Functions
void	get_notify (dword p_ev)

void	srv_handler (dword ioctl)

void	get_service (dword sz_name)

void	reg_service_ex (dword name, dword handler, dword srvsize)

void	get_proc (dword exp, dword sz_name)

void	get_coff_sym (dword pSym, dword count, dword sz_sym)

void	get_fileinfo (dword file_name, dword info)

void	read_file (dword file_name, dword buffer, dword off, dword bytes)

void	load_file (dword file_name)
	Allocate kernel memory and loads the specified file. More...

void	load_file_umode (dword file_name)

void	get_proc_ex (dword proc_name, dword imports)

void	fix_coff_symbols (dword sec, dword symbols, dword sym_count, dword strings, dword imports)

void	fix_coff_relocs (dword coff, dword sym, dword delta)

void	rebase_coff (dword coff, dword sym, dword delta)

void	load_library (dword file_name, dword encoding)

Variables
label	srv_handlerEx

handle	restore

label	reg_service

label	reg_usb_driver

label	stop_all_services
	used in shutdown system More...

dd	cmd

dd	offset

dd	count

dd	buff

dd	name

dd	attr

dd	flags

dd	cr_time

dd	cr_date

dd	acc_time

dd	acc_date

dd	mod_time

dd	mod_date

dd	file_size

dd	file

dd	file2

dd	km_file

dd	um_file

MUTEX	unpack_mutex

dd	retval

dd	n_sec

label	coff_get_align
	in: edx -> COFF_SECTION struct out: eax = alignment as mask for bits to drop More...

dd	fullname

rb	fileinfo

dd	coff

dd	img_base

label	init_dlls_in_thread
	initialize [APPDATA.dlls_list_ptr] for given thread DLL is per-process object, so APPDATA.dlls_list_ptr must be kept in sync for all threads of one process. out: eax = APPDATA.dlls_list_ptr if all is OK, NULL if memory allocation failed More...

label	dereference_dll
	in: eax = number of references to delete, esi -> DLLDESCR struc More...

label	destroy_hdll

label	destroy_all_hdlls
	ecx -> APPDATA for slot, esi = dlls_list_ptr More...

label	create_kernel_object

label	destroy_kernel_object

label	create_object

label	destroy_object

Function Documentation

◆ fix_coff_relocs()

void fix_coff_relocs	(	dword	coff,
		dword	sym,
		dword	delta
	)

Source: core/dll.inc:727

◆ fix_coff_symbols()

void fix_coff_symbols	(	dword	sec,
		dword	symbols,
		dword	sym_count,
		dword	strings,
		dword	imports
	)

Source: core/dll.inc:664

◆ get_coff_sym()

void get_coff_sym	(	dword	pSym,
		dword	count,
		dword	sz_sym
	)

Source: core/dll.inc:285

◆ get_fileinfo()

void get_fileinfo	(	dword	file_name,
		dword	info
	)

Source: core/dll.inc:304

◆ get_notify()

void get_notify ( dword p_ev )

Source: core/dll.inc:18

◆ get_proc()

void get_proc	(	dword	exp,
		dword	sz_name
	)

Source: core/dll.inc:262

◆ get_proc_ex()

void get_proc_ex	(	dword	proc_name,
		dword	imports
	)

Source: core/dll.inc:635

◆ get_service()

void get_service ( dword sz_name )

Source: core/dll.inc:116

◆ load_file()

void load_file ( dword file_name )

Allocate kernel memory and loads the specified file.

Parameters

file_name Path to file

Returns: File image in kernel memory in eax and size of file in ebx

Warning: You must call kernel_free() to delete each file loaded by the load_file() function

Source: core/dll.inc:381

◆ load_file_umode()

void load_file_umode ( dword file_name )

Source: core/dll.inc:486

◆ load_library()

void load_library	(	dword	file_name,
		dword	encoding
	)

Source: core/dll.inc:842

◆ read_file()

void read_file	(	dword	file_name,
		dword	buffer,
		dword	off,
		dword	bytes
	)

Source: core/dll.inc:340

◆ rebase_coff()

void rebase_coff	(	dword	coff,
		dword	sym,
		dword	delta
	)

Source: core/dll.inc:782

◆ reg_service_ex()

void reg_service_ex	(	dword	name,
		dword	handler,
		dword	srvsize
	)

Source: core/dll.inc:183

◆ srv_handler()

void srv_handler ( dword ioctl )

Source: core/dll.inc:46

Variable Documentation

◆ acc_date

dd acc_date

Initial value: ?

Source: core/dll.inc:388

Initial value: ?

Source: core/dll.inc:493

◆ acc_time

dd acc_time

Initial value: ?

Source: core/dll.inc:387

Initial value: ?

Source: core/dll.inc:492

◆ attr

dd attr

Initial value: ?

Source: core/dll.inc:383

Initial value: ?

Source: core/dll.inc:488

◆ buff

dd buff

Initial value: ?

Source: core/dll.inc:310

Initial value: ?

Source: core/dll.inc:346

Initial value: ?

Source: core/taskman.inc:574

◆ cmd

dd cmd

Initial value: ?

Source: core/dll.inc:306

Initial value: ?

Source: core/dll.inc:342

◆ coff

dd coff

Initial value: ?

Source: core/dll.inc:846

◆ coff_get_align

label coff_get_align

in: edx -> COFF_SECTION struct out: eax = alignment as mask for bits to drop

Source: core/dll.inc:820

◆ count

dd count

Initial value: ?

Source: core/dll.inc:309

Initial value: ?

Source: core/dll.inc:345

Initial value: ?

Source: core/memory.inc:764

◆ cr_date

dd cr_date

Initial value: ?

Source: core/dll.inc:386

Initial value: ?

Source: core/dll.inc:491

◆ cr_time

dd cr_time

Initial value: ?

Source: core/dll.inc:385

Initial value: ?

Source: core/dll.inc:490

◆ create_kernel_object

label create_kernel_object

Source: core/dll.inc:1302

◆ create_object

label create_object

Source: core/dll.inc:1356

◆ dereference_dll

label dereference_dll

in: eax = number of references to delete, esi -> DLLDESCR struc

Source: core/dll.inc:1251

◆ destroy_all_hdlls

label destroy_all_hdlls

ecx -> APPDATA for slot, esi = dlls_list_ptr

Source: core/dll.inc:1285

◆ destroy_hdll

label destroy_hdll

Source: core/dll.inc:1265

◆ destroy_kernel_object

label destroy_kernel_object

Source: core/dll.inc:1330

◆ destroy_object

label destroy_object

Source: core/dll.inc:1404

◆ file

dd file

Initial value: ?

Source: core/dll.inc:393

◆ file2

dd file2

Initial value: ?

Source: core/dll.inc:394

◆ file_size

dd file_size

Initial value: ?

Source: core/dll.inc:391

Initial value: ?

Source: core/dll.inc:496

◆ fileinfo

rb fileinfo

Initial value: 40

Source: core/dll.inc:845

◆ flags

dd flags

Initial value: ?

Source: core/dll.inc:384

Initial value: ?

Source: core/dll.inc:489

Initial value: ?

Source: core/taskman.inc:642

◆ fullname

dd fullname

Initial value: ?

Source: core/dll.inc:844

◆ img_base

dd img_base

Initial value: ?

Source: core/dll.inc:847

◆ init_dlls_in_thread

label init_dlls_in_thread

initialize [APPDATA.dlls_list_ptr] for given thread DLL is per-process object, so APPDATA.dlls_list_ptr must be kept in sync for all threads of one process. out: eax = APPDATA.dlls_list_ptr if all is OK, NULL if memory allocation failed