windeployer.h File Reference

#include "introtypes.h"

Go to the source code of this file.

Functions
INTSTATUS	IntWinDepInjectProcess (DWORD AgentTag, PBYTE AgentContent, DWORD AgentSize, const CHAR *Name, const CHAR *Args)
	Inject a process inside a Windows guest. More...
INTSTATUS	IntWinDepInjectFile (PBYTE FileContent, DWORD FileSize, const CHAR *Name)
	Inject a file inside the Windows guest. More...

Function Documentation

IntWinDepInjectFile()

INTSTATUS IntWinDepInjectFile	(	PBYTE	FileContent,
		DWORD	FileSize,
		const CHAR *	Name
	)

Inject a file inside the Windows guest.

This function will inject a file inside the guest. The file will be written inside the System% folder, so make sure you use a name that will not conflict with potential existing files.

Parameters

[in]	FileContent	The file contents to be injected.
[in]	FileSize	The file size.
[in]	Name	The file name.

Return values

INT_STATUS_SUCCESS

On success.

Definition at line 294 of file windeployer.c.

Referenced by IntDepInjectFile().

IntWinDepInjectProcess()

INTSTATUS IntWinDepInjectProcess	(	DWORD	AgentTag,
		PBYTE	AgentContent,
		DWORD	AgentSize,
		const CHAR *	Name,
		const CHAR *	Args
	)

Inject a process inside a Windows guest.

Inject a process inside the Windows guest. The executable file will be written inside the System% folder, so make sure you use a name that will not conflict with existing files inside that folder. The process will be started under the SYSTEM user by default.

Parameters

[in]	AgentTag	Tag used to identify the agent. Some tags are predefined and reserved: IG_AGENT_TAG_DUMMY_TOOL - used to test the injection; IG_AGENT_TAG_LOG_GATHER_TOOL - the log gather tool; IG_AGENT_TAG_AGENT_KILLER_TOOL - the agent killer; Other agents must have another tag, which can later be used to identify the agent.
[in]	AgentContent	Unless AgentTag indicates a predefined agent, this must be supplied.
[in]	AgentSize	Size of the AgentContent buffer.
[in]	Name	Agent name. The process will have this name inside the guest.
[in]	Args	Optional arguments to be passed to the agent.

Return values

INT_STATUS_SUCCESS	On success.
INT_STATUS_INVALID_PARAMETER	If an invalid parameter is supplied.

Definition at line 137 of file windeployer.c.

Referenced by IntDepInjectProcess().