
Definition: win_api_x86_32.py:3086
paddingbyte
Definition: strpatchwork.py:34
def sys_arml_stat64(jitter, linux_env)
Definition: syscall.py:232
cryptdll_md5_h
Definition: win_api_x86_32.py:183
def my_FindNextFile(jitter, encode_str)
Definition: win_api_x86_32.py:3161
Definition: minidump.py:68
def getsectionbyvad(self, ad)
Definition: elf_init.py:863
def kernel32_VirtualQuery(jitter)
Definition: win_api_x86_32.py:2761
env_variables
Definition: win_api_x86_32.py:187
def kernel32_GetSystemTimeAsFileTime(jitter)
Definition: win_api_x86_32.py:2615
_sex
Definition: new_cstruct.py:189
slots
Definition: win_api_x86_32.py:3295
def is_addr_in(self, addr)
Definition: pe_init.py:155
def kernel32_GetProcessHeap(jitter)
Definition: win_api_x86_32.py:3331
sex
Definition: new_cstruct.py:192
size
Definition: elf_init.py:223
def sys_generic_fcntl64(jitter, linux_env)
Definition: syscall.py:847
def sys_generic_getuid(jitter, linux_env)
Definition: syscall.py:795
nt_mdl_ad
Definition: win_api_x86_32.py:180
DirRes
Definition: pe_init.py:217
def ntdll_LdrLoadDll(jitter)
Definition: win_api_x86_32.py:1972
Definition: elf_init.py:463
file_descriptors
Definition: environment.py:409
sex
Definition: elf_init.py:830
def ntdll_RtlEnlargedUnsignedMultiply(jitter)
Definition: win_api_x86_32.py:1313
Definition: elf_init.py:211
int nb_total_fnode
Definition: environment.py:204
def kernel32_lstrcmpi(jitter)
Definition: win_api_x86_32.py:1538
def read(self, count)
Definition: environment.py:105
def address(self)
Definition: minidump_init.py:22
pck32
Definition: utils.py:25
def test_SystemInformationFunctions(self)
Definition: win_api_x86_32.py:179
Definition: elf_init.py:169
Definition: win_api_x86_32.py:22
def kernel32_GetModuleFileNameA(jitter)
Definition: win_api_x86_32.py:932
Definition: elf_init.py:103
def get(self, ad_start, ad_stop=None)
Definition: elf_init.py:717
_wsize
Definition: pe_init.py:194
cur_listdir
Definition: environment.py:134
def __bytes__(self)
Definition: win_api_x86_32.py:267
int lastwritetime
Definition: win_api_x86_32.py:3053
def sys_x86_64_getdents(jitter, linux_env)
Definition: syscall.py:537
def add_process_env(jitter)
Definition: win_api_x86_32_seh.py:406
def __init__(self, name, info)
Definition: win_api_x86_32.py:91
int align
Definition: common.py:60
def shlwapi_StrToInt64ExW(jitter)
Definition: win_api_x86_32.py:2180
def msvcrt_wcslen(jitter)
Definition: win_api_x86_32.py:2804
def __init__(self, minidump_str)
Definition: minidump_init.py:75
def msvcrt__ultow(jitter)
Definition: win_api_x86_32.py:3209
dbg_present
Definition: win_api_x86_32.py:142
def my_lstrcmp(jitter, funcname, get_str)
Definition: win_api_x86_32.py:1486
parent
Definition: pe_init.py:94
def get_sym(self)
Definition: elf_init.py:108
int dwreserved1
Definition: win_api_x86_32.py:3057
def get_virt(self)
Definition: pe_init.py:540
def advapi32_CryptAcquireContext(jitter, funcname, get_str)
Definition: win_api_x86_32.py:483
def __init__(self, offset, memory_desc, module=None, memory_info=None)
Definition: minidump_init.py:14
def __init__(self, enum_info)
Definition: minidump.py:12
def msvcrt_wcscpy(jitter)
Definition: win_api_x86_32.py:1567
alloc_align
Definition: win_api_x86_32.py:137
def __setitem__(self, item, value)
Definition: elf_init.py:356
def kernel32_FindFirstFileExA(jitter)
Definition: win_api_x86_32.py:3137
def kernel32_GetNativeSystemInfo(jitter)
Definition: win_api_x86_32.py:3176
def kernel32_Process32Next(jitter)
Definition: win_api_x86_32.py:353
real_fd
Definition: environment.py:153
Definition: win_api_x86_32.py:3049
def __get__(self, owner, _)
Definition: pe_init.py:26
def __repr__(self)
Definition: elf_init.py:634
symtab
Definition: elf_init.py:424
def ntoskrnl_IoAllocateMdl(jitter)
Definition: win_api_x86_32.py:1407
def stat(self)
Definition: environment.py:77
def kernel32_lstrcpy(jitter)
Definition: win_api_x86_32.py:1558
def advapi32_CryptGetHashParam(jitter)
Definition: win_api_x86_32.py:546
def encode_win_str_w(value)
Definition: common.py:40
def test_msvcrt_realloc(self)
Definition: win_api_x86_32.py:73
file_type
Definition: environment.py:48
def kernel32_SetCurrentDirectory(jitter, get_str)
Definition: win_api_x86_32.py:2369
def kernel32_GetModuleHandleA(jitter)
Definition: win_api_x86_32.py:1086
def msvcrt_fclose(jitter)
Definition: win_api_x86_32.py:2989
int lpReserved2
Definition: win_api_x86_32.py:2493
def xxx_strlen(jitter)
Definition: linux_stdlib.py:185
def kernel32_SetCurrentDirectoryW(jitter)
Definition: win_api_x86_32.py:2376
def kernel32_ReadFile(jitter)
Definition: win_api_x86_32.py:718
def __init__(self, linux_env)
Definition: environment.py:372
DirImport
Definition: pe_init.py:213
int creationtime
Definition: win_api_x86_32.py:3051
Definition: pe_init.py:38
def printable(string)
Definition: elf_init.py:22
def shlwapi_StrCmpNIA(jitter)
Definition: win_api_x86_32.py:2253
_size
Definition: cstruct.py:69
Definition: win_api_x86_32.py:261
def hal_ExReleaseFastMutex(jitter)
Definition: win_api_x86_32.py:1460
def int_to_byte(value)
Definition: utils.py:120
def windows_to_sbpath(path)
Definition: common.py:120
allocated_pages
Definition: win_api_x86_32.py:191
def ntdll_RtlMoveMemory(jitter)
Definition: win_api_x86_32.py:1870
def __getitem__(self, item)
Definition: win_api_x86_32.py:126
Definition: environment.py:175
Definition: elf_init.py:276
def test_VirtualXXFunctions(self)
Definition: win_api_x86_32.py:231
def append(self, item)
Definition: elf_init.py:538
def kernel32_WideCharToMultiByte(jitter)
Definition: win_api_x86_32.py:1715
def reloc_to(self, imgbase)
Definition: pe_init.py:613
Definition: minidump.py:510
def kernel32_CreateFileA(jitter)
Definition: win_api_x86_32.py:710
flags
Definition: environment.py:151
def sys_x86_64_newuname(jitter, linux_env)
Definition: syscall.py:123
def sys_x86_64_writev(jitter, linux_env)
Definition: syscall.py:249
content
Definition: pe_init.py:185
Definition: elf_init.py:47
def user32_IsCharLowerA(jitter)
Definition: win_api_x86_32.py:2913
def sys_x86_64_getxattr(jitter, linux_env)
Definition: syscall.py:650
Definition: minidump.py:249
sh
Definition: elf_init.py:252
def rva2virt(self, rva)
Definition: pe_init.py:503
def shlwapi_PathGetDriveNumberW(jitter)
Definition: win_api_x86_32.py:2137
info
Definition: environment.py:760
handle_toolhelpsnapshot
Definition: win_api_x86_32.py:139
all_handles
Definition: win_api_x86_32.py:103
def advapi32_CryptAcquireContextW(jitter)
Definition: win_api_x86_32.py:497
def __delete__(self, owner)
Definition: pe_init.py:34
int AT_ENTRY
Definition: environment.py:739
def ntdll_LdrGetProcedureAddress(jitter)
Definition: win_api_x86_32.py:1995
def fstat(self, fd)
Definition: environment.py:473
def kernel32_lstrcmpA(jitter)
Definition: win_api_x86_32.py:1522
def __bytes__(self)
Definition: new_cstruct.py:250
def __init__(self, number, flags, filesystem, real_path)
Definition: environment.py:130
def test_DebuggingFunctions(self)
Definition: win_api_x86_32.py:24
def write(self, data)
Definition: environment.py:121
_content
Definition: elf_init.py:253
def msvcrt_memcpy(jitter)
Definition: win_api_x86_32.py:2037
def __repr__(self)
Definition: strpatchwork.py:83
module
Definition: minidump_init.py:17
def kernel32_lstrcpyA(jitter)
Definition: win_api_x86_32.py:1554
def __getitem__(self, item)
Definition: elf_init.py:442
Definition: win_api_x86_32.py:133
def kernel32_GetVersion(jitter)
Definition: win_api_x86_32.py:374
def pack(self)
Definition: win_api_x86_32.py:2498
def xxx_free(jitter)
Definition: linux_stdlib.py:197
def kernel32_GetThreadLocale(jitter)
Definition: win_api_x86_32.py:2365
def msvcrt_memset(jitter)
Definition: win_api_x86_32.py:2016
def msvcrt_myfopen(jitter, get_str)
Definition: win_api_x86_32.py:3220
path_to_inode
Definition: environment.py:214
def cryptdll_MD5Final(jitter)
Definition: win_api_x86_32.py:1196
def __len__(self)
Definition: new_cstruct.py:258
def get_name(self, ofs)
Definition: elf_init.py:263
def shlwapi_StrToInt64Ex(jitter, funcname, get_str)
Definition: win_api_x86_32.py:2161
_enum_info
Definition: minidump.py:14
def __bytes__(self)
Definition: cstruct.py:150
_names
Definition: cstruct.py:71
int atime
Definition: environment.py:66
def content(self)
Definition: minidump_init.py:45
def __getitem__(self, item)
Definition: elf_init.py:838
def cmp(ir, instr, arg1, arg2)
Definition: sem.py:1062
def msvcrt_swprintf(jitter)
Definition: win_api_x86_32.py:2230
def set_win_str_w(jitter, addr, value)
Definition: common.py:50
def kernel32_GetSystemDirectoryW(jitter)
Definition: win_api_x86_32.py:1793
offset
Definition: minidump_init.py:15
def ntdll_RtlFindCharInUnicodeString(jitter)
Definition: win_api_x86_32.py:1252
def advapi32_CryptDeriveKey(jitter)
Definition: win_api_x86_32.py:575
def kernel32_GetCurrentThreadId(jitter)
Definition: win_api_x86_32.py:2545
Definition: elf_init.py:272
Definition: elf_init.py:89
def msvcrt_fread(jitter)
Definition: win_api_x86_32.py:2967
def sys_generic_setuid(jitter, linux_env)
Definition: syscall.py:824
def __repr__(self)
Definition: elf_init.py:255
def is_activated(flag)
Definition: minidump.py:368
l
Definition: win_api_x86_32.py:265
def kernel32_GetACP(jitter)
Definition: win_api_x86_32.py:3448
passthrough
Definition: environment.py:213
def name(self)
Definition: minidump_init.py:34
Definition: win_32_structs.py:129
def brk(self, addr, vmmngr)
Definition: environment.py:642
flags
Definition: environment.py:135
def get_name(self)
Definition: elf_init.py:78
int dwYCountChars
Definition: win_api_x86_32.py:2488
def __str__(self)
Definition: elf_init.py:558
def msvcrt_rand(jitter)
Definition: win_api_x86_32.py:2796
def kernel32_Sleep(jitter)
Definition: win_api_x86_32.py:1345
def resize(self, old, new)
Definition: elf_init.py:835
def get_size(self, vm, ptr)
Definition: common.py:98
int dwreserved0
Definition: win_api_x86_32.py:3056
def get(self, virt_start, virt_stop)
Definition: minidump_init.py:177
def kernel32_GetCPInfo(jitter)
Definition: win_api_x86_32.py:3481
runtime_dll
Definition: win_api_x86_32.py:167
def msvcrt_ftell(jitter)
Definition: win_api_x86_32.py:2946
def sys_x86_64_rt_sigprocmask(jitter, linux_env)
Definition: syscall.py:427
dictionary arch2context_cls
Definition: minidump.py:481
symbols
Definition: elf_init.py:425
win_event_num
Definition: win_api_x86_32.py:182
def my_strlen(jitter, funcname, get_str, mylen)
Definition: win_api_x86_32.py:1582
def readlink(self, path)
Definition: environment.py:303
Definition: elf_init.py:312
Definition: elf_init.py:459
Definition: minidump.py:287
_content
Definition: pe_init.py:192
def kernel32_TlsGetValue(jitter)
Definition: win_api_x86_32.py:2434
def __getitem__(self, item)
Definition: elf_init.py:757
Definition: win_api_x86_32.py:257
int nlink
Definition: environment.py:57
def getsectionbyname(self, name)
Definition: pe_init.py:465
Definition: interval.py:35
shlist
Definition: elf_init.py:499
def ntoskrnl_RtlQueryRegistryValues(jitter)
Definition: win_api_x86_32.py:1465
def shlwapi_PathIsFileSpec(jitter, funcname, get_str)
Definition: win_api_x86_32.py:2110
def kernel32_RtlMoveMemory(jitter)
Definition: win_api_x86_32.py:1237
def ntdll_RtlAnsiCharToUnicodeChar(jitter)
Definition: win_api_x86_32.py:1244
def datetime_to_systemtime(curtime)
Definition: win_api_x86_32.py:2600
def is_addr_in(self, ad)
Definition: elf_init.py:786
def kernel32_GetStringTypeW(jitter)
Definition: win_api_x86_32.py:3497
Definition: elf_init.py:308
def shlwapi_PathIsFileSpecA(jitter)
Definition: win_api_x86_32.py:2141
info
Definition: win_api_x86_32.py:93
def mmap(self, addr, len_, prot, flags, fd, off, vmmngr)
Definition: environment.py:579
tuple mask
Definition: common.py:62
int device_id
Definition: environment.py:53
dyntab
Definition: elf_init.py:344
def msvcrt_fseek(jitter)
Definition: win_api_x86_32.py:2935
def kernel32_lstrcmpW(jitter)
Definition: win_api_x86_32.py:1530
def virt2rva(self, addr)
Definition: pe_init.py:492
def _unpack(self, s)
Definition: cstruct.py:83
def sys_x86_64_lgetxattr(jitter, linux_env)
Definition: syscall.py:635
def kernel32_DecodePointer(jitter)
Definition: win_api_x86_32.py:444
def get_rvaitem(self, start, stop=None)
Definition: elf_init.py:668
def build_peb(jitter, peb_address)
Definition: win_api_x86_32_seh.py:124
def sys_generic_getegid(jitter, linux_env)
Definition: syscall.py:787
def msvcrt_strrchr(jitter)
Definition: win_api_x86_32.py:2021
Definition: win_api_x86_32.py:3084
def filetime_to_unixtime(filetime)
Definition: win_api_x86_32.py:2592
_shstr
Definition: elf_init.py:509
def my_strcpy(jitter, funcname, get_str, set_str)
Definition: win_api_x86_32.py:1542
minidump
Definition: minidump_init.py:19
def __iadd__(self, other)
Definition: strpatchwork.py:92
def shlwapi_PathGetDriveNumber(jitter, funcname, get_str)
Definition: win_api_x86_32.py:2121
def from_value(self, value)
Definition: minidump.py:28
Definition: win_api_x86_32.py:99
def ntdll_memset(jitter)
Definition: win_api_x86_32.py:2010
alloc_ad
Definition: win_api_x86_32.py:136
def __init__(self)
Definition: win_api_x86_32_seh.py:220
def get_fmt_args(jitter, fmt, cur_arg, get_str)
Definition: win_api_x86_32.py:2215
def test_get_size(self)
Definition: common.py:21
tls_values
Definition: win_api_x86_32.py:170
cur_dir
Definition: win_api_x86_32.py:177
def ntdll_RtlLargeIntegerSubtract(jitter)
Definition: win_api_x86_32.py:1319
int size
Definition: environment.py:62
linux_env
Definition: environment.py:212
def __init__(self, **kargs)
Definition: win_api_x86_32.py:3061
Definition: minidump.py:32
def kernel32_VirtualAlloc(jitter)
Definition: win_api_x86_32.py:853
def get_path_inode(self, real_path)
Definition: environment.py:295
int filesizelow
Definition: win_api_x86_32.py:3055
def __getitem__(self, key)
Definition: minidump.py:17
int lpTitle
Definition: win_api_x86_32.py:2482
def get_win_str_w(jitter, ad_str, max_char=None)
Definition: common.py:25
def kernel32_lstrlen(jitter)
Definition: win_api_x86_32.py:1598
def kernel32_GetLastError(jitter)
Definition: win_api_x86_32.py:999
cont_device_id
Definition: environment.py:52
int hStdOutput
Definition: win_api_x86_32.py:2495
def parse_content(self, sex, size)
Definition: elf_init.py:466
def msvcrt__wcsnicmp(jitter)
Definition: win_api_x86_32.py:1507
def kernel32_GetLocalTime(jitter)
Definition: win_api_x86_32.py:2627
Definition: minidump.py:148
nt_mdl_cur
Definition: win_api_x86_32.py:181
rva
Definition: pe_init.py:538
def kernel32_lstrcmpiW(jitter)
Definition: win_api_x86_32.py:1534
def ntdll_RtlFreeUnicodeString(jitter)
Definition: win_api_x86_32.py:1988
def max_addr(self)
Definition: elf_init.py:771
def build_ldr_data(jitter, modules_info)
Definition: win_api_x86_32_seh.py:151
def enable_syscall_handling(jitter, linux_env, syscall_callbacks)
Definition: syscall.py:1062
def kernel32_GetProcessAffinityMask(jitter)
Definition: win_api_x86_32.py:2787
int addr
Definition: common.py:59
def msvcrt_fwrite(jitter)
Definition: win_api_x86_32.py:2978
Definition: elf_init.py:304
def sys_x86_64_ioctl(jitter, linux_env)
Definition: syscall.py:478
def kernel32_CreateEventA(jitter)
Definition: win_api_x86_32.py:1825
current_pe
Definition: win_api_x86_32.py:168
def stat(self, path)
Definition: environment.py:480
def get_fmt_args(fmt, cur_arg, get_str, get_arg_n)
Definition: common.py:137
Definition: interval.py:1
def __init__(self, number, family, type_, protocol)
Definition: environment.py:180
def sys_x86_64_connect(jitter, linux_env)
Definition: syscall.py:675
a
Definition: basic_op.py:9
def user32_FindWindowA(jitter)
Definition: win_api_x86_32.py:462
def kernel32_GetVolumeInformationW(jitter)
Definition: win_api_x86_32.py:1668
def get_type(self)
Definition: elf_init.py:125
def syscall_x86_32_exception_handler(linux_env, syscall_callbacks, jitter)
Definition: syscall.py:1006
def sys_x86_64_openat(jitter, linux_env)
Definition: syscall.py:204
def xxx_malloc(jitter)
Definition: linux_stdlib.py:191
def test_ToolHelpFunctions(self)
Definition: win_api_x86_32.py:203
def kernel32_GetDriveTypeW(jitter)
Definition: win_api_x86_32.py:2736
int lpMinimumApplicationAddress
Definition: win_api_x86_32.py:1102
Opthdr
Definition: pe_init.py:204
handles
Definition: win_api_x86_32.py:3090
int mtimensec
Definition: environment.py:69
int user_uid
Definition: environment.py:390
def ntoskrnl_MmProtectMdlSystemAddress(jitter)
Definition: win_api_x86_32.py:1436
StatFSInfo
Definition: environment.py:23
def __delete__(self, owner)
Definition: elf_init.py:180
Definition: elf_init.py:161
def __str__(self)
Definition: elf_init.py:853
def ntoskrnl_IoFreeMdl(jitter)
Definition: win_api_x86_32.py:1452
def getsectionbyname(self, name)
Definition: elf_init.py:868
NTsig
Definition: pe_init.py:196
def getdents(self, fd, count, packing_callback)
Definition: environment.py:510
def advapi32_RegOpenKeyExW(jitter)
Definition: win_api_x86_32.py:2319
cryptcontext_num
Definition: win_api_x86_32.py:157
def kernel32_SHGetPathFromIDList(jitter, funcname, set_str)
Definition: win_api_x86_32.py:980
def data_to_map(self)
Definition: environment.py:779
def sys_arml_getdents64(jitter, linux_env)
Definition: syscall.py:571
def sys_x86_64_fstat(jitter, linux_env)
Definition: syscall.py:308
def resize(self, sec, diff)
Definition: elf_init.py:563
def msvcrt_new(jitter)
Definition: win_api_x86_32.py:303
b
Definition: basic_op.py:10
Definition: strpatchwork.py:25
def set(self, addr, data)
Definition: pe_init.py:118
int wShowWindow
Definition: win_api_x86_32.py:2491
def kernel32_LocalAlloc(jitter)
Definition: win_api_x86_32.py:298
def kernel32_WriteFile(jitter)
Definition: win_api_x86_32.py:2879
offset
Definition: win_api_x86_32.py:102
def get_win_str_a(jitter, ad_str, max_char=None)
Definition: common.py:13
def kernel32_FlsAlloc(self, jitter)
Definition: win_api_x86_32.py:3297
def syscall_x86_64_exception_handler(linux_env, syscall_callbacks, jitter)
Definition: syscall.py:981
def open_(self, path, flags, follow_link=True)
Definition: environment.py:465
def rfind(self, pattern, start=0, end=None)
Definition: strpatchwork.py:103
current_datetime
Definition: win_api_x86_32.py:192
Definition: elf_init.py:663
def kernel32_InitializeCriticalSection(jitter)
Definition: win_api_x86_32.py:2550
int lpDesktop
Definition: win_api_x86_32.py:2481
int AT_PLATFORM
Definition: environment.py:744
def resolve_path(self, path, follow_link=True)
Definition: environment.py:216
def shlwapi_PathFindExtensionA(jitter)
Definition: win_api_x86_32.py:2062
def build_memory(self)
Definition: minidump_init.py:140
string _packformat
Definition: new_cstruct.py:172
int AT_UID
Definition: environment.py:740
dw_pid_dummy1
Definition: win_api_x86_32.py:144
cstr
Definition: elf_init.py:52
dw_pid_cur
Definition: win_api_x86_32.py:147
def __getitem__(self, item)
Definition: elf_init.py:55
def user32_BlockInput(jitter)
Definition: win_api_x86_32.py:478
def shlwapi_PathIsPrefixW(jitter)
Definition: win_api_x86_32.py:2084
def off2rva(self, off)
Definition: pe_init.py:486
def prepare_loader_x86_64(jitter, argv, envp, auxv, linux_env, hlt_address=0x13371acc)
Definition: environment.py:799
def get_type(self)
Definition: elf_init.py:113
Definition: win_32_structs.py:93
def kernel32_CreateEventW(jitter)
Definition: win_api_x86_32.py:1829
def __init__(self, lst, shift=0)
Definition: cstruct.py:138
def __str__(self)
Definition: elf_init.py:648
Definition: environment.py:101
def xxx_strcmp(jitter)
Definition: linux_stdlib.py:202
def my_FindFirstFile(jitter, pfilepattern, pfindfiledata, get_win_str, encode_str)
Definition: win_api_x86_32.py:3115
def __setitem__(self, item, value)
Definition: elf_init.py:449
int AT_SYSINFO_EHDR
Definition: environment.py:748
def kernel32_GetProcAddress(jitter)
Definition: win_api_x86_32.py:1053
def kernel32_GetModuleHandle(jitter, funcname, get_str)
Definition: win_api_x86_32.py:1069
Definition: __init__.py:1
def parse_content(self)
Definition: minidump_init.py:94
string filesystem_base
Definition: environment.py:408
memory_info
Definition: minidump_init.py:18
module_filesize
Definition: win_api_x86_32.py:152
ptr_encode_key
Definition: win_api_x86_32.py:162
def __call__(self, ad_start, ad_stop=None, ad_step=None)
Definition: pe_init.py:102
def set_str(vm, addr, s, enc, end=u'\x00')
Definition: types.py:206
def msvcrt_wcscat(jitter)
Definition: win_api_x86_32.py:2382
def sys_x86_64_rt_sigaction(jitter, linux_env)
Definition: syscall.py:71
def msvcrt_delete(jitter)
Definition: win_api_x86_32.py:310
def test_msvcrt_swprintf(self)
Definition: win_api_x86_32.py:52
module_file_nul
Definition: win_api_x86_32.py:166
def __repr__(self)
Definition: win_api_x86_32.py:113
_content
Definition: elf_init.py:816
def kernel32_CreateFileMappingW(jitter)
Definition: win_api_x86_32.py:2665
def __init__(self)
Definition: linux_stdlib.py:22
def is_activated(flag)
Definition: minidump.py:295
def xxx_memset(jitter)
Definition: linux_stdlib.py:114
Definition: elf_init.py:148
def unixtime_to_filetime(unixtime)
Definition: win_api_x86_32.py:2584
def return_from_seh(jitter)
Definition: win_api_x86_32_seh.py:657
1.8.20