filprofiler
filprofiler copied to clipboard
Windows support
What needs doing:
- [ ] Figure out how to hook APIs, whatever the equivalent of LD_PRELOAD is. this may involve compiling a new python.exe or something terrible like that.
- [ ] Figure out what APIs to override and their semantics. There's
malloc()
etc. but presumably Windows has its own APIs too?
https://microsoft.github.io/mimalloc/overrides.html might be useful for understanding what to do.
Other resources
- AppInit_DLLs
- https://github.com/microsoft/detours
- https://en.wikipedia.org/wiki/DLL_injection
- https://github.com/sengelha/win32-ldpreload
- https://trello.com/c/OCsvFVJp/167-ldpreload-eq-for-windows-api-hooking
Another option is https://github.com/frida/frida-rust whihc is maybe cross-platform overriding.