ef13dc98b7
load windows CLI arguments properly
2026-01-26 19:29:17 +05:30
Willi Ballenthin
e50afa89e7
Merge pull request #257 from enkomio/master
2026-01-06 12:43:35 +01:00
unknown
bea73fc429
Refactored code used to create exported functions in decoy module
2026-01-06 11:38:17 +01:00
unknown
fe976a9f23
Improved PR #257
2025-12-19 12:38:01 +01:00
unknown
9673a6cb25
Correctly set HeadersSize and mapped DecoyModule headers to memory
2025-12-12 17:56:11 +01:00
unknown
b0dc80c879
statement refactoring
2025-12-12 17:33:51 +01:00
unknown
f165606c35
Improved GetProcAddress function emulation and DecoyModule jitting
2025-12-12 17:29:20 +01:00
Willi Ballenthin
df0f0309e3
Merge pull request #256 from enkomio/master
...
Remove debug output for argv[1]
2025-12-02 16:10:50 +01:00
unknown
73f0cbe0c3
Moved the class variable ldr_entries to be an instance variable. This will fix errors when speakeasy is used on multiple binaries
2025-12-02 16:03:39 +01:00
Antonio Parata
046d0fb8ef
Remove debug output for argv[1]
...
Remove debug output for argv[1] in ntoskrnl.py introduced in commit 0dedb7f0df
2025-11-21 12:52:23 +01:00
Willi Ballenthin
22ef6f7bf5
Update shell32.py
...
closes #254
2025-04-01 13:49:13 +02:00
Willi Ballenthin
255cc677f6
Update setup.cfg
...
closed #253
2025-04-01 13:48:03 +02:00
Willi Ballenthin
04e28fd6f3
Merge pull request #250 from snemes/patch-1
2025-02-28 19:53:39 +01:00
Willi Ballenthin
fe23eccc2f
Merge pull request #251 from snemes/patch-2
2025-02-28 19:51:18 +01:00
Sandor Nemes
545d2ba060
Added missing read-only KUSER_SHARED_DATA mapping
2025-02-28 17:47:17 +01:00
Sandor Nemes
e01999c918
Fixed missing whitespace
2025-02-28 16:08:35 +01:00
Willi Ballenthin
35b6600b27
v1.6.1
2025-02-19 16:22:57 +01:00
Willi Ballenthin
cdf4424ee6
Merge pull request #242 from dmsft/master
2024-04-12 07:04:33 +02:00
dmsft
ab563cb25c
Update speakeasy/winenv/api/usermode/kernel32.py
...
Co-authored-by: Willi Ballenthin <wballenthin@google.com>
2024-04-11 22:49:11 +02:00
dmsft
9f5a6506df
Add API signal()
2024-04-09 23:36:36 +02:00
dmsft
0b2fef2b7d
Add API fputc()
2024-04-09 22:53:48 +02:00
dmsft
e3677a46ce
Add multiple API hooks
...
CreateSemaphoreW
SetThreadStackGuarantee
SetThreadDescription
InitOnceBeginInitialize
These are just empty shells, enough to emulate through some samples.
2024-04-09 22:08:07 +02:00
dmsft
96c26a2a80
Add API hook for msvcrt!_errno()
2024-04-09 22:05:03 +02:00
Willi Ballenthin
5a9eb333f9
Merge pull request #238 from 0xa13d/add-wsaconnect-api
2024-03-04 17:04:59 +01:00
Aled Mason
48fcfa9712
Add WSAConnect API
2024-02-23 16:37:39 +00:00
Willi Ballenthin
078db942ec
Merge pull request #231 from HongThatCong/master
...
Add more API and some bugs fix
2023-03-24 10:29:15 +01:00
Hồng Thất Công
528fc6fd4d
Add more API and fix bugs
2023-03-24 16:15:16 +07:00
Hồng Thất Công
93ae0c1445
Trim trailing spaces
2023-03-24 12:06:59 +07:00
Willi Ballenthin
5c0a507a6d
Merge pull request #230 from cecio/master
...
Implementation of ShellExecuteEx
2023-03-02 13:21:26 +01:00
Willi Ballenthin
71043bf9ee
Update speakeasy/winenv/defs/windows/shell32.py
2023-03-02 13:19:45 +01:00
Willi Ballenthin
5af4f4a44c
Update speakeasy/winenv/api/usermode/shell32.py
2023-03-02 13:19:16 +01:00
cecio
176bda9cdf
Implementation of ShellExecuteEx
2023-03-01 22:42:55 +01:00
Willi Ballenthin
08ac824571
Merge pull request #229 from cecio/master
...
Allocate SizeOfStackReserve instead of fixed value in 'load_module'
2023-03-01 15:02:55 +01:00
cecio
193f3e595c
Update speakeasy/windows/win32.py
...
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
2023-03-01 14:41:16 +01:00
cecio
ab7c1aeca3
Allocate SizeOfStackReserve instead of fixed value in 'load_module'
2023-03-01 13:31:49 +01:00
Willi Ballenthin
6e2c805c5d
Merge pull request #226 from stonerhash/master
...
Fix potential ZwMapViewOfSection and GetKeyboardLayoutList bugs and add support for SystemCodeInformation class
2023-02-15 23:36:54 +01:00
Willi Ballenthin
655f546896
Update speakeasy/winenv/api/kernelmode/ntoskrnl.py
2023-02-15 23:36:48 +01:00
Willi Ballenthin
5e0ea6f134
Update speakeasy/winenv/api/usermode/user32.py
2023-02-15 23:36:41 +01:00
Willi Ballenthin
263652a2e1
Update speakeasy/winenv/defs/nt/ddk.py
2023-02-15 23:36:33 +01:00
stonerhash
b4776976d6
Correct usage of GetKeygboardLayoutList requires the nBuff to be set to zero. Then the function returns the number of items in order to allocate the necessary space. Without this change an "unmapped memory error" occurs
2023-02-15 12:30:26 +02:00
stonerhash
859749cf20
Added support of SystemCodeIntegrityInformation in ZwQuerySystemInformation. This is an anti-vm / anti-analysis. The code returns value 1. Definitions in ddk.py also updated.
2023-02-15 09:24:27 +02:00
stonerhash
f66858f0db
Merge branch 'master' of https://github.com/stonerhash/speakeasy
2023-02-14 23:23:44 +02:00
Willi Ballenthin
74cf405bdb
Merge pull request #221 from sacx/master
...
Modified ZwMapViewOfSection in order to use win_perms_to_emu_perms to successfully map Windows permission to emulation engine permissions. Definition of win_perms_to_emu_perms is also added.
2023-02-14 23:22:49 +02:00
Willi Ballenthin
4ca5936ce4
Merge pull request #221 from sacx/master
...
Added dummy functions for
2022-12-15 10:17:14 +01:00
sacx
813dccd9fa
Added GlobalFlags
2022-12-14 22:05:12 +02:00
sacx
ad77fd7a29
Added dummy functions for
...
RemoveDirectory
SetEndOfFile
2022-12-14 15:33:32 +02:00
Willi Ballenthin
2248af0c62
ci: test: try to fix python 3.10 build
2022-12-14 10:51:19 +01:00
Willi Ballenthin
23c1e6a67e
ci: test: try to fix python 3.10 build
2022-12-14 10:50:34 +01:00
Willi Ballenthin
df422e7b5c
Merge pull request #220 from sacx/master
...
Added InitCommonControls - Under Comctl32.dll version 6.0 and later, …
2022-12-14 10:49:19 +01:00
sacx
18858be6d1
Added InitCommonControls - Under Comctl32.dll version 6.0 and later, InitCommonControls does nothing. Applications must explicitly register all common controls through InitCommonControlsEx.
...
Added CharPrevA
2022-12-14 10:32:48 +02:00
