-
Notifications
You must be signed in to change notification settings - Fork 22
/
config.h
62 lines (44 loc) · 1.62 KB
/
config.h
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
/*
Cuckoo Sandbox - Automated Malware Analysis
Copyright (C) 2010-2012 Cuckoo Sandbox Developers
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
struct _g_config {
// name of the pipe to communicate with cuckoo
char pipe_name[MAX_PATH];
// results directory, has to be hidden
char results[MAX_PATH];
// analyzer directory, has to be hidden
char analyzer[MAX_PATH];
// cuckoomon DLL directory
wchar_t dllpath[MAX_PATH];
// file of interest
wchar_t *file_of_interest;
// URL of interest
wchar_t *url_of_interest;
// if this mutex exists then we're shutting down
char shutdown_mutex[MAX_PATH];
// is this the first process or not?
int first_process;
// how many milliseconds since startup
unsigned int startup_time;
// do we want to enable the retaddr check?
int retaddr_check;
// do we force sleep-skipping despite threads?
int force_sleepskip;
// server ip and port
unsigned int host_ip;
unsigned short host_port;
BOOLEAN suspend_logging;
};
extern struct _g_config g_config;
int read_config(void);