Maurice Heumann
5d81d8bda9
Implement NtQueryMultipleValueKey ( #684 )
...
This PR implements `NtQueryMultipleValueKey` that is used in calls like
`RegQueryMultipleValues`.
2026-01-06 10:38:10 +01:00
Maurice Heumann
e46e8dcf7a
more object syscalls ( #687 )
2026-01-06 10:30:47 +01:00
Maurice Heumann
d3af3c781c
Add support for user_object/user_handle_table ( #677 )
...
Fixes #641
This PR is my attempt to add support for user32 objects and the user32
handle table. I also added a test, but as expected, it fails on Windows
2022. I’ll try to fix that another day, but feel free to review the code
😄
2026-01-06 10:21:58 +01:00
redthing1
17d1e23b60
syscalls.cpp: clang format
2026-01-05 23:15:02 -08:00
redthing1
51034297bf
object syscalls: wire up the new syscalls
2026-01-05 23:08:21 -08:00
ssvine
37c2184bfc
Implement NtQueryMultipleValueKey
2026-01-05 13:11:35 +03:00
thejanit0r
0688a2cb98
Fixed formatting
2026-01-04 13:37:23 +01:00
thejanit0r
b00f40aba7
Added support for NtCreateDirectoryObject
2026-01-04 04:31:49 +01:00
Igor Pissolati
de491ade0e
Add support for user_object/user_handle_table
2026-01-02 19:46:04 -03:00
66hh
82dff75f64
Fix the formatting again
2025-12-30 19:22:10 +08:00
66hh
478fb7b4dd
Register NtWriteVirtualMemory
2025-12-28 20:52:43 +08:00
66hh
95b17566a0
Add NtRaiseHardError error message logging
2025-12-27 17:17:24 +08:00
momo5502
ca15abd8ef
Add missing syscalls
2025-12-07 11:22:37 +01:00
momo5502
8c75475f0d
Stub more syscalls
2025-11-20 18:43:20 +01:00
momo5502
98eb1f92d1
Better formatting
2025-10-26 18:48:51 +01:00
momo5502
cb4fe6c30f
Merge remote-tracking branch 'origin/main' into wow64
2025-10-25 11:06:03 +02:00
Igor Pissolati
b6d7a012d7
Fix issue in NtUserEnumDisplayDevices and NtUserEnumDisplaySettings
2025-10-23 16:02:53 -03:00
Igor Pissolati
c07f541528
Stub NtSetSecurityObject
2025-10-22 17:20:38 -03:00
Igor Pissolati
4fbd65a302
Fix DISPLAY_DEVICEW value
2025-10-22 17:17:02 -03:00
Igor Pissolati
54ebbe27c2
Implement NtUserEnumDisplaySettings syscall
2025-10-22 17:16:10 -03:00
momo5502
effd2f7a02
Merge remote-tracking branch 'origin/main' into wow64
2025-10-21 20:45:29 +02:00
Maurice Heumann
b84ae7475f
Implement ALPC port abstraction and implement DNS resolver port ( #558 )
...
This PR introduces an abstraction for ALPC ports to make them easier to
manage in the future, and implements the DNS resolver port, at least
enough to get host address queries working.
There's a lot of code in this PR that I'm not very confident about, so
don't hesitate on the feedback 😄
<img width="1377" height="624" alt="image"
src="https://github.com/user-attachments/assets/4d56b84d-4b87-42ed-9bfa-be04dbbf3735 "
/>
2025-10-21 20:42:26 +02:00
Maurice Heumann
304dbcc661
Comprehensive WOW64 subsystem implementation ( #555 )
...
# Major Features Implemented
**Core WOW64 Architecture**
1. Full TEB, PEB, and Windows structure implementations for 32-bit
processes
2. Proper thread context switching with 32-bit stack allocation
3. Configurable memory allocation with 32-bit/64-bit address space
handling
4. Automatic WOW64 process identification and handling
5. Heaven's Gate Implementation for handling exceptions
**Enhanced Emulation Features**
1. Fixed GDT setup and segment management for WOW64
2. Multi-architecture PE loading with proper import resolution
3. Segment-aware disassembly with WOW64 debugging capabilities
**Testing & Validation**
**32-bit Test Sample**: Minimal "hello" executable with full ASM source
# TODO
Needs more testing, currently in very early stages.
2025-10-21 20:13:01 +02:00
Igor Pissolati
248c09d554
Implement ALPC port abstraction and implement DNS resolver port
2025-10-19 23:23:29 -03:00
Igor Pissolati
887b02c240
Support file renaming and support relative path in NtQueryAttributesFile
2025-10-19 17:51:44 -03:00
brian
65eecf1cfd
Comprehensive WOW64 subsystem implementation
2025-10-13 19:55:50 +08:00
momo5502
847765ec71
Log window access
2025-09-12 21:02:45 +02:00
momo5502
9c29f26647
Small fixes
2025-08-17 07:26:11 +02:00
momo5502
7d6648ade0
Extend clang-format column limit to 140
2025-08-16 14:55:07 +02:00
CarlTSpeak
cae1cf5c1f
Added stubs for NtCreateNamedPipeFile NtReleaseWorkerFactoryWorker
2025-08-05 15:35:31 +01:00
momo5502
bda89b5d1e
Add more syscalls
2025-06-15 19:48:05 +02:00
momo5502
43ff531354
Add NtRemoveIoCompletionEx syscall stub
2025-06-14 08:46:27 +02:00
momo5502
906cec808a
Small fixes
2025-06-07 20:10:36 +02:00
Igor Pissolati
4fecea3aff
Apply review suggested change
2025-06-02 14:34:12 -03:00
Igor Pissolati
9f32620220
Fix failing checks
2025-06-02 14:32:15 -03:00
Igor Pissolati
c67146ee45
Add new syscalls
2025-06-02 14:32:15 -03:00
momo5502
aa763c8392
Prepare more timer syscalls
2025-06-01 14:05:18 +02:00
momo5502
da658e5178
Prepare timer support
2025-06-01 13:56:45 +02:00
momo5502
c605131a80
Small changes
2025-06-01 12:48:59 +02:00
momo5502
ed80b86e22
Fix compilation
2025-06-01 07:54:42 +02:00
momo5502
e763fdac54
Support more syscalls
2025-05-31 21:27:32 +02:00
momo5502
b6f4645420
Some more syscalls
2025-05-31 13:21:19 +02:00
Igor Pissolati
e0507aa2c5
Fix afd_endpoint::ioctl_connect
2025-05-21 19:28:27 -03:00
Igor Pissolati
4b51123cd1
Properly reset completion event
2025-05-21 12:15:18 -03:00
Igor Pissolati
4888142d22
Better handling of NtCreateKey
2025-05-20 21:44:18 -03:00
momo5502
beea923a15
Fix warning
2025-05-18 10:52:52 +02:00
momo5502
67031b40ea
More UI syscalls
2025-05-18 10:35:22 +02:00
momo5502
836262f3d7
Stub NtUserChangeWindowMessageFilterEx
2025-05-18 10:03:56 +02:00
momo5502
6241c10f02
Support window props
2025-05-18 09:51:46 +02:00
momo5502
0fbd563e8c
Support window creation
2025-05-18 09:51:28 +02:00
