(ql: Qiling, address: int, params)
| 73 | 'hTemplateFile' : HANDLE |
| 74 | }) |
| 75 | def hook_CreateFileA(ql: Qiling, address: int, params): |
| 76 | lpFileName = params["lpFileName"] |
| 77 | |
| 78 | if lpFileName.startswith("\\\\.\\"): |
| 79 | if hasattr(ql, 'amsint32_driver'): |
| 80 | return 0x13371337 |
| 81 | |
| 82 | return -1 |
| 83 | |
| 84 | return _CreateFile(ql, address, params) |
| 85 | |
| 86 | @winsdkapi(cc=STDCALL, params={ |
| 87 | 'hFile' : HANDLE, |
nothing calls this directly
no test coverage detected