Functions
void	get_notify (dword p_ev)

void	srv_handler (dword ioctl)

void	get_service (dword sz_name)

void	reg_service_ex (dword name, dword handler, dword srvsize)

void	get_proc (dword exp, dword sz_name)

void	get_coff_sym (dword pSym, dword count, dword sz_sym)

void	get_fileinfo (dword file_name, dword info)

void	read_file (dword file_name, dword buffer, dword off, dword bytes)

void	load_file (dword file_name)
	Allocate kernel memory and loads the specified file. More...

void	load_file_umode (dword file_name)

void	get_proc_ex (dword proc_name, dword imports)

void	fix_coff_symbols (dword sec, dword symbols, dword sym_count, dword strings, dword imports)

void	fix_coff_relocs (dword coff, dword sym, dword delta)

void	rebase_coff (dword coff, dword sym, dword delta)

void	load_library (dword file_name, dword encoding)

Variables
label	srv_handlerEx

handle	restore

label	reg_service

label	reg_usb_driver

label	stop_all_services
	used in shutdown system More...

dd	cmd

dd	offset

dd	count

dd	buff

dd	name

dd	attr

dd	flags

dd	cr_time

dd	cr_date

dd	acc_time

dd	acc_date

dd	mod_time

dd	mod_date

dd	file_size

dd	file

dd	file2

dd	km_file

dd	um_file

MUTEX	unpack_mutex

dd	retval

dd	n_sec

label	coff_get_align
	in: edx -> COFF_SECTION struct out: eax = alignment as mask for bits to drop More...

dd	fullname

rb	fileinfo

dd	coff

dd	img_base

label	init_dlls_in_thread
	initialize [APPDATA.dlls_list_ptr] for given thread DLL is per-process object, so APPDATA.dlls_list_ptr must be kept in sync for all threads of one process. out: eax = APPDATA.dlls_list_ptr if all is OK, NULL if memory allocation failed More...

label	dereference_dll
	in: eax = number of references to delete, esi -> DLLDESCR struc More...

label	destroy_hdll

label	destroy_all_hdlls
	ecx -> APPDATA for slot, esi = dlls_list_ptr More...

label	create_kernel_object

label	destroy_kernel_object

label	create_object

label	destroy_object

Function Documentation

◆ fix_coff_relocs()

void fix_coff_relocs	(	dword	coff,
		dword	sym,
		dword	delta
	)

Source: core/dll.inc:729

◆ fix_coff_symbols()

void fix_coff_symbols	(	dword	sec,
		dword	symbols,
		dword	sym_count,
		dword	strings,
		dword	imports
	)

Source: core/dll.inc:666

◆ get_coff_sym()

void get_coff_sym	(	dword	pSym,
		dword	count,
		dword	sz_sym
	)

Source: core/dll.inc:287

◆ get_fileinfo()

void get_fileinfo	(	dword	file_name,
		dword	info
	)

Source: core/dll.inc:306

◆ get_notify()

void get_notify ( dword p_ev )

Source: core/dll.inc:20

◆ get_proc()

void get_proc	(	dword	exp,
		dword	sz_name
	)

Source: core/dll.inc:264

◆ get_proc_ex()

void get_proc_ex	(	dword	proc_name,
		dword	imports
	)

Source: core/dll.inc:637

◆ get_service()

void get_service ( dword sz_name )

Source: core/dll.inc:118

◆ load_file()

void load_file ( dword file_name )

Allocate kernel memory and loads the specified file.

Parameters

file_name Path to file

Returns: File image in kernel memory in eax and size of file in ebx

Warning: You must call kernel_free() to delete each file loaded by the load_file() function

Source: core/dll.inc:383

◆ load_file_umode()

void load_file_umode ( dword file_name )

Source: core/dll.inc:488

◆ load_library()

void load_library	(	dword	file_name,
		dword	encoding
	)

Source: core/dll.inc:844

◆ read_file()

void read_file	(	dword	file_name,
		dword	buffer,
		dword	off,
		dword	bytes
	)

Source: core/dll.inc:342

◆ rebase_coff()

void rebase_coff	(	dword	coff,
		dword	sym,
		dword	delta
	)

Source: core/dll.inc:784

◆ reg_service_ex()

void reg_service_ex	(	dword	name,
		dword	handler,
		dword	srvsize
	)

Source: core/dll.inc:185

◆ srv_handler()

void srv_handler ( dword ioctl )

Source: core/dll.inc:48

Variable Documentation

◆ acc_date

dd acc_date

Initial value: ?

Source: core/dll.inc:390

Initial value: ?

Source: core/dll.inc:495

◆ acc_time

dd acc_time

Initial value: ?

Source: core/dll.inc:389

Initial value: ?

Source: core/dll.inc:494

◆ attr

dd attr

Initial value: ?

Source: core/dll.inc:385

Initial value: ?

Source: core/dll.inc:490

◆ buff

dd buff

Initial value: ?

Source: core/dll.inc:312

Initial value: ?

Source: core/dll.inc:348

Initial value: ?

Source: core/taskman.inc:576

◆ cmd

dd cmd

Initial value: ?

Source: core/dll.inc:308

Initial value: ?

Source: core/dll.inc:344

◆ coff

dd coff

Initial value: ?

Source: core/dll.inc:848

◆ coff_get_align

label coff_get_align

in: edx -> COFF_SECTION struct out: eax = alignment as mask for bits to drop

Source: core/dll.inc:822

◆ count

dd count

Initial value: ?

Source: core/dll.inc:311

Initial value: ?

Source: core/dll.inc:347

Initial value: ?

Source: core/memory.inc:766

◆ cr_date

dd cr_date

Initial value: ?

Source: core/dll.inc:388

Initial value: ?

Source: core/dll.inc:493

◆ cr_time

dd cr_time

Initial value: ?

Source: core/dll.inc:387

Initial value: ?

Source: core/dll.inc:492

◆ create_kernel_object

label create_kernel_object

Source: core/dll.inc:1304

◆ create_object

label create_object

Source: core/dll.inc:1358

◆ dereference_dll

label dereference_dll

in: eax = number of references to delete, esi -> DLLDESCR struc

Source: core/dll.inc:1253

◆ destroy_all_hdlls

label destroy_all_hdlls

ecx -> APPDATA for slot, esi = dlls_list_ptr

Source: core/dll.inc:1287

◆ destroy_hdll

label destroy_hdll

Source: core/dll.inc:1267

◆ destroy_kernel_object

label destroy_kernel_object

Source: core/dll.inc:1332

◆ destroy_object

label destroy_object

Source: core/dll.inc:1406

◆ file

dd file

Initial value: ?

Source: core/dll.inc:395

◆ file2

dd file2

Initial value: ?

Source: core/dll.inc:396

◆ file_size

dd file_size

Initial value: ?

Source: core/dll.inc:393

Initial value: ?

Source: core/dll.inc:498

◆ fileinfo

rb fileinfo

Initial value: 40

Source: core/dll.inc:847

◆ flags

dd flags

Initial value: ?

Source: core/dll.inc:386

Initial value: ?

Source: core/dll.inc:491

Initial value: ?

Source: core/taskman.inc:644

◆ fullname

dd fullname

Initial value: ?

Source: core/dll.inc:846

◆ img_base

dd img_base

Initial value: ?

Source: core/dll.inc:849

◆ init_dlls_in_thread

label init_dlls_in_thread

initialize [APPDATA.dlls_list_ptr] for given thread DLL is per-process object, so APPDATA.dlls_list_ptr must be kept in sync for all threads of one process. out: eax = APPDATA.dlls_list_ptr if all is OK, NULL if memory allocation failed