dllmain.cpp

Go to the documentation of this file.

#include "PanoptesPE.h"
 
BOOL APIENTRY DllMain(HMODULE module, DWORD  dllAction, LPVOID lpReserved)
{
    switch (dllAction)
    {
    case DLL_PROCESS_ATTACH:
        //DisableThreadLibraryCalls(module);
        break;
    case DLL_THREAD_ATTACH:
        // Code to run when a thread is created
        break;
    case DLL_THREAD_DETACH:
        // Code to run when a thread ends
        break;
    case DLL_PROCESS_DETACH:
        break;
    }
    return TRUE;
}
 
extern "C" PANO_API int PanoBind(int ContainerPort)
{
    PanoptesServiceClient client = PanoptesServiceClient();
    if (!client.Hello(ExtensibilityType::EXTENSIBILITY_TYPE_PE, ContainerPort)) {
        return 0;
    }
 
    return ContainerPort;
}
 
extern "C" PANO_API bool PanoEntry(PeScan* data, MemScan* mem_data)
{
    if (data->PePath.empty()) {
        return false;
    }
 
    PortableExecutable pe = PortableExecutable(data->PePath);
    try {
        std::vector<std::string> imports = pe.GetImports();
        std::vector<std::pair<std::string, double>> sections = pe.GetSections();
        bool isSigned = pe.CheckIfSigned();
 
        PortableExecutable::PEScanData peData;
        peData.imports = imports;
        for (auto section : sections) {
            peData.sections.push_back(section.first);
            peData.section_entropy.push_back(section.second);
        }
 
        peData.isSigned = isSigned;
 
        PanoptesServiceClient client = PanoptesServiceClient();
        if (!client.SendResults_PE(data->PePath, peData)) {
            return false;
        }
    }
    catch (const exception& e) {
        return false;
    }
 
    return true;
}
 
extern "C" PANO_API bool PanoUnbind()
{
    HMODULE hModule = GetModuleHandleA("PanoptesPE.dll");
    if (hModule != NULL) {
        FreeLibraryAndExitThread(hModule, 0);
    }
    return true;
}