Willi Ballenthin 38c3d80246 Declare wvsprintf as stdcall ...

wvsprintfA and wvsprintfW are WINAPI functions with three parameters,
but the hook declared them as cdecl with variable arguments. On x86 the
caller's 12 bytes of arguments stayed on the stack, so ESP was wrong
after every call. The handler also wrote an ANSI string to the buffer
of wvsprintfW.

The signature database records no names for the first two parameters,
so the overrides name them.

2026-10-08 20:17:52 +01:00

..

gen_phnt_signatures.py

Emulate unhooked imports from Win32 API signatures (win32metadata + phnt) (#324)

2026-09-15 09:14:55 +01:00

gen_win32_signatures.py

Name the urlmon download parameters

2026-10-08 20:08:50 +01:00

win32_overrides.json

Declare wvsprintf as stdcall

2026-10-08 20:17:52 +01:00