534b6a84a6
- 在沙箱中实现了新的功能，包括内存分配和API钩子初始化 - 更新了沙箱类，增加了对WFP引擎的支持 - 添加了多个API的实现，如GetLastError、InitializeCriticalSection等 - 修改了主函数以使用新的沙箱功能，替换了恶意软件扫描功能 - 更新了项目文件以包含新的源文件和API实现 - 改进了错误处理和日志记录功能
37 lines
849 B
C++
37 lines
849 B
C++
#pragma once
|
|
#define LOG_LEVEL 0
|
|
|
|
#define _CRT_SECURE_NO_WARNINGS
|
|
#include <iostream>
|
|
#include <WinSock2.h>
|
|
|
|
#include <vector>
|
|
#include <map>
|
|
#include <unordered_map>
|
|
#include <ctime>
|
|
|
|
#include <functional>
|
|
#include <string>
|
|
#include <vector>
|
|
#include "unicorn/include/unicorn/unicorn.h"
|
|
#include "capstone/include/capstone/capstone.h"
|
|
#pragma comment(lib, "unicorn/unicorn.lib")
|
|
#pragma comment(lib, "capstone/capstone.lib")
|
|
#include "libpeconv/include/peconv.h"
|
|
#include "native_struct.h"
|
|
#include "tiny_wfp_structs.h"
|
|
struct BasicPeInfo {
|
|
std::string inputFilePath;
|
|
bool isX64;
|
|
uint64_t RecImageBase;
|
|
uint64_t entryPoint;
|
|
uint64_t imageEnd;
|
|
bool isRelocated;
|
|
uint8_t* peBuffer;
|
|
size_t peSize;
|
|
PIMAGE_NT_HEADERS ntHead64;
|
|
PIMAGE_NT_HEADERS32 ntHead32;
|
|
bool isDll;
|
|
};
|
|
#include "sandbox.h"
|
|
#include "ml.h" |