x64dbg
/
GleeBug
mirror of https://github.com/x64dbg/GleeBug
1
0
Fork 0
Code Releases Activity

added used cases for WhichData in PE query functions

This commit is contained in:
mrexodia 2017-05-23 19:54:57 +02:00
parent b23675562f
commit ebe1973c26
No known key found for this signature in database
GPG Key ID: FC89E0AAA0C1AAD8
3 changed files with 37 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
TitanEngineEmulator/Emulator.h
View File

@ -385,12 +385,42 @@ public:
ULONG_PTR GetPE32DataFromMappedFile(ULONG_PTR FileMapVA, DWORD WhichSection, DWORD WhichData)
{
//TODO
switch(WhichData)
{
case UE_PE_OFFSET:
break;
case UE_IMPORTTABLEADDRESS:
break;
case UE_IMPORTTABLESIZE:
break;
case UE_CHARACTERISTICS:
break;
case UE_DLLCHARACTERISTICS:
break;
case UE_OEP:
break;
case UE_SECTIONNUMBER:
break;
case UE_SECTIONVIRTUALOFFSET: //WhichSection: IMAGE_DIRECTORY_ENTRY_EXCEPTION
break;
case UE_SECTIONVIRTUALSIZE: //WhichSection: IMAGE_DIRECTORY_ENTRY_EXCEPTION
break;
case UE_SECTIONNAME:
break;
}
return 0;
}
ULONG_PTR GetPE32DataW(const wchar_t* szFileName, DWORD WhichSection, DWORD WhichData)
{
//TODO
switch(WhichData)
{
case UE_IMAGEBASE:
break;
case UE_OEP:
break;
}
return 0;
}
@ -400,12 +430,6 @@ public:
return false;
}
long GetPE32SectionNumberFromVA(ULONG_PTR FileMapVA, ULONG_PTR AddressToConvert)
{
//TODO
return 0;
}
bool TLSGrabCallBackDataW(const wchar_t* szFileName, LPVOID ArrayOfCallBacks, LPDWORD NumberOfCallBacks)
{
//TODO
@ -511,7 +535,12 @@ public:
//Generic Breakpoints
bool RemoveAllBreakPoints(DWORD RemoveOption)
{
//TODO
for(auto & it : mProcesses)
{
auto breakpoints = it.second.breakpoints; //explicit copy
for(const auto & jt : breakpoints)
it.second.DeleteGenericBreakpoint(jt.second);
}
return false;
}

1
TitanEngineEmulator/TitanEngine.h
View File

@ -109,6 +109,7 @@
#define UE_NUMBEROFRVAANDSIZES 22
#define UE_BASEOFCODE 23
#define UE_BASEOFDATA 24
#define UE_DLLCHARACTERISTICS 25
//leaving some enum space here for future additions
#define UE_SECTIONNAME 40
#define UE_SECTIONVIRTUALOFFSET 41

5
TitanEngineEmulator/TitanEngineEmulator.cpp
View File

@ -204,11 +204,6 @@ __declspec(dllexport) bool TITCALL IsFileDLLW(const wchar_t* szFileName, ULONG_P
return emu.IsFileDLLW(szFileName, FileMapVA);
}
__declspec(dllexport) long TITCALL GetPE32SectionNumberFromVA(ULONG_PTR FileMapVA, ULONG_PTR AddressToConvert)
{
return emu.GetPE32SectionNumberFromVA(FileMapVA, AddressToConvert);
}
__declspec(dllexport) bool TITCALL TLSGrabCallBackDataW(const wchar_t* szFileName, LPVOID ArrayOfCallBacks, LPDWORD NumberOfCallBacks)
{
return emu.TLSGrabCallBackDataW(szFileName, ArrayOfCallBacks, NumberOfCallBacks);