MCPcopy Create free account
hub / github.com/qilingframework/qiling / hook_CreateFileA

Function hook_CreateFileA

examples/sality.py:70–79  ·  view source on GitHub ↗
(ql: Qiling, address: int, params)

Source from the content-addressed store, hash-verified

68 'hTemplateFile' : HANDLE
69})
70def hook_CreateFileA(ql: Qiling, address: int, params):
71 lpFileName = params["lpFileName"]
72 if lpFileName.startswith("\\\\.\\"):
73 if ql.amsint32_driver:
74 return 0x13371337
75 else:
76 return (-1)
77 else:
78 ret = _CreateFile(ql, address, params)
79 return ret
80
81def _WriteFile(ql: Qiling, address: int, params):
82 ret = 1

Callers

nothing calls this directly

Calls 1

_CreateFileFunction · 0.90

Tested by

no test coverage detected