(ql: Qiling, address: int, params)
| 112 | 'lpOverlapped' : LPOVERLAPPED |
| 113 | }) |
| 114 | def hook_WriteFile(ql: Qiling, address: int, params): |
| 115 | hFile = params["hFile"] |
| 116 | lpBuffer = params["lpBuffer"] |
| 117 | nNumberOfBytesToWrite = params["nNumberOfBytesToWrite"] |
| 118 | lpNumberOfBytesWritten = params["lpNumberOfBytesWritten"] |
| 119 | if hFile == 0x13371337: |
| 120 | buffer = ql.mem.read(lpBuffer, nNumberOfBytesToWrite) |
| 121 | try: |
| 122 | nNumberOfBytesToWrite = utils.io_Write(ql.amsint32_driver, buffer) |
| 123 | ql.mem.write_ptr(lpNumberOfBytesWritten, nNumberOfBytesToWrite, 4) |
| 124 | except Exception: |
| 125 | ql.log.exception("") |
| 126 | r = False |
| 127 | else: |
| 128 | r = True |
| 129 | |
| 130 | return int(r) |
| 131 | |
| 132 | else: |
| 133 | return _WriteFile(ql, address, params) |
| 134 | |
| 135 | |
| 136 | # BOOL StartServiceA( |
nothing calls this directly
no test coverage detected