添加沙箱功能和API钩子支持
- 在沙箱中实现了新的功能,包括内存分配和API钩子初始化 - 更新了沙箱类,增加了对WFP引擎的支持 - 添加了多个API的实现,如GetLastError、InitializeCriticalSection等 - 修改了主函数以使用新的沙箱功能,替换了恶意软件扫描功能 - 更新了项目文件以包含新的源文件和API实现 - 改进了错误处理和日志记录功能
This commit is contained in:
@@ -3,21 +3,23 @@
|
||||
|
||||
#define _CRT_SECURE_NO_WARNINGS
|
||||
#include <iostream>
|
||||
#include <iostream>
|
||||
#include <winternl.h>
|
||||
#include <WinSock2.h>
|
||||
|
||||
#include <vector>
|
||||
#include <map>
|
||||
#include <unordered_map>
|
||||
#include <ntstatus.h>
|
||||
#include <ctime>
|
||||
|
||||
|
||||
#include <functional>
|
||||
#include <string>
|
||||
#include <vector>
|
||||
#include "unicorn/include/unicorn/unicorn.h"
|
||||
#include "capstone/include/capstone/capstone.h"
|
||||
#pragma comment(lib, "unicorn/unicorn.lib")
|
||||
#pragma comment(lib, "capstone/capstone.lib")
|
||||
#include "libpeconv/include/peconv.h"
|
||||
#include "native_struct.h"
|
||||
#include "tiny_wfp_structs.h"
|
||||
struct BasicPeInfo {
|
||||
std::string inputFilePath;
|
||||
bool isX64;
|
||||
@@ -29,6 +31,7 @@ struct BasicPeInfo {
|
||||
size_t peSize;
|
||||
PIMAGE_NT_HEADERS ntHead64;
|
||||
PIMAGE_NT_HEADERS32 ntHead32;
|
||||
bool isDll;
|
||||
};
|
||||
#include "sandbox.h"
|
||||
#include "ml.h"
|
||||
Reference in New Issue
Block a user