From 688fe8943921f5f9998e128f27b48f6f0c352794 Mon Sep 17 00:00:00 2001 From: mrexodia Date: Wed, 6 Jul 2016 07:45:33 +0200 Subject: [PATCH] added GetTEBLocation to emulate (now works in x64dbg again!) --- TitanEngineEmulator/Emulator.h | 6 ++++++ TitanEngineEmulator/TitanEngineEmulator.cpp | 5 +++++ 2 files changed, 11 insertions(+) diff --git a/TitanEngineEmulator/Emulator.h b/TitanEngineEmulator/Emulator.h index 7c0c54d..c0aba2f 100644 --- a/TitanEngineEmulator/Emulator.h +++ b/TitanEngineEmulator/Emulator.h @@ -154,6 +154,12 @@ public: return nullptr; } + void* GetTEBLocation(HANDLE hProcess) + { + //TODO + return nullptr; + } + bool HideDebugger(HANDLE hProcess, DWORD PatchAPILevel) { //TODO diff --git a/TitanEngineEmulator/TitanEngineEmulator.cpp b/TitanEngineEmulator/TitanEngineEmulator.cpp index 80033e8..7a3ca4d 100644 --- a/TitanEngineEmulator/TitanEngineEmulator.cpp +++ b/TitanEngineEmulator/TitanEngineEmulator.cpp @@ -92,6 +92,11 @@ __declspec(dllexport) void* TITCALL GetPEBLocation(HANDLE hProcess) return emu.GetPEBLocation(hProcess); } +__declspec(dllexport) void* TITCALL GetTEBLocation(HANDLE hProcess) +{ + return emu.GetTEBLocation(hProcess); +} + __declspec(dllexport) bool TITCALL HideDebugger(HANDLE hProcess, DWORD PatchAPILevel) { return emu.HideDebugger(hProcess, PatchAPILevel);