diff --git a/TitanEngine.sln b/TitanEngine.sln index 75e344e..69436f8 100644 --- a/TitanEngine.sln +++ b/TitanEngine.sln @@ -4,8 +4,14 @@ Microsoft Visual Studio Solution File, Format Version 11.00 Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "TitanEngine", "TitanEngine\TitanEngine.vcxproj", "{9C7B8246-FDDA-48C7-9634-044969701E40}" EndProject Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "TitanUnitTest", "TitanUnitTest\TitanUnitTest.vcxproj", "{5B5AB3CD-4D32-43B0-8840-E05C9483381D}" + ProjectSection(ProjectDependencies) = postProject + {9C7B8246-FDDA-48C7-9634-044969701E40} = {9C7B8246-FDDA-48C7-9634-044969701E40} + EndProjectSection EndProject Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "TitanScriptGui", "TitanScriptGui\TitanScriptGui.vcxproj", "{49C88677-C374-4AE2-B431-8F3B424BF245}" + ProjectSection(ProjectDependencies) = postProject + {9C7B8246-FDDA-48C7-9634-044969701E40} = {9C7B8246-FDDA-48C7-9634-044969701E40} + EndProjectSection EndProject Global GlobalSection(SolutionConfigurationPlatforms) = preSolution @@ -25,16 +31,20 @@ Global {9C7B8246-FDDA-48C7-9634-044969701E40}.Release|x64.Build.0 = Release|x64 {5B5AB3CD-4D32-43B0-8840-E05C9483381D}.Debug|Win32.ActiveCfg = Debug|Win32 {5B5AB3CD-4D32-43B0-8840-E05C9483381D}.Debug|Win32.Build.0 = Debug|Win32 - {5B5AB3CD-4D32-43B0-8840-E05C9483381D}.Debug|x64.ActiveCfg = Debug|Win32 + {5B5AB3CD-4D32-43B0-8840-E05C9483381D}.Debug|x64.ActiveCfg = Debug|x64 + {5B5AB3CD-4D32-43B0-8840-E05C9483381D}.Debug|x64.Build.0 = Debug|x64 {5B5AB3CD-4D32-43B0-8840-E05C9483381D}.Release|Win32.ActiveCfg = Release|Win32 {5B5AB3CD-4D32-43B0-8840-E05C9483381D}.Release|Win32.Build.0 = Release|Win32 - {5B5AB3CD-4D32-43B0-8840-E05C9483381D}.Release|x64.ActiveCfg = Release|Win32 + {5B5AB3CD-4D32-43B0-8840-E05C9483381D}.Release|x64.ActiveCfg = Release|x64 + {5B5AB3CD-4D32-43B0-8840-E05C9483381D}.Release|x64.Build.0 = Release|x64 {49C88677-C374-4AE2-B431-8F3B424BF245}.Debug|Win32.ActiveCfg = Debug|Win32 {49C88677-C374-4AE2-B431-8F3B424BF245}.Debug|Win32.Build.0 = Debug|Win32 - {49C88677-C374-4AE2-B431-8F3B424BF245}.Debug|x64.ActiveCfg = Debug|Win32 + {49C88677-C374-4AE2-B431-8F3B424BF245}.Debug|x64.ActiveCfg = Debug|x64 + {49C88677-C374-4AE2-B431-8F3B424BF245}.Debug|x64.Build.0 = Debug|x64 {49C88677-C374-4AE2-B431-8F3B424BF245}.Release|Win32.ActiveCfg = Release|Win32 {49C88677-C374-4AE2-B431-8F3B424BF245}.Release|Win32.Build.0 = Release|Win32 - {49C88677-C374-4AE2-B431-8F3B424BF245}.Release|x64.ActiveCfg = Release|Win32 + {49C88677-C374-4AE2-B431-8F3B424BF245}.Release|x64.ActiveCfg = Release|x64 + {49C88677-C374-4AE2-B431-8F3B424BF245}.Release|x64.Build.0 = Release|x64 EndGlobalSection GlobalSection(SolutionProperties) = preSolution HideSolutionNode = FALSE diff --git a/TitanEngine/Global.Engine.GUI.cpp b/TitanEngine/Global.Engine.GUI.cpp index 896a10b..796d594 100644 --- a/TitanEngine/Global.Engine.GUI.cpp +++ b/TitanEngine/Global.Engine.GUI.cpp @@ -55,7 +55,10 @@ long EngineWndProc(HWND hwndDlg, UINT uMsg, WPARAM wParam, LPARAM lParam) if(uMsg == WM_INITDIALOG) { SendMessageA(hwndDlg, WM_SETTEXT, NULL, (LPARAM)&szWindowUnpackerTitle); - SendMessageA(hwndDlg, WM_SETICON, ICON_BIG, (LPARAM)LoadIconA((HINSTANCE)engineHandle, MAKEINTRESOURCEA(IDI_ICON2))); + HICON hIconLarge = (HICON)LoadImage(engineHandle, MAKEINTRESOURCE(IDI_ICON1), IMAGE_ICON, 32, 32, LR_DEFAULTSIZE); + SendMessage(hwndDlg, WM_SETICON, ICON_BIG, (LPARAM)hIconLarge); + HICON hIconSmall = (HICON)LoadImage(engineHandle, MAKEINTRESOURCE(IDI_ICON1), IMAGE_ICON, 16, 16, LR_DEFAULTSIZE); + SendMessage(hwndDlg, WM_SETICON, ICON_SMALL, (LPARAM)hIconSmall); SetDlgItemTextA(hwndDlg, IDD_UNPACKERTITLE, szWindowUnpackerLongTitle); SetDlgItemTextA(hwndDlg, IDC_FILENAME, "filename.exe"); CheckDlgButton(hwndDlg, IDC_REALING, 1); diff --git a/TitanEngine/stdafx.cpp b/TitanEngine/stdafx.cpp index 01b5e14..a27b824 100644 --- a/TitanEngine/stdafx.cpp +++ b/TitanEngine/stdafx.cpp @@ -1,5 +1 @@ -// stdafx.cpp : source file that includes just the standard includes -// UnpackerEngine.pch will be the pre-compiled header -// stdafx.obj will contain the pre-compiled type information - #include "stdafx.h" diff --git a/TitanScriptGui/MAINICON.ico b/TitanScriptGui/MAINICON.ico new file mode 100644 index 0000000..3da8e95 Binary files /dev/null and b/TitanScriptGui/MAINICON.ico differ diff --git a/TitanScriptGui/TitanEngine.h b/TitanScriptGui/TitanEngine.h deleted file mode 100644 index 03b8667..0000000 --- a/TitanScriptGui/TitanEngine.h +++ /dev/null @@ -1,934 +0,0 @@ -#ifndef TITANENGINE -#define TITANENGINE - -#define TITCALL __cdecl - -#if _MSC_VER > 1000 -#pragma once -#endif - -#include - -#pragma pack(push, 1) - -// Global.Constant.Structure.Declaration: -// Engine.External: -const BYTE UE_ACCESS_READ = 0; -const BYTE UE_ACCESS_WRITE = 1; -const BYTE UE_ACCESS_ALL = 2; - -const BYTE UE_HIDE_PEBONLY = 0; -const BYTE UE_HIDE_BASIC = 1; - -const BYTE UE_PLUGIN_CALL_REASON_PREDEBUG = 1; -const BYTE UE_PLUGIN_CALL_REASON_EXCEPTION = 2; -const BYTE UE_PLUGIN_CALL_REASON_POSTDEBUG = 3; -const BYTE UE_PLUGIN_CALL_REASON_UNHANDLEDEXCEPTION = 4; - -const BYTE TEE_HOOK_NRM_JUMP = 1; -const BYTE TEE_HOOK_NRM_CALL = 3; -const BYTE TEE_HOOK_IAT = 5; - -const BYTE UE_ENGINE_ALOW_MODULE_LOADING = 1; -const BYTE UE_ENGINE_AUTOFIX_FORWARDERS = 2; -const BYTE UE_ENGINE_PASS_ALL_EXCEPTIONS = 3; -const BYTE UE_ENGINE_NO_CONSOLE_WINDOW = 4; -const BYTE UE_ENGINE_BACKUP_FOR_CRITICAL_FUNCTIONS = 5; -const BYTE UE_ENGINE_CALL_PLUGIN_CALLBACK = 6; -const BYTE UE_ENGINE_RESET_CUSTOM_HANDLER = 7; -const BYTE UE_ENGINE_CALL_PLUGIN_DEBUG_CALLBACK = 8; - -const BYTE UE_OPTION_REMOVEALL = 1; -const BYTE UE_OPTION_DISABLEALL = 2; -const BYTE UE_OPTION_REMOVEALLDISABLED = 3; -const BYTE UE_OPTION_REMOVEALLENABLED = 4; - -const BYTE UE_STATIC_DECRYPTOR_XOR = 1; -const BYTE UE_STATIC_DECRYPTOR_SUB = 2; -const BYTE UE_STATIC_DECRYPTOR_ADD = 3; - -const BYTE UE_STATIC_DECRYPTOR_FOREWARD = 1; -const BYTE UE_STATIC_DECRYPTOR_BACKWARD = 2; - -const BYTE UE_STATIC_KEY_SIZE_1 = 1; -const BYTE UE_STATIC_KEY_SIZE_2 = 2; -const BYTE UE_STATIC_KEY_SIZE_4 = 4; -const BYTE UE_STATIC_KEY_SIZE_8 = 8; - -const BYTE UE_STATIC_APLIB = 1; -const BYTE UE_STATIC_APLIB_DEPACK = 2; -const BYTE UE_STATIC_LZMA = 3; - -const BYTE UE_STATIC_HASH_MD5 = 1; -const BYTE UE_STATIC_HASH_SHA1 = 2; -const BYTE UE_STATIC_HASH_CRC32 = 3; - -const DWORD UE_RESOURCE_LANGUAGE_ANY = -1; - -const BYTE UE_PE_OFFSET = 0; -const BYTE UE_IMAGEBASE = 1; -const BYTE UE_OEP = 2; -const BYTE UE_SIZEOFIMAGE = 3; -const BYTE UE_SIZEOFHEADERS = 4; -const BYTE UE_SIZEOFOPTIONALHEADER = 5; -const BYTE UE_SECTIONALIGNMENT = 6; -const BYTE UE_IMPORTTABLEADDRESS = 7; -const BYTE UE_IMPORTTABLESIZE = 8; -const BYTE UE_RESOURCETABLEADDRESS = 9; -const BYTE UE_RESOURCETABLESIZE = 10; -const BYTE UE_EXPORTTABLEADDRESS = 11; -const BYTE UE_EXPORTTABLESIZE = 12; -const BYTE UE_TLSTABLEADDRESS = 13; -const BYTE UE_TLSTABLESIZE = 14; -const BYTE UE_RELOCATIONTABLEADDRESS = 15; -const BYTE UE_RELOCATIONTABLESIZE = 16; -const BYTE UE_TIMEDATESTAMP = 17; -const BYTE UE_SECTIONNUMBER = 18; -const BYTE UE_CHECKSUM = 19; -const BYTE UE_SUBSYSTEM = 20; -const BYTE UE_CHARACTERISTICS = 21; -const BYTE UE_NUMBEROFRVAANDSIZES = 22; -const BYTE UE_BASEOFCODE = 23; -const BYTE UE_BASEOFDATA = 24; -//leaving some enum space here for future additions -const BYTE UE_SECTIONNAME = 40; -const BYTE UE_SECTIONVIRTUALOFFSET = 41; -const BYTE UE_SECTIONVIRTUALSIZE = 42; -const BYTE UE_SECTIONRAWOFFSET = 43; -const BYTE UE_SECTIONRAWSIZE = 44; -const BYTE UE_SECTIONFLAGS = 45; - -const long UE_VANOTFOUND = -2; - -const BYTE UE_CH_BREAKPOINT = 1; -const BYTE UE_CH_SINGLESTEP = 2; -const BYTE UE_CH_ACCESSVIOLATION = 3; -const BYTE UE_CH_ILLEGALINSTRUCTION = 4; -const BYTE UE_CH_NONCONTINUABLEEXCEPTION = 5; -const BYTE UE_CH_ARRAYBOUNDSEXCEPTION = 6; -const BYTE UE_CH_FLOATDENORMALOPERAND = 7; -const BYTE UE_CH_FLOATDEVIDEBYZERO = 8; -const BYTE UE_CH_INTEGERDEVIDEBYZERO = 9; -const BYTE UE_CH_INTEGEROVERFLOW = 10; -const BYTE UE_CH_PRIVILEGEDINSTRUCTION = 11; -const BYTE UE_CH_PAGEGUARD = 12; -const BYTE UE_CH_EVERYTHINGELSE = 13; -const BYTE UE_CH_CREATETHREAD = 14; -const BYTE UE_CH_EXITTHREAD = 15; -const BYTE UE_CH_CREATEPROCESS = 16; -const BYTE UE_CH_EXITPROCESS = 17; -const BYTE UE_CH_LOADDLL = 18; -const BYTE UE_CH_UNLOADDLL = 19; -const BYTE UE_CH_OUTPUTDEBUGSTRING = 20; -const BYTE UE_CH_AFTEREXCEPTIONPROCESSING = 21; -const BYTE UE_CH_ALLEVENTS = 22; -const BYTE UE_CH_SYSTEMBREAKPOINT = 23; -const BYTE UE_CH_UNHANDLEDEXCEPTION = 24; -const BYTE UE_CH_RIPEVENT = 25; - -const BYTE UE_OPTION_HANDLER_RETURN_HANDLECOUNT = 1; -const BYTE UE_OPTION_HANDLER_RETURN_ACCESS = 2; -const BYTE UE_OPTION_HANDLER_RETURN_FLAGS = 3; -const BYTE UE_OPTION_HANDLER_RETURN_TYPENAME = 4; - -const BYTE UE_BREAKPOINT_INT3 = 1; -const BYTE UE_BREAKPOINT_LONG_INT3 = 2; -const BYTE UE_BREAKPOINT_UD2 = 3; - -const BYTE UE_BPXREMOVED = 0; -const BYTE UE_BPXACTIVE = 1; -const BYTE UE_BPXINACTIVE = 2; - -const BYTE UE_BREAKPOINT = 0; -const BYTE UE_SINGLESHOOT = 1; -const BYTE UE_HARDWARE = 2; -const BYTE UE_MEMORY = 3; -const BYTE UE_MEMORY_READ = 4; -const BYTE UE_MEMORY_WRITE = 5; -const BYTE UE_MEMORY_EXECUTE = 6; -const DWORD UE_BREAKPOINT_TYPE_INT3 = 0x10000000; -const DWORD UE_BREAKPOINT_TYPE_LONG_INT3 = 0x20000000; -const DWORD UE_BREAKPOINT_TYPE_UD2 = 0x30000000; - -const BYTE UE_HARDWARE_EXECUTE = 4; -const BYTE UE_HARDWARE_WRITE = 5; -const BYTE UE_HARDWARE_READWRITE = 6; - -const BYTE UE_HARDWARE_SIZE_1 = 7; -const BYTE UE_HARDWARE_SIZE_2 = 8; -const BYTE UE_HARDWARE_SIZE_4 = 9; -const BYTE UE_HARDWARE_SIZE_8 = 10; - -const BYTE UE_ON_LIB_LOAD = 1; -const BYTE UE_ON_LIB_UNLOAD = 2; -const BYTE UE_ON_LIB_ALL = 3; - -const BYTE UE_APISTART = 0; -const BYTE UE_APIEND = 1; - -const BYTE UE_PLATFORM_x86 = 1; -const BYTE UE_PLATFORM_x64 = 2; -const BYTE UE_PLATFORM_ALL = 3; - -const BYTE UE_FUNCTION_STDCALL = 1; -const BYTE UE_FUNCTION_CCALL = 2; -const BYTE UE_FUNCTION_FASTCALL = 3; -const BYTE UE_FUNCTION_STDCALL_RET = 4; -const BYTE UE_FUNCTION_CCALL_RET = 5; -const BYTE UE_FUNCTION_FASTCALL_RET = 6; -const BYTE UE_FUNCTION_STDCALL_CALL = 7; -const BYTE UE_FUNCTION_CCALL_CALL = 8; -const BYTE UE_FUNCTION_FASTCALL_CALL = 9; -const BYTE UE_PARAMETER_BYTE = 0; -const BYTE UE_PARAMETER_WORD = 1; -const BYTE UE_PARAMETER_DWORD = 2; -const BYTE UE_PARAMETER_QWORD = 3; -const BYTE UE_PARAMETER_PTR_BYTE = 4; -const BYTE UE_PARAMETER_PTR_WORD = 5; -const BYTE UE_PARAMETER_PTR_DWORD = 6; -const BYTE UE_PARAMETER_PTR_QWORD = 7; -const BYTE UE_PARAMETER_STRING = 8; -const BYTE UE_PARAMETER_UNICODE = 9; - -const BYTE UE_EAX = 1; -const BYTE UE_EBX = 2; -const BYTE UE_ECX = 3; -const BYTE UE_EDX = 4; -const BYTE UE_EDI = 5; -const BYTE UE_ESI = 6; -const BYTE UE_EBP = 7; -const BYTE UE_ESP = 8; -const BYTE UE_EIP = 9; -const BYTE UE_EFLAGS = 10; -const BYTE UE_DR0 = 11; -const BYTE UE_DR1 = 12; -const BYTE UE_DR2 = 13; -const BYTE UE_DR3 = 14; -const BYTE UE_DR6 = 15; -const BYTE UE_DR7 = 16; -const BYTE UE_RAX = 17; -const BYTE UE_RBX = 18; -const BYTE UE_RCX = 19; -const BYTE UE_RDX = 20; -const BYTE UE_RDI = 21; -const BYTE UE_RSI = 22; -const BYTE UE_RBP = 23; -const BYTE UE_RSP = 24; -const BYTE UE_RIP = 25; -const BYTE UE_RFLAGS = 26; -const BYTE UE_R8 = 27; -const BYTE UE_R9 = 28; -const BYTE UE_R10 = 29; -const BYTE UE_R11 = 30; -const BYTE UE_R12 = 31; -const BYTE UE_R13 = 32; -const BYTE UE_R14 = 33; -const BYTE UE_R15 = 34; -const BYTE UE_CIP = 35; -const BYTE UE_CSP = 36; -#ifdef _WIN64 -const BYTE UE_CFLAGS = UE_RFLAGS; -#else -const BYTE UE_CFLAGS = UE_EFLAGS; -#endif -const BYTE UE_SEG_GS = 37; -const BYTE UE_SEG_FS = 38; -const BYTE UE_SEG_ES = 39; -const BYTE UE_SEG_DS = 40; -const BYTE UE_SEG_CS = 41; -const BYTE UE_SEG_SS = 42; - -typedef struct -{ - DWORD PE32Offset; - DWORD ImageBase; - DWORD OriginalEntryPoint; - DWORD BaseOfCode; - DWORD BaseOfData; - DWORD NtSizeOfImage; - DWORD NtSizeOfHeaders; - WORD SizeOfOptionalHeaders; - DWORD FileAlignment; - DWORD SectionAligment; - DWORD ImportTableAddress; - DWORD ImportTableSize; - DWORD ResourceTableAddress; - DWORD ResourceTableSize; - DWORD ExportTableAddress; - DWORD ExportTableSize; - DWORD TLSTableAddress; - DWORD TLSTableSize; - DWORD RelocationTableAddress; - DWORD RelocationTableSize; - DWORD TimeDateStamp; - WORD SectionNumber; - DWORD CheckSum; - WORD SubSystem; - WORD Characteristics; - DWORD NumberOfRvaAndSizes; -} PE32Struct, *PPE32Struct; - -typedef struct -{ - DWORD PE64Offset; - DWORD64 ImageBase; - DWORD OriginalEntryPoint; - DWORD BaseOfCode; - DWORD BaseOfData; - DWORD NtSizeOfImage; - DWORD NtSizeOfHeaders; - WORD SizeOfOptionalHeaders; - DWORD FileAlignment; - DWORD SectionAligment; - DWORD ImportTableAddress; - DWORD ImportTableSize; - DWORD ResourceTableAddress; - DWORD ResourceTableSize; - DWORD ExportTableAddress; - DWORD ExportTableSize; - DWORD TLSTableAddress; - DWORD TLSTableSize; - DWORD RelocationTableAddress; - DWORD RelocationTableSize; - DWORD TimeDateStamp; - WORD SectionNumber; - DWORD CheckSum; - WORD SubSystem; - WORD Characteristics; - DWORD NumberOfRvaAndSizes; -} PE64Struct, *PPE64Struct; - -#if defined(_WIN64) -typedef PE64Struct PEStruct; -#else -typedef PE32Struct PEStruct; -#endif - -typedef struct -{ - bool NewDll; - int NumberOfImports; - ULONG_PTR ImageBase; - ULONG_PTR BaseImportThunk; - ULONG_PTR ImportThunk; - char* APIName; - char* DLLName; -} ImportEnumData, *PImportEnumData; - -typedef struct -{ - HANDLE hThread; - DWORD dwThreadId; - void* ThreadStartAddress; - void* ThreadLocalBase; -} THREAD_ITEM_DATA, *PTHREAD_ITEM_DATA; - -typedef struct -{ - HANDLE hFile; - void* BaseOfDll; - HANDLE hFileMapping; - void* hFileMappingView; - char szLibraryPath[MAX_PATH]; - char szLibraryName[MAX_PATH]; -} LIBRARY_ITEM_DATA, *PLIBRARY_ITEM_DATA; - -typedef struct -{ - HANDLE hFile; - void* BaseOfDll; - HANDLE hFileMapping; - void* hFileMappingView; - wchar_t szLibraryPath[MAX_PATH]; - wchar_t szLibraryName[MAX_PATH]; -} LIBRARY_ITEM_DATAW, *PLIBRARY_ITEM_DATAW; - -typedef struct -{ - HANDLE hProcess; - DWORD dwProcessId; - HANDLE hThread; - DWORD dwThreadId; - HANDLE hFile; - void* BaseOfImage; - void* ThreadStartAddress; - void* ThreadLocalBase; -} PROCESS_ITEM_DATA, *PPROCESS_ITEM_DATA; - -typedef struct -{ - ULONG ProcessId; - HANDLE hHandle; -} HandlerArray, *PHandlerArray; - -typedef struct -{ - char PluginName[64]; - DWORD PluginMajorVersion; - DWORD PluginMinorVersion; - HMODULE PluginBaseAddress; - void* TitanDebuggingCallBack; - void* TitanRegisterPlugin; - void* TitanReleasePlugin; - void* TitanResetPlugin; - bool PluginDisabled; -} PluginInformation, *PPluginInformation; - -const size_t TEE_MAXIMUM_HOOK_SIZE = 14; -const size_t TEE_MAXIMUM_HOOK_RELOCS = 7; -#if defined(_WIN64) -const size_t TEE_MAXIMUM_HOOK_INSERT_SIZE = 14; -#else -const size_t TEE_MAXIMUM_HOOK_INSERT_SIZE = 5; -#endif - -typedef struct HOOK_ENTRY -{ - bool IATHook; - BYTE HookType; - DWORD HookSize; - void* HookAddress; - void* RedirectionAddress; - BYTE HookBytes[TEE_MAXIMUM_HOOK_SIZE]; - BYTE OriginalBytes[TEE_MAXIMUM_HOOK_SIZE]; - void* IATHookModuleBase; - DWORD IATHookNameHash; - bool HookIsEnabled; - bool HookIsRemote; - void* PatchedEntry; - DWORD RelocationInfo[TEE_MAXIMUM_HOOK_RELOCS]; - int RelocationCount; -} HOOK_ENTRY, *PHOOK_ENTRY; - -const BYTE UE_DEPTH_SURFACE = 0; -const BYTE UE_DEPTH_DEEP = 1; - -const BYTE UE_UNPACKER_CONDITION_SEARCH_FROM_EP = 1; - -const BYTE UE_UNPACKER_CONDITION_LOADLIBRARY = 1; -const BYTE UE_UNPACKER_CONDITION_GETPROCADDRESS = 2; -const BYTE UE_UNPACKER_CONDITION_ENTRYPOINTBREAK = 3; -const BYTE UE_UNPACKER_CONDITION_RELOCSNAPSHOT1 = 4; -const BYTE UE_UNPACKER_CONDITION_RELOCSNAPSHOT2 = 5; - -const BYTE UE_FIELD_OK = 0; -const BYTE UE_FIELD_BROKEN_NON_FIXABLE = 1; -const BYTE UE_FIELD_BROKEN_NON_CRITICAL = 2; -const BYTE UE_FIELD_BROKEN_FIXABLE_FOR_STATIC_USE = 3; -const BYTE UE_FIELD_BROKEN_BUT_CAN_BE_EMULATED = 4; -const BYTE UE_FIELD_FIXABLE_NON_CRITICAL = 5; -const BYTE UE_FIELD_FIXABLE_CRITICAL = 6; -const BYTE UE_FIELD_NOT_PRESET = 7; -const BYTE UE_FIELD_NOT_PRESET_WARNING = 8; - -const BYTE UE_RESULT_FILE_OK = 10; -const BYTE UE_RESULT_FILE_INVALID_BUT_FIXABLE = 11; -const BYTE UE_RESULT_FILE_INVALID_AND_NON_FIXABLE = 12; -const BYTE UE_RESULT_FILE_INVALID_FORMAT = 13; - -typedef struct -{ - BYTE OveralEvaluation; - bool EvaluationTerminatedByException; - bool FileIs64Bit; - bool FileIsDLL; - bool FileIsConsole; - bool MissingDependencies; - bool MissingDeclaredAPIs; - BYTE SignatureMZ; - BYTE SignaturePE; - BYTE EntryPoint; - BYTE ImageBase; - BYTE SizeOfImage; - BYTE FileAlignment; - BYTE SectionAlignment; - BYTE ExportTable; - BYTE RelocationTable; - BYTE ImportTable; - BYTE ImportTableSection; - BYTE ImportTableData; - BYTE IATTable; - BYTE TLSTable; - BYTE LoadConfigTable; - BYTE BoundImportTable; - BYTE COMHeaderTable; - BYTE ResourceTable; - BYTE ResourceData; - BYTE SectionTable; -} FILE_STATUS_INFO, *PFILE_STATUS_INFO; - -typedef struct -{ - BYTE OveralEvaluation; - bool FixingTerminatedByException; - bool FileFixPerformed; - bool StrippedRelocation; - bool DontFixRelocations; - DWORD OriginalRelocationTableAddress; - DWORD OriginalRelocationTableSize; - bool StrippedExports; - bool DontFixExports; - DWORD OriginalExportTableAddress; - DWORD OriginalExportTableSize; - bool StrippedResources; - bool DontFixResources; - DWORD OriginalResourceTableAddress; - DWORD OriginalResourceTableSize; - bool StrippedTLS; - bool DontFixTLS; - DWORD OriginalTLSTableAddress; - DWORD OriginalTLSTableSize; - bool StrippedLoadConfig; - bool DontFixLoadConfig; - DWORD OriginalLoadConfigTableAddress; - DWORD OriginalLoadConfigTableSize; - bool StrippedBoundImports; - bool DontFixBoundImports; - DWORD OriginalBoundImportTableAddress; - DWORD OriginalBoundImportTableSize; - bool StrippedIAT; - bool DontFixIAT; - DWORD OriginalImportAddressTableAddress; - DWORD OriginalImportAddressTableSize; - bool StrippedCOM; - bool DontFixCOM; - DWORD OriginalCOMTableAddress; - DWORD OriginalCOMTableSize; -} FILE_FIX_INFO, *PFILE_FIX_INFO; - -#ifdef __cplusplus -extern "C" { -#endif /*__cplusplus*/ - -// Global.Function.Declaration: -// TitanEngine.Dumper.functions: -__declspec(dllimport) bool TITCALL DumpProcess(HANDLE hProcess, LPVOID ImageBase, char* szDumpFileName, ULONG_PTR EntryPoint); -__declspec(dllimport) bool TITCALL DumpProcessW(HANDLE hProcess, LPVOID ImageBase, wchar_t* szDumpFileName, ULONG_PTR EntryPoint); -__declspec(dllimport) bool TITCALL DumpProcessEx(DWORD ProcessId, LPVOID ImageBase, char* szDumpFileName, ULONG_PTR EntryPoint); -__declspec(dllimport) bool TITCALL DumpProcessExW(DWORD ProcessId, LPVOID ImageBase, wchar_t* szDumpFileName, ULONG_PTR EntryPoint); -__declspec(dllimport) bool TITCALL DumpMemory(HANDLE hProcess, LPVOID MemoryStart, ULONG_PTR MemorySize, char* szDumpFileName); -__declspec(dllimport) bool TITCALL DumpMemoryW(HANDLE hProcess, LPVOID MemoryStart, ULONG_PTR MemorySize, wchar_t* szDumpFileName); -__declspec(dllimport) bool TITCALL DumpMemoryEx(DWORD ProcessId, LPVOID MemoryStart, ULONG_PTR MemorySize, char* szDumpFileName); -__declspec(dllimport) bool TITCALL DumpMemoryExW(DWORD ProcessId, LPVOID MemoryStart, ULONG_PTR MemorySize, wchar_t* szDumpFileName); -__declspec(dllimport) bool TITCALL DumpRegions(HANDLE hProcess, char* szDumpFolder, bool DumpAboveImageBaseOnly); -__declspec(dllimport) bool TITCALL DumpRegionsW(HANDLE hProcess, wchar_t* szDumpFolder, bool DumpAboveImageBaseOnly); -__declspec(dllimport) bool TITCALL DumpRegionsEx(DWORD ProcessId, char* szDumpFolder, bool DumpAboveImageBaseOnly); -__declspec(dllimport) bool TITCALL DumpRegionsExW(DWORD ProcessId, wchar_t* szDumpFolder, bool DumpAboveImageBaseOnly); -__declspec(dllimport) bool TITCALL DumpModule(HANDLE hProcess, LPVOID ModuleBase, char* szDumpFileName); -__declspec(dllimport) bool TITCALL DumpModuleW(HANDLE hProcess, LPVOID ModuleBase, wchar_t* szDumpFileName); -__declspec(dllimport) bool TITCALL DumpModuleEx(DWORD ProcessId, LPVOID ModuleBase, char* szDumpFileName); -__declspec(dllimport) bool TITCALL DumpModuleExW(DWORD ProcessId, LPVOID ModuleBase, wchar_t* szDumpFileName); -__declspec(dllimport) bool TITCALL PastePEHeader(HANDLE hProcess, LPVOID ImageBase, char* szDebuggedFileName); -__declspec(dllimport) bool TITCALL PastePEHeaderW(HANDLE hProcess, LPVOID ImageBase, wchar_t* szDebuggedFileName); -__declspec(dllimport) bool TITCALL ExtractSection(char* szFileName, char* szDumpFileName, DWORD SectionNumber); -__declspec(dllimport) bool TITCALL ExtractSectionW(wchar_t* szFileName, wchar_t* szDumpFileName, DWORD SectionNumber); -__declspec(dllimport) bool TITCALL ResortFileSections(char* szFileName); -__declspec(dllimport) bool TITCALL ResortFileSectionsW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL FindOverlay(char* szFileName, LPDWORD OverlayStart, LPDWORD OverlaySize); -__declspec(dllimport) bool TITCALL FindOverlayW(wchar_t* szFileName, LPDWORD OverlayStart, LPDWORD OverlaySize); -__declspec(dllimport) bool TITCALL ExtractOverlay(char* szFileName, char* szExtractedFileName); -__declspec(dllimport) bool TITCALL ExtractOverlayW(wchar_t* szFileName, wchar_t* szExtractedFileName); -__declspec(dllimport) bool TITCALL AddOverlay(char* szFileName, char* szOverlayFileName); -__declspec(dllimport) bool TITCALL AddOverlayW(wchar_t* szFileName, wchar_t* szOverlayFileName); -__declspec(dllimport) bool TITCALL CopyOverlay(char* szInFileName, char* szOutFileName); -__declspec(dllimport) bool TITCALL CopyOverlayW(wchar_t* szInFileName, wchar_t* szOutFileName); -__declspec(dllimport) bool TITCALL RemoveOverlay(char* szFileName); -__declspec(dllimport) bool TITCALL RemoveOverlayW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL MakeAllSectionsRWE(char* szFileName); -__declspec(dllimport) bool TITCALL MakeAllSectionsRWEW(wchar_t* szFileName); -__declspec(dllimport) long TITCALL AddNewSectionEx(char* szFileName, char* szSectionName, DWORD SectionSize, DWORD SectionAttributes, LPVOID SectionContent, DWORD ContentSize); -__declspec(dllimport) long TITCALL AddNewSectionExW(wchar_t* szFileName, char* szSectionName, DWORD SectionSize, DWORD SectionAttributes, LPVOID SectionContent, DWORD ContentSize); -__declspec(dllimport) long TITCALL AddNewSection(char* szFileName, char* szSectionName, DWORD SectionSize); -__declspec(dllimport) long TITCALL AddNewSectionW(wchar_t* szFileName, char* szSectionName, DWORD SectionSize); -__declspec(dllimport) bool TITCALL ResizeLastSection(char* szFileName, DWORD NumberOfExpandBytes, bool AlignResizeData); -__declspec(dllimport) bool TITCALL ResizeLastSectionW(wchar_t* szFileName, DWORD NumberOfExpandBytes, bool AlignResizeData); -__declspec(dllimport) void TITCALL SetSharedOverlay(char* szFileName); -__declspec(dllimport) void TITCALL SetSharedOverlayW(wchar_t* szFileName); -__declspec(dllimport) char* TITCALL GetSharedOverlay(); -__declspec(dllimport) wchar_t* TITCALL GetSharedOverlayW(); -__declspec(dllimport) bool TITCALL DeleteLastSection(char* szFileName); -__declspec(dllimport) bool TITCALL DeleteLastSectionW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL DeleteLastSectionEx(char* szFileName, DWORD NumberOfSections); -__declspec(dllimport) bool TITCALL DeleteLastSectionExW(wchar_t* szFileName, DWORD NumberOfSections); -__declspec(dllimport) long long TITCALL GetPE32DataFromMappedFile(ULONG_PTR FileMapVA, DWORD WhichSection, DWORD WhichData); -__declspec(dllimport) long long TITCALL GetPE32Data(char* szFileName, DWORD WhichSection, DWORD WhichData); -__declspec(dllimport) long long TITCALL GetPE32DataW(wchar_t* szFileName, DWORD WhichSection, DWORD WhichData); -__declspec(dllimport) bool TITCALL GetPE32DataFromMappedFileEx(ULONG_PTR FileMapVA, LPVOID DataStorage); -__declspec(dllimport) bool TITCALL GetPE32DataEx(char* szFileName, LPVOID DataStorage); -__declspec(dllimport) bool TITCALL GetPE32DataExW(wchar_t* szFileName, LPVOID DataStorage); -__declspec(dllimport) bool TITCALL SetPE32DataForMappedFile(ULONG_PTR FileMapVA, DWORD WhichSection, DWORD WhichData, ULONG_PTR NewDataValue); -__declspec(dllimport) bool TITCALL SetPE32Data(char* szFileName, DWORD WhichSection, DWORD WhichData, ULONG_PTR NewDataValue); -__declspec(dllimport) bool TITCALL SetPE32DataW(wchar_t* szFileName, DWORD WhichSection, DWORD WhichData, ULONG_PTR NewDataValue); -__declspec(dllimport) bool TITCALL SetPE32DataForMappedFileEx(ULONG_PTR FileMapVA, LPVOID DataStorage); -__declspec(dllimport) bool TITCALL SetPE32DataEx(char* szFileName, LPVOID DataStorage); -__declspec(dllimport) bool TITCALL SetPE32DataExW(wchar_t* szFileName, LPVOID DataStorage); -__declspec(dllimport) long TITCALL GetPE32SectionNumberFromVA(ULONG_PTR FileMapVA, ULONG_PTR AddressToConvert); -__declspec(dllimport) long long TITCALL ConvertVAtoFileOffset(ULONG_PTR FileMapVA, ULONG_PTR AddressToConvert, bool ReturnType); -__declspec(dllimport) long long TITCALL ConvertVAtoFileOffsetEx(ULONG_PTR FileMapVA, DWORD FileSize, ULONG_PTR ImageBase, ULONG_PTR AddressToConvert, bool AddressIsRVA, bool ReturnType); -__declspec(dllimport) long long TITCALL ConvertFileOffsetToVA(ULONG_PTR FileMapVA, ULONG_PTR AddressToConvert, bool ReturnType); -__declspec(dllimport) long long TITCALL ConvertFileOffsetToVAEx(ULONG_PTR FileMapVA, DWORD FileSize, ULONG_PTR ImageBase, ULONG_PTR AddressToConvert, bool ReturnType); -__declspec(dllimport) bool TITCALL MemoryReadSafe(HANDLE hProcess, LPVOID lpBaseAddress, LPVOID lpBuffer, SIZE_T nSize, SIZE_T * lpNumberOfBytesRead); -__declspec(dllimport) bool TITCALL MemoryWriteSafe(HANDLE hProcess, LPVOID lpBaseAddress, LPCVOID lpBuffer, SIZE_T nSize, SIZE_T * lpNumberOfBytesWritten); -// TitanEngine.Realigner.functions: -__declspec(dllimport) bool TITCALL FixHeaderCheckSum(char* szFileName); -__declspec(dllimport) bool TITCALL FixHeaderCheckSumW(wchar_t* szFileName); -__declspec(dllimport) long TITCALL RealignPE(ULONG_PTR FileMapVA, DWORD FileSize, DWORD RealingMode); -__declspec(dllimport) long TITCALL RealignPEEx(char* szFileName, DWORD RealingFileSize, DWORD ForcedFileAlignment); -__declspec(dllimport) long TITCALL RealignPEExW(wchar_t* szFileName, DWORD RealingFileSize, DWORD ForcedFileAlignment); -__declspec(dllimport) bool TITCALL WipeSection(char* szFileName, int WipeSectionNumber, bool RemovePhysically); -__declspec(dllimport) bool TITCALL WipeSectionW(wchar_t* szFileName, int WipeSectionNumber, bool RemovePhysically); -__declspec(dllimport) bool TITCALL IsPE32FileValidEx(char* szFileName, DWORD CheckDepth, LPVOID FileStatusInfo); -__declspec(dllimport) bool TITCALL IsPE32FileValidExW(wchar_t* szFileName, DWORD CheckDepth, LPVOID FileStatusInfo); -__declspec(dllimport) bool TITCALL FixBrokenPE32FileEx(char* szFileName, LPVOID FileStatusInfo, LPVOID FileFixInfo); -__declspec(dllimport) bool TITCALL FixBrokenPE32FileExW(wchar_t* szFileName, LPVOID FileStatusInfo, LPVOID FileFixInfo); -__declspec(dllimport) bool TITCALL IsFileDLL(char* szFileName, ULONG_PTR FileMapVA); -__declspec(dllimport) bool TITCALL IsFileDLLW(wchar_t* szFileName, ULONG_PTR FileMapVA); -// TitanEngine.Hider.functions: -__declspec(dllimport) void* TITCALL GetPEBLocation(HANDLE hProcess); -__declspec(dllimport) void* TITCALL GetPEBLocation64(HANDLE hProcess); -__declspec(dllimport) void* TITCALL GetTEBLocation(HANDLE hThread); -__declspec(dllimport) void* TITCALL GetTEBLocation64(HANDLE hThread); -__declspec(dllimport) bool TITCALL HideDebugger(HANDLE hProcess, DWORD PatchAPILevel); -__declspec(dllimport) bool TITCALL UnHideDebugger(HANDLE hProcess, DWORD PatchAPILevel); -// TitanEngine.Relocater.functions: -__declspec(dllimport) void TITCALL RelocaterCleanup(); -__declspec(dllimport) void TITCALL RelocaterInit(DWORD MemorySize, ULONG_PTR OldImageBase, ULONG_PTR NewImageBase); -__declspec(dllimport) void TITCALL RelocaterAddNewRelocation(HANDLE hProcess, ULONG_PTR RelocateAddress, DWORD RelocateState); -__declspec(dllimport) long TITCALL RelocaterEstimatedSize(); -__declspec(dllimport) bool TITCALL RelocaterExportRelocation(ULONG_PTR StorePlace, DWORD StorePlaceRVA, ULONG_PTR FileMapVA); -__declspec(dllimport) bool TITCALL RelocaterExportRelocationEx(char* szFileName, char* szSectionName); -__declspec(dllimport) bool TITCALL RelocaterExportRelocationExW(wchar_t* szFileName, char* szSectionName); -__declspec(dllimport) bool TITCALL RelocaterGrabRelocationTable(HANDLE hProcess, ULONG_PTR MemoryStart, DWORD MemorySize); -__declspec(dllimport) bool TITCALL RelocaterGrabRelocationTableEx(HANDLE hProcess, ULONG_PTR MemoryStart, ULONG_PTR MemorySize, DWORD NtSizeOfImage); -__declspec(dllimport) bool TITCALL RelocaterMakeSnapshot(HANDLE hProcess, char* szSaveFileName, LPVOID MemoryStart, ULONG_PTR MemorySize); -__declspec(dllimport) bool TITCALL RelocaterMakeSnapshotW(HANDLE hProcess, wchar_t* szSaveFileName, LPVOID MemoryStart, ULONG_PTR MemorySize); -__declspec(dllimport) bool TITCALL RelocaterCompareTwoSnapshots(HANDLE hProcess, ULONG_PTR LoadedImageBase, ULONG_PTR NtSizeOfImage, char* szDumpFile1, char* szDumpFile2, ULONG_PTR MemStart); -__declspec(dllimport) bool TITCALL RelocaterCompareTwoSnapshotsW(HANDLE hProcess, ULONG_PTR LoadedImageBase, ULONG_PTR NtSizeOfImage, wchar_t* szDumpFile1, wchar_t* szDumpFile2, ULONG_PTR MemStart); -__declspec(dllimport) bool TITCALL RelocaterChangeFileBase(char* szFileName, ULONG_PTR NewImageBase); -__declspec(dllimport) bool TITCALL RelocaterChangeFileBaseW(wchar_t* szFileName, ULONG_PTR NewImageBase); -__declspec(dllimport) bool TITCALL RelocaterRelocateMemoryBlock(ULONG_PTR FileMapVA, ULONG_PTR MemoryLocation, void* RelocateMemory, DWORD RelocateMemorySize, ULONG_PTR CurrentLoadedBase, ULONG_PTR RelocateBase); -__declspec(dllimport) bool TITCALL RelocaterWipeRelocationTable(char* szFileName); -__declspec(dllimport) bool TITCALL RelocaterWipeRelocationTableW(wchar_t* szFileName); -// TitanEngine.Resourcer.functions: -__declspec(dllimport) long long TITCALL ResourcerLoadFileForResourceUse(char* szFileName); -__declspec(dllimport) long long TITCALL ResourcerLoadFileForResourceUseW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL ResourcerFreeLoadedFile(LPVOID LoadedFileBase); -__declspec(dllimport) bool TITCALL ResourcerExtractResourceFromFileEx(ULONG_PTR FileMapVA, char* szResourceType, char* szResourceName, char* szExtractedFileName); -__declspec(dllimport) bool TITCALL ResourcerExtractResourceFromFile(char* szFileName, char* szResourceType, char* szResourceName, char* szExtractedFileName); -__declspec(dllimport) bool TITCALL ResourcerExtractResourceFromFileW(wchar_t* szFileName, char* szResourceType, char* szResourceName, char* szExtractedFileName); -__declspec(dllimport) bool TITCALL ResourcerFindResource(char* szFileName, char* szResourceType, DWORD ResourceType, char* szResourceName, DWORD ResourceName, DWORD ResourceLanguage, PULONG_PTR pResourceData, LPDWORD pResourceSize); -__declspec(dllimport) bool TITCALL ResourcerFindResourceW(wchar_t* szFileName, wchar_t* szResourceType, DWORD ResourceType, wchar_t* szResourceName, DWORD ResourceName, DWORD ResourceLanguage, PULONG_PTR pResourceData, LPDWORD pResourceSize); -__declspec(dllimport) bool TITCALL ResourcerFindResourceEx(ULONG_PTR FileMapVA, DWORD FileSize, wchar_t* szResourceType, DWORD ResourceType, wchar_t* szResourceName, DWORD ResourceName, DWORD ResourceLanguage, PULONG_PTR pResourceData, LPDWORD pResourceSize); -__declspec(dllimport) void TITCALL ResourcerEnumerateResource(char* szFileName, void* CallBack); -__declspec(dllimport) void TITCALL ResourcerEnumerateResourceW(wchar_t* szFileName, void* CallBack); -__declspec(dllimport) void TITCALL ResourcerEnumerateResourceEx(ULONG_PTR FileMapVA, DWORD FileSize, void* CallBack); -// TitanEngine.Threader.functions: -__declspec(dllimport) bool TITCALL ThreaderImportRunningThreadData(DWORD ProcessId); -__declspec(dllimport) void* TITCALL ThreaderGetThreadInfo(HANDLE hThread, DWORD ThreadId); -__declspec(dllimport) void TITCALL ThreaderEnumThreadInfo(void* EnumCallBack); -__declspec(dllimport) bool TITCALL ThreaderPauseThread(HANDLE hThread); -__declspec(dllimport) bool TITCALL ThreaderResumeThread(HANDLE hThread); -__declspec(dllimport) bool TITCALL ThreaderTerminateThread(HANDLE hThread, DWORD ThreadExitCode); -__declspec(dllimport) bool TITCALL ThreaderPauseAllThreads(bool LeaveMainRunning); -__declspec(dllimport) bool TITCALL ThreaderResumeAllThreads(bool LeaveMainPaused); -__declspec(dllimport) bool TITCALL ThreaderPauseProcess(); -__declspec(dllimport) bool TITCALL ThreaderResumeProcess(); -__declspec(dllimport) long long TITCALL ThreaderCreateRemoteThread(ULONG_PTR ThreadStartAddress, bool AutoCloseTheHandle, LPVOID ThreadPassParameter, LPDWORD ThreadId); -__declspec(dllimport) bool TITCALL ThreaderInjectAndExecuteCode(LPVOID InjectCode, DWORD StartDelta, DWORD InjectSize); -__declspec(dllimport) long long TITCALL ThreaderCreateRemoteThreadEx(HANDLE hProcess, ULONG_PTR ThreadStartAddress, bool AutoCloseTheHandle, LPVOID ThreadPassParameter, LPDWORD ThreadId); -__declspec(dllimport) bool TITCALL ThreaderInjectAndExecuteCodeEx(HANDLE hProcess, LPVOID InjectCode, DWORD StartDelta, DWORD InjectSize); -__declspec(dllimport) void TITCALL ThreaderSetCallBackForNextExitThreadEvent(LPVOID exitThreadCallBack); -__declspec(dllimport) bool TITCALL ThreaderIsThreadStillRunning(HANDLE hThread); -__declspec(dllimport) bool TITCALL ThreaderIsThreadActive(HANDLE hThread); -__declspec(dllimport) bool TITCALL ThreaderIsAnyThreadActive(); -__declspec(dllimport) bool TITCALL ThreaderExecuteOnlyInjectedThreads(); -__declspec(dllimport) long long TITCALL ThreaderGetOpenHandleForThread(DWORD ThreadId); -__declspec(dllimport) bool TITCALL ThreaderIsExceptionInMainThread(); -// TitanEngine.Debugger.functions: -__declspec(dllimport) void* TITCALL StaticDisassembleEx(ULONG_PTR DisassmStart, LPVOID DisassmAddress); -__declspec(dllimport) void* TITCALL StaticDisassemble(LPVOID DisassmAddress); -__declspec(dllimport) void* TITCALL DisassembleEx(HANDLE hProcess, LPVOID DisassmAddress, bool ReturnInstructionType); -__declspec(dllimport) void* TITCALL Disassemble(LPVOID DisassmAddress); -__declspec(dllimport) long TITCALL StaticLengthDisassemble(LPVOID DisassmAddress); -__declspec(dllimport) long TITCALL LengthDisassembleEx(HANDLE hProcess, LPVOID DisassmAddress); -__declspec(dllimport) long TITCALL LengthDisassemble(LPVOID DisassmAddress); -__declspec(dllimport) void* TITCALL InitDebug(char* szFileName, char* szCommandLine, char* szCurrentFolder); -__declspec(dllimport) void* TITCALL InitDebugW(wchar_t* szFileName, wchar_t* szCommandLine, wchar_t* szCurrentFolder); -__declspec(dllimport) void* TITCALL InitDebugEx(char* szFileName, char* szCommandLine, char* szCurrentFolder, LPVOID EntryCallBack); -__declspec(dllimport) void* TITCALL InitDebugExW(wchar_t* szFileName, wchar_t* szCommandLine, wchar_t* szCurrentFolder, LPVOID EntryCallBack); -__declspec(dllimport) void* TITCALL InitDLLDebug(char* szFileName, bool ReserveModuleBase, char* szCommandLine, char* szCurrentFolder, LPVOID EntryCallBack); -__declspec(dllimport) void* TITCALL InitDLLDebugW(wchar_t* szFileName, bool ReserveModuleBase, wchar_t* szCommandLine, wchar_t* szCurrentFolder, LPVOID EntryCallBack); -__declspec(dllimport) bool TITCALL StopDebug(); -__declspec(dllimport) void TITCALL SetBPXOptions(long DefaultBreakPointType); -__declspec(dllimport) bool TITCALL IsBPXEnabled(ULONG_PTR bpxAddress); -__declspec(dllimport) bool TITCALL EnableBPX(ULONG_PTR bpxAddress); -__declspec(dllimport) bool TITCALL DisableBPX(ULONG_PTR bpxAddress); -__declspec(dllimport) bool TITCALL SetBPX(ULONG_PTR bpxAddress, DWORD bpxType, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL DeleteBPX(ULONG_PTR bpxAddress); -__declspec(dllimport) bool TITCALL SafeDeleteBPX(ULONG_PTR bpxAddress); -__declspec(dllimport) bool TITCALL SetAPIBreakPoint(const char* szDLLName, const char* szAPIName, DWORD bpxType, DWORD bpxPlace, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL DeleteAPIBreakPoint(const char* szDLLName, const char* szAPIName, DWORD bpxPlace); -__declspec(dllimport) bool TITCALL SafeDeleteAPIBreakPoint(const char* szDLLName, const char* szAPIName, DWORD bpxPlace); -__declspec(dllimport) bool TITCALL SetMemoryBPX(ULONG_PTR MemoryStart, SIZE_T SizeOfMemory, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL SetMemoryBPXEx(ULONG_PTR MemoryStart, SIZE_T SizeOfMemory, DWORD BreakPointType, bool RestoreOnHit, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL RemoveMemoryBPX(ULONG_PTR MemoryStart, SIZE_T SizeOfMemory); -__declspec(dllimport) bool TITCALL GetContextFPUDataEx(HANDLE hActiveThread, void* FPUSaveArea); -__declspec(dllimport) long long TITCALL GetContextDataEx(HANDLE hActiveThread, DWORD IndexOfRegister); -__declspec(dllimport) long long TITCALL GetContextData(DWORD IndexOfRegister); -__declspec(dllimport) bool TITCALL SetContextFPUDataEx(HANDLE hActiveThread, void* FPUSaveArea); -__declspec(dllimport) bool TITCALL SetContextDataEx(HANDLE hActiveThread, DWORD IndexOfRegister, ULONG_PTR NewRegisterValue); -__declspec(dllimport) bool TITCALL SetContextData(DWORD IndexOfRegister, ULONG_PTR NewRegisterValue); -__declspec(dllimport) void TITCALL ClearExceptionNumber(); -__declspec(dllimport) long TITCALL CurrentExceptionNumber(); -__declspec(dllimport) bool TITCALL MatchPatternEx(HANDLE hProcess, void* MemoryToCheck, int SizeOfMemoryToCheck, void* PatternToMatch, int SizeOfPatternToMatch, PBYTE WildCard); -__declspec(dllimport) bool TITCALL MatchPattern(void* MemoryToCheck, int SizeOfMemoryToCheck, void* PatternToMatch, int SizeOfPatternToMatch, PBYTE WildCard); -__declspec(dllimport) long long TITCALL FindEx(HANDLE hProcess, LPVOID MemoryStart, DWORD MemorySize, LPVOID SearchPattern, DWORD PatternSize, LPBYTE WildCard); -__declspec(dllimport) long long TITCALL Find(LPVOID MemoryStart, DWORD MemorySize, LPVOID SearchPattern, DWORD PatternSize, LPBYTE WildCard); -__declspec(dllimport) bool TITCALL FillEx(HANDLE hProcess, LPVOID MemoryStart, DWORD MemorySize, PBYTE FillByte); -__declspec(dllimport) bool TITCALL Fill(LPVOID MemoryStart, DWORD MemorySize, PBYTE FillByte); -__declspec(dllimport) bool TITCALL PatchEx(HANDLE hProcess, LPVOID MemoryStart, DWORD MemorySize, LPVOID ReplacePattern, DWORD ReplaceSize, bool AppendNOP, bool PrependNOP); -__declspec(dllimport) bool TITCALL Patch(LPVOID MemoryStart, DWORD MemorySize, LPVOID ReplacePattern, DWORD ReplaceSize, bool AppendNOP, bool PrependNOP); -__declspec(dllimport) bool TITCALL ReplaceEx(HANDLE hProcess, LPVOID MemoryStart, DWORD MemorySize, LPVOID SearchPattern, DWORD PatternSize, DWORD NumberOfRepetitions, LPVOID ReplacePattern, DWORD ReplaceSize, PBYTE WildCard); -__declspec(dllimport) bool TITCALL Replace(LPVOID MemoryStart, DWORD MemorySize, LPVOID SearchPattern, DWORD PatternSize, DWORD NumberOfRepetitions, LPVOID ReplacePattern, DWORD ReplaceSize, PBYTE WildCard); -__declspec(dllimport) void* TITCALL GetDebugData(); -__declspec(dllimport) void* TITCALL GetTerminationData(); -__declspec(dllimport) long TITCALL GetExitCode(); -__declspec(dllimport) long long TITCALL GetDebuggedDLLBaseAddress(); -__declspec(dllimport) long long TITCALL GetDebuggedFileBaseAddress(); -__declspec(dllimport) bool TITCALL GetRemoteString(HANDLE hProcess, LPVOID StringAddress, LPVOID StringStorage, int MaximumStringSize); -__declspec(dllimport) long long TITCALL GetFunctionParameter(HANDLE hProcess, DWORD FunctionType, DWORD ParameterNumber, DWORD ParameterType); -__declspec(dllimport) long long TITCALL GetJumpDestinationEx(HANDLE hProcess, ULONG_PTR InstructionAddress, bool JustJumps); -__declspec(dllimport) long long TITCALL GetJumpDestination(HANDLE hProcess, ULONG_PTR InstructionAddress); -__declspec(dllimport) bool TITCALL IsJumpGoingToExecuteEx(HANDLE hProcess, HANDLE hThread, ULONG_PTR InstructionAddress, ULONG_PTR RegFlags); -__declspec(dllimport) bool TITCALL IsJumpGoingToExecute(); -__declspec(dllimport) void TITCALL SetCustomHandler(DWORD ExceptionId, LPVOID CallBack); -__declspec(dllimport) void TITCALL ForceClose(); -__declspec(dllimport) void TITCALL StepInto(LPVOID traceCallBack); -__declspec(dllimport) void TITCALL StepOver(LPVOID traceCallBack); -__declspec(dllimport) void TITCALL StepOut(LPVOID StepOut, bool StepFinal); -__declspec(dllimport) void TITCALL SingleStep(DWORD StepCount, LPVOID StepCallBack); -__declspec(dllimport) bool TITCALL GetUnusedHardwareBreakPointRegister(LPDWORD RegisterIndex); -__declspec(dllimport) bool TITCALL SetHardwareBreakPointEx(HANDLE hActiveThread, ULONG_PTR bpxAddress, DWORD IndexOfRegister, DWORD bpxType, DWORD bpxSize, LPVOID bpxCallBack, LPDWORD IndexOfSelectedRegister); -__declspec(dllimport) bool TITCALL SetHardwareBreakPoint(ULONG_PTR bpxAddress, DWORD IndexOfRegister, DWORD bpxType, DWORD bpxSize, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL DeleteHardwareBreakPoint(DWORD IndexOfRegister); -__declspec(dllimport) bool TITCALL RemoveAllBreakPoints(DWORD RemoveOption); -__declspec(dllimport) void* TITCALL GetProcessInformation(); -__declspec(dllimport) void* TITCALL GetStartupInformation(); -__declspec(dllimport) void TITCALL DebugLoop(); -__declspec(dllimport) void TITCALL SetDebugLoopTimeOut(DWORD TimeOut); -__declspec(dllimport) void TITCALL SetNextDbgContinueStatus(DWORD SetDbgCode); -__declspec(dllimport) bool TITCALL AttachDebugger(DWORD ProcessId, bool KillOnExit, LPVOID DebugInfo, LPVOID CallBack); -__declspec(dllimport) bool TITCALL DetachDebugger(DWORD ProcessId); -__declspec(dllimport) bool TITCALL DetachDebuggerEx(DWORD ProcessId); -__declspec(dllimport) void TITCALL DebugLoopEx(DWORD TimeOut); -__declspec(dllimport) void TITCALL AutoDebugEx(char* szFileName, bool ReserveModuleBase, char* szCommandLine, char* szCurrentFolder, DWORD TimeOut, LPVOID EntryCallBack); -__declspec(dllimport) void TITCALL AutoDebugExW(wchar_t* szFileName, bool ReserveModuleBase, wchar_t* szCommandLine, wchar_t* szCurrentFolder, DWORD TimeOut, LPVOID EntryCallBack); -__declspec(dllimport) bool TITCALL IsFileBeingDebugged(); -__declspec(dllimport) void TITCALL SetErrorModel(bool DisplayErrorMessages); -// TitanEngine.FindOEP.functions: -__declspec(dllimport) void TITCALL FindOEPInit(); -__declspec(dllimport) bool TITCALL FindOEPGenerically(char* szFileName, LPVOID TraceInitCallBack, LPVOID CallBack); -__declspec(dllimport) bool TITCALL FindOEPGenericallyW(wchar_t* szFileName, LPVOID TraceInitCallBack, LPVOID CallBack); -// TitanEngine.Importer.functions: -__declspec(dllimport) void TITCALL ImporterAddNewDll(char* szDLLName, ULONG_PTR FirstThunk); -__declspec(dllimport) void TITCALL ImporterAddNewAPI(char* szAPIName, ULONG_PTR ThunkValue); -__declspec(dllimport) void TITCALL ImporterAddNewOrdinalAPI(ULONG_PTR OrdinalNumber, ULONG_PTR ThunkValue); -__declspec(dllimport) long TITCALL ImporterGetAddedDllCount(); -__declspec(dllimport) long TITCALL ImporterGetAddedAPICount(); -__declspec(dllimport) bool TITCALL ImporterExportIAT(ULONG_PTR StorePlace, ULONG_PTR FileMapVA, HANDLE hFileMap); -__declspec(dllimport) long TITCALL ImporterEstimatedSize(); -__declspec(dllimport) bool TITCALL ImporterExportIATEx(char* szDumpFileName, char* szExportFileName, char* szSectionName); -__declspec(dllimport) bool TITCALL ImporterExportIATExW(wchar_t* szDumpFileName, wchar_t* szExportFileName, wchar_t* szSectionName = L".RL!TEv2"); -__declspec(dllimport) long long TITCALL ImporterFindAPIWriteLocation(char* szAPIName); -__declspec(dllimport) long long TITCALL ImporterFindOrdinalAPIWriteLocation(ULONG_PTR OrdinalNumber); -__declspec(dllimport) long long TITCALL ImporterFindAPIByWriteLocation(ULONG_PTR APIWriteLocation); -__declspec(dllimport) long long TITCALL ImporterFindDLLByWriteLocation(ULONG_PTR APIWriteLocation); -__declspec(dllimport) void* TITCALL ImporterGetDLLName(ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetDLLNameW(ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetAPIName(ULONG_PTR APIAddress); -__declspec(dllimport) long long TITCALL ImporterGetAPIOrdinalNumber(ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetAPINameEx(ULONG_PTR APIAddress, ULONG_PTR DLLBasesList); -__declspec(dllimport) long long TITCALL ImporterGetRemoteAPIAddress(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) long long TITCALL ImporterGetRemoteAPIAddressEx(char* szDLLName, char* szAPIName); -__declspec(dllimport) long long TITCALL ImporterGetLocalAPIAddress(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetDLLNameFromDebugee(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetDLLNameFromDebugeeW(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetAPINameFromDebugee(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) long long TITCALL ImporterGetAPIOrdinalNumberFromDebugee(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) long TITCALL ImporterGetDLLIndexEx(ULONG_PTR APIAddress, ULONG_PTR DLLBasesList); -__declspec(dllimport) long TITCALL ImporterGetDLLIndex(HANDLE hProcess, ULONG_PTR APIAddress, ULONG_PTR DLLBasesList); -__declspec(dllimport) long long TITCALL ImporterGetRemoteDLLBase(HANDLE hProcess, HMODULE LocalModuleBase); -__declspec(dllimport) long long TITCALL ImporterGetRemoteDLLBaseEx(HANDLE hProcess, char* szModuleName); -__declspec(dllimport) void* TITCALL ImporterGetRemoteDLLBaseExW(HANDLE hProcess, wchar_t* szModuleName); -__declspec(dllimport) bool TITCALL ImporterIsForwardedAPI(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetForwardedAPIName(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetForwardedDLLName(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) long TITCALL ImporterGetForwardedDLLIndex(HANDLE hProcess, ULONG_PTR APIAddress, ULONG_PTR DLLBasesList); -__declspec(dllimport) long long TITCALL ImporterGetForwardedAPIOrdinalNumber(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) long long TITCALL ImporterGetNearestAPIAddress(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetNearestAPIName(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) bool TITCALL ImporterCopyOriginalIAT(char* szOriginalFile, char* szDumpFile); -__declspec(dllimport) bool TITCALL ImporterCopyOriginalIATW(wchar_t* szOriginalFile, wchar_t* szDumpFile); -__declspec(dllimport) bool TITCALL ImporterLoadImportTable(char* szFileName); -__declspec(dllimport) bool TITCALL ImporterLoadImportTableW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL ImporterMoveOriginalIAT(char* szOriginalFile, char* szDumpFile, char* szSectionName); -__declspec(dllimport) bool TITCALL ImporterMoveOriginalIATW(wchar_t* szOriginalFile, wchar_t* szDumpFile, char* szSectionName); -__declspec(dllimport) void TITCALL ImporterAutoSearchIAT(DWORD ProcessId, char* szFileName, ULONG_PTR SearchStart, LPVOID pIATStart, LPVOID pIATSize); -__declspec(dllimport) void TITCALL ImporterAutoSearchIATW(DWORD ProcessIds, wchar_t* szFileName, ULONG_PTR SearchStart, LPVOID pIATStart, LPVOID pIATSize); -__declspec(dllimport) void TITCALL ImporterAutoSearchIATEx(DWORD ProcessId, ULONG_PTR ImageBase, ULONG_PTR SearchStart, LPVOID pIATStart, LPVOID pIATSize); -__declspec(dllimport) void TITCALL ImporterEnumAddedData(LPVOID EnumCallBack); -__declspec(dllimport) long TITCALL ImporterAutoFixIATEx(DWORD ProcessId, char* szDumpedFile, char* szSectionName, bool DumpRunningProcess, bool RealignFile, ULONG_PTR EntryPointAddress, ULONG_PTR ImageBase, ULONG_PTR SearchStart, bool TryAutoFix, bool FixEliminations, LPVOID UnknownPointerFixCallback); -__declspec(dllimport) long TITCALL ImporterAutoFixIATExW(DWORD ProcessId, wchar_t* szDumpedFile, char* szSectionName, bool DumpRunningProcess, bool RealignFile, ULONG_PTR EntryPointAddress, ULONG_PTR ImageBase, ULONG_PTR SearchStart, bool TryAutoFix, bool FixEliminations, LPVOID UnknownPointerFixCallback); -__declspec(dllimport) long TITCALL ImporterAutoFixIAT(DWORD ProcessId, char* szDumpedFile, ULONG_PTR SearchStart); -__declspec(dllimport) long TITCALL ImporterAutoFixIATW(DWORD ProcessId, wchar_t* szDumpedFile, ULONG_PTR SearchStart); -__declspec(dllimport) bool TITCALL ImporterDeleteAPI(DWORD_PTR apiAddr); -// Global.Engine.Hook.functions: -__declspec(dllimport) bool TITCALL HooksSafeTransitionEx(LPVOID HookAddressArray, int NumberOfHooks, bool TransitionStart); -__declspec(dllimport) bool TITCALL HooksSafeTransition(LPVOID HookAddress, bool TransitionStart); -__declspec(dllimport) bool TITCALL HooksIsAddressRedirected(LPVOID HookAddress); -__declspec(dllimport) void* TITCALL HooksGetTrampolineAddress(LPVOID HookAddress); -__declspec(dllimport) void* TITCALL HooksGetHookEntryDetails(LPVOID HookAddress); -__declspec(dllimport) bool TITCALL HooksInsertNewRedirection(LPVOID HookAddress, LPVOID RedirectTo, int HookType); -__declspec(dllimport) bool TITCALL HooksInsertNewIATRedirectionEx(ULONG_PTR FileMapVA, ULONG_PTR LoadedModuleBase, char* szHookFunction, LPVOID RedirectTo); -__declspec(dllimport) bool TITCALL HooksInsertNewIATRedirection(char* szModuleName, char* szHookFunction, LPVOID RedirectTo); -__declspec(dllimport) bool TITCALL HooksRemoveRedirection(LPVOID HookAddress, bool RemoveAll); -__declspec(dllimport) bool TITCALL HooksRemoveRedirectionsForModule(HMODULE ModuleBase); -__declspec(dllimport) bool TITCALL HooksRemoveIATRedirection(char* szModuleName, char* szHookFunction, bool RemoveAll); -__declspec(dllimport) bool TITCALL HooksDisableRedirection(LPVOID HookAddress, bool DisableAll); -__declspec(dllimport) bool TITCALL HooksDisableRedirectionsForModule(HMODULE ModuleBase); -__declspec(dllimport) bool TITCALL HooksDisableIATRedirection(char* szModuleName, char* szHookFunction, bool DisableAll); -__declspec(dllimport) bool TITCALL HooksEnableRedirection(LPVOID HookAddress, bool EnableAll); -__declspec(dllimport) bool TITCALL HooksEnableRedirectionsForModule(HMODULE ModuleBase); -__declspec(dllimport) bool TITCALL HooksEnableIATRedirection(char* szModuleName, char* szHookFunction, bool EnableAll); -__declspec(dllimport) void TITCALL HooksScanModuleMemory(HMODULE ModuleBase, LPVOID CallBack); -__declspec(dllimport) void TITCALL HooksScanEntireProcessMemory(LPVOID CallBack); -__declspec(dllimport) void TITCALL HooksScanEntireProcessMemoryEx(); -// TitanEngine.Tracer.functions: -__declspec(dllimport) void TITCALL TracerInit(); -__declspec(dllimport) long long TITCALL TracerLevel1(HANDLE hProcess, ULONG_PTR AddressToTrace); -__declspec(dllimport) long long TITCALL HashTracerLevel1(HANDLE hProcess, ULONG_PTR AddressToTrace, DWORD InputNumberOfInstructions); -__declspec(dllimport) long TITCALL TracerDetectRedirection(HANDLE hProcess, ULONG_PTR AddressToTrace); -__declspec(dllimport) long long TITCALL TracerFixKnownRedirection(HANDLE hProcess, ULONG_PTR AddressToTrace, DWORD RedirectionId); -__declspec(dllimport) long long TITCALL TracerFixRedirectionViaModule(HMODULE hModuleHandle, HANDLE hProcess, ULONG_PTR AddressToTrace, DWORD IdParameter); -__declspec(dllimport) long long TITCALL TracerDetectRedirectionViaModule(HMODULE hModuleHandle, HANDLE hProcess, ULONG_PTR AddressToTrace, PDWORD ReturnedId); -__declspec(dllimport) long TITCALL TracerFixRedirectionViaImpRecPlugin(HANDLE hProcess, char* szPluginName, ULONG_PTR AddressToTrace); -// TitanEngine.Exporter.functions: -__declspec(dllimport) void TITCALL ExporterCleanup(); -__declspec(dllimport) void TITCALL ExporterSetImageBase(ULONG_PTR ImageBase); -__declspec(dllimport) void TITCALL ExporterInit(DWORD MemorySize, ULONG_PTR ImageBase, DWORD ExportOrdinalBase, char* szExportModuleName); -__declspec(dllimport) bool TITCALL ExporterAddNewExport(char* szExportName, DWORD ExportRelativeAddress); -__declspec(dllimport) bool TITCALL ExporterAddNewOrdinalExport(DWORD OrdinalNumber, DWORD ExportRelativeAddress); -__declspec(dllimport) long TITCALL ExporterGetAddedExportCount(); -__declspec(dllimport) long TITCALL ExporterEstimatedSize(); -__declspec(dllimport) bool TITCALL ExporterBuildExportTable(ULONG_PTR StorePlace, ULONG_PTR FileMapVA); -__declspec(dllimport) bool TITCALL ExporterBuildExportTableEx(char* szExportFileName, char* szSectionName); -__declspec(dllimport) bool TITCALL ExporterBuildExportTableExW(wchar_t* szExportFileName, char* szSectionName); -__declspec(dllimport) bool TITCALL ExporterLoadExportTable(char* szFileName); -__declspec(dllimport) bool TITCALL ExporterLoadExportTableW(wchar_t* szFileName); -// TitanEngine.Librarian.functions: -__declspec(dllimport) bool TITCALL LibrarianSetBreakPoint(char* szLibraryName, DWORD bpxType, bool SingleShoot, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL LibrarianRemoveBreakPoint(char* szLibraryName, DWORD bpxType); -__declspec(dllimport) void* TITCALL LibrarianGetLibraryInfo(char* szLibraryName); -__declspec(dllimport) void* TITCALL LibrarianGetLibraryInfoW(wchar_t* szLibraryName); -__declspec(dllimport) void* TITCALL LibrarianGetLibraryInfoEx(void* BaseOfDll); -__declspec(dllimport) void* TITCALL LibrarianGetLibraryInfoExW(void* BaseOfDll); -__declspec(dllimport) void TITCALL LibrarianEnumLibraryInfo(void* EnumCallBack); -__declspec(dllimport) void TITCALL LibrarianEnumLibraryInfoW(void* EnumCallBack); -// TitanEngine.Process.functions: -__declspec(dllimport) long TITCALL GetActiveProcessId(char* szImageName); -__declspec(dllimport) long TITCALL GetActiveProcessIdW(wchar_t* szImageName); -__declspec(dllimport) void TITCALL EnumProcessesWithLibrary(char* szLibraryName, void* EnumFunction); -// TitanEngine.TLSFixer.functions: -__declspec(dllimport) bool TITCALL TLSBreakOnCallBack(LPVOID ArrayOfCallBacks, DWORD NumberOfCallBacks, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL TLSGrabCallBackData(char* szFileName, LPVOID ArrayOfCallBacks, LPDWORD NumberOfCallBacks); -__declspec(dllimport) bool TITCALL TLSGrabCallBackDataW(wchar_t* szFileName, LPVOID ArrayOfCallBacks, LPDWORD NumberOfCallBacks); -__declspec(dllimport) bool TITCALL TLSBreakOnCallBackEx(char* szFileName, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL TLSBreakOnCallBackExW(wchar_t* szFileName, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL TLSRemoveCallback(char* szFileName); -__declspec(dllimport) bool TITCALL TLSRemoveCallbackW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL TLSRemoveTable(char* szFileName); -__declspec(dllimport) bool TITCALL TLSRemoveTableW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL TLSBackupData(char* szFileName); -__declspec(dllimport) bool TITCALL TLSBackupDataW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL TLSRestoreData(); -__declspec(dllimport) bool TITCALL TLSBuildNewTable(ULONG_PTR FileMapVA, ULONG_PTR StorePlace, ULONG_PTR StorePlaceRVA, LPVOID ArrayOfCallBacks, DWORD NumberOfCallBacks); -__declspec(dllimport) bool TITCALL TLSBuildNewTableEx(char* szFileName, char* szSectionName, LPVOID ArrayOfCallBacks, DWORD NumberOfCallBacks); -__declspec(dllimport) bool TITCALL TLSBuildNewTableExW(wchar_t* szFileName, char* szSectionName, LPVOID ArrayOfCallBacks, DWORD NumberOfCallBacks); -// TitanEngine.TranslateName.functions: -__declspec(dllimport) void* TITCALL TranslateNativeName(char* szNativeName); -__declspec(dllimport) void* TITCALL TranslateNativeNameW(wchar_t* szNativeName); -// TitanEngine.Handler.functions: -__declspec(dllimport) long TITCALL HandlerGetActiveHandleCount(DWORD ProcessId); -__declspec(dllimport) bool TITCALL HandlerIsHandleOpen(DWORD ProcessId, HANDLE hHandle); -__declspec(dllimport) void* TITCALL HandlerGetHandleName(HANDLE hProcess, DWORD ProcessId, HANDLE hHandle, bool TranslateName); -__declspec(dllimport) void* TITCALL HandlerGetHandleNameW(HANDLE hProcess, DWORD ProcessId, HANDLE hHandle, bool TranslateName); -__declspec(dllimport) long TITCALL HandlerEnumerateOpenHandles(DWORD ProcessId, LPVOID HandleBuffer, DWORD MaxHandleCount); -__declspec(dllimport) long long TITCALL HandlerGetHandleDetails(HANDLE hProcess, DWORD ProcessId, HANDLE hHandle, DWORD InformationReturn); -__declspec(dllimport) bool TITCALL HandlerCloseRemoteHandle(HANDLE hProcess, HANDLE hHandle); -__declspec(dllimport) long TITCALL HandlerEnumerateLockHandles(char* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated, LPVOID HandleDataBuffer, DWORD MaxHandleCount); -__declspec(dllimport) long TITCALL HandlerEnumerateLockHandlesW(wchar_t* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated, LPVOID HandleDataBuffer, DWORD MaxHandleCount); -__declspec(dllimport) bool TITCALL HandlerCloseAllLockHandles(char* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated); -__declspec(dllimport) bool TITCALL HandlerCloseAllLockHandlesW(wchar_t* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated); -__declspec(dllimport) bool TITCALL HandlerIsFileLocked(char* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated); -__declspec(dllimport) bool TITCALL HandlerIsFileLockedW(wchar_t* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated); -// TitanEngine.Handler[Mutex].functions: -__declspec(dllimport) long TITCALL HandlerEnumerateOpenMutexes(HANDLE hProcess, DWORD ProcessId, LPVOID HandleBuffer, DWORD MaxHandleCount); -__declspec(dllimport) long long TITCALL HandlerGetOpenMutexHandle(HANDLE hProcess, DWORD ProcessId, char* szMutexString); -__declspec(dllimport) long long TITCALL HandlerGetOpenMutexHandleW(HANDLE hProcess, DWORD ProcessId, wchar_t* szMutexString); -__declspec(dllimport) long TITCALL HandlerGetProcessIdWhichCreatedMutex(char* szMutexString); -__declspec(dllimport) long TITCALL HandlerGetProcessIdWhichCreatedMutexW(wchar_t* szMutexString); -// TitanEngine.Injector.functions: -__declspec(dllimport) bool TITCALL RemoteLoadLibrary(HANDLE hProcess, char* szLibraryFile, bool WaitForThreadExit); -__declspec(dllimport) bool TITCALL RemoteLoadLibraryW(HANDLE hProcess, wchar_t* szLibraryFile, bool WaitForThreadExit); -__declspec(dllimport) bool TITCALL RemoteFreeLibrary(HANDLE hProcess, HMODULE hModule, char* szLibraryFile, bool WaitForThreadExit); -__declspec(dllimport) bool TITCALL RemoteFreeLibraryW(HANDLE hProcess, HMODULE hModule, wchar_t* szLibraryFile, bool WaitForThreadExit); -__declspec(dllimport) bool TITCALL RemoteExitProcess(HANDLE hProcess, DWORD ExitCode); -// TitanEngine.StaticUnpacker.functions: -__declspec(dllimport) bool TITCALL StaticFileLoad(char* szFileName, DWORD DesiredAccess, bool SimulateLoad, LPHANDLE FileHandle, LPDWORD LoadedSize, LPHANDLE FileMap, PULONG_PTR FileMapVA); -__declspec(dllimport) bool TITCALL StaticFileLoadW(wchar_t* szFileName, DWORD DesiredAccess, bool SimulateLoad, LPHANDLE FileHandle, LPDWORD LoadedSize, LPHANDLE FileMap, PULONG_PTR FileMapVA); -__declspec(dllimport) bool TITCALL StaticFileUnload(char* szFileName, bool CommitChanges, HANDLE FileHandle, DWORD LoadedSize, HANDLE FileMap, ULONG_PTR FileMapVA); -__declspec(dllimport) bool TITCALL StaticFileUnloadW(wchar_t* szFileName, bool CommitChanges, HANDLE FileHandle, DWORD LoadedSize, HANDLE FileMap, ULONG_PTR FileMapVA); -__declspec(dllimport) bool TITCALL StaticFileOpen(char* szFileName, DWORD DesiredAccess, LPHANDLE FileHandle, LPDWORD FileSizeLow, LPDWORD FileSizeHigh); -__declspec(dllimport) bool TITCALL StaticFileOpenW(wchar_t* szFileName, DWORD DesiredAccess, LPHANDLE FileHandle, LPDWORD FileSizeLow, LPDWORD FileSizeHigh); -__declspec(dllimport) bool TITCALL StaticFileGetContent(HANDLE FileHandle, DWORD FilePositionLow, LPDWORD FilePositionHigh, void* Buffer, DWORD Size); -__declspec(dllimport) void TITCALL StaticFileClose(HANDLE FileHandle); -__declspec(dllimport) void TITCALL StaticMemoryDecrypt(LPVOID MemoryStart, DWORD MemorySize, DWORD DecryptionType, DWORD DecryptionKeySize, ULONG_PTR DecryptionKey); -__declspec(dllimport) void TITCALL StaticMemoryDecryptEx(LPVOID MemoryStart, DWORD MemorySize, DWORD DecryptionKeySize, void* DecryptionCallBack); -__declspec(dllimport) void TITCALL StaticMemoryDecryptSpecial(LPVOID MemoryStart, DWORD MemorySize, DWORD DecryptionKeySize, DWORD SpecDecryptionType, void* DecryptionCallBack); -__declspec(dllimport) void TITCALL StaticSectionDecrypt(ULONG_PTR FileMapVA, DWORD SectionNumber, bool SimulateLoad, DWORD DecryptionType, DWORD DecryptionKeySize, ULONG_PTR DecryptionKey); -__declspec(dllimport) bool TITCALL StaticMemoryDecompress(void* Source, DWORD SourceSize, void* Destination, DWORD DestinationSize, int Algorithm); -__declspec(dllimport) bool TITCALL StaticRawMemoryCopy(HANDLE hFile, ULONG_PTR FileMapVA, ULONG_PTR VitualAddressToCopy, DWORD Size, bool AddressIsRVA, char* szDumpFileName); -__declspec(dllimport) bool TITCALL StaticRawMemoryCopyW(HANDLE hFile, ULONG_PTR FileMapVA, ULONG_PTR VitualAddressToCopy, DWORD Size, bool AddressIsRVA, wchar_t* szDumpFileName); -__declspec(dllimport) bool TITCALL StaticRawMemoryCopyEx(HANDLE hFile, DWORD RawAddressToCopy, DWORD Size, char* szDumpFileName); -__declspec(dllimport) bool TITCALL StaticRawMemoryCopyExW(HANDLE hFile, DWORD RawAddressToCopy, DWORD Size, wchar_t* szDumpFileName); -__declspec(dllimport) bool TITCALL StaticRawMemoryCopyEx64(HANDLE hFile, DWORD64 RawAddressToCopy, DWORD64 Size, char* szDumpFileName); -__declspec(dllimport) bool TITCALL StaticRawMemoryCopyEx64W(HANDLE hFile, DWORD64 RawAddressToCopy, DWORD64 Size, wchar_t* szDumpFileName); -__declspec(dllimport) bool TITCALL StaticHashMemory(void* MemoryToHash, DWORD SizeOfMemory, void* HashDigest, bool OutputString, int Algorithm); -__declspec(dllimport) bool TITCALL StaticHashFile(char* szFileName, char* HashDigest, bool OutputString, int Algorithm); -__declspec(dllimport) bool TITCALL StaticHashFileW(wchar_t* szFileName, char* HashDigest, bool OutputString, int Algorithm); -// TitanEngine.Engine.functions: -__declspec(dllimport) void TITCALL SetEngineVariable(DWORD VariableId, bool VariableSet); -__declspec(dllimport) bool TITCALL EngineCreateMissingDependencies(char* szFileName, char* szOutputFolder, bool LogCreatedFiles); -__declspec(dllimport) bool TITCALL EngineCreateMissingDependenciesW(wchar_t* szFileName, wchar_t* szOutputFolder, bool LogCreatedFiles); -__declspec(dllimport) bool TITCALL EngineFakeMissingDependencies(HANDLE hProcess); -__declspec(dllimport) bool TITCALL EngineDeleteCreatedDependencies(); -__declspec(dllimport) bool TITCALL EngineCreateUnpackerWindow(char* WindowUnpackerTitle, char* WindowUnpackerLongTitle, char* WindowUnpackerName, char* WindowUnpackerAuthor, void* StartUnpackingCallBack); -__declspec(dllimport) void TITCALL EngineAddUnpackerWindowLogMessage(char* szLogMessage); -// Global.Engine.Extension.Functions: -__declspec(dllimport) bool TITCALL ExtensionManagerIsPluginLoaded(char* szPluginName); -__declspec(dllimport) bool TITCALL ExtensionManagerIsPluginEnabled(char* szPluginName); -__declspec(dllimport) bool TITCALL ExtensionManagerDisableAllPlugins(); -__declspec(dllimport) bool TITCALL ExtensionManagerDisablePlugin(char* szPluginName); -__declspec(dllimport) bool TITCALL ExtensionManagerEnableAllPlugins(); -__declspec(dllimport) bool TITCALL ExtensionManagerEnablePlugin(char* szPluginName); -__declspec(dllimport) bool TITCALL ExtensionManagerUnloadAllPlugins(); -__declspec(dllimport) bool TITCALL ExtensionManagerUnloadPlugin(char* szPluginName); -__declspec(dllimport) void* TITCALL ExtensionManagerGetPluginInfo(char* szPluginName); - -#ifdef __cplusplus -} -#endif /*__cplusplus*/ - -#pragma pack(pop) - -#endif /*TITANENGINE*/ diff --git a/TitanScriptGui/TitanEngine.lib b/TitanScriptGui/TitanEngine.lib deleted file mode 100644 index 4b6174a..0000000 Binary files a/TitanScriptGui/TitanEngine.lib and /dev/null differ diff --git a/TitanScriptGui/TitanScript.h b/TitanScriptGui/TitanScript.h index 4eb75e2..28e5c8c 100644 --- a/TitanScriptGui/TitanScript.h +++ b/TitanScriptGui/TitanScript.h @@ -1,26 +1,26 @@ -#ifndef TITANSCRIPT_H -#define TITANSCRIPT_H - -#if _MSC_VER > 1000 -//#pragma once -#endif - -#include - -enum eLogType {TS_LOG_NORMAL, TS_LOG_ERROR, TS_LOG_COMMAND, TS_LOG_DEBUG}; -typedef void(*fLogCallback)(const char* szString, eLogType Type); - -typedef bool (*tScripterLoadFileA)(const char*); -typedef bool (*tScripterLoadFileW)(const wchar_t*); -typedef bool (*tScripterLoadBuffer)(const char*); -typedef bool (*tScripterResume)(); -typedef bool (*tScripterPause)(); -typedef bool (*tScripterAutoDebugA)(const char*); -typedef bool (*tScripterAutoDebugW)(const wchar_t*); -typedef void (*tScripterSetLogCallback)(fLogCallback Callback); -typedef bool (*tScripterExecuteWithTitanMistA)(const char*, const char*); - -// use like this: tScripterResume foo = GetTSFunctionPointer(Resume); -#define GetTSFunctionPointer(x) ((tScripter ## x)GetProcAddress(GetModuleHandleA("TitanScript"), "Scripter" #x)) - -#endif /*TITANSCRIPT_H*/ +#ifndef TITANSCRIPT_H +#define TITANSCRIPT_H + +#if _MSC_VER > 1000 +//#pragma once +#endif + +#include + +enum eLogType {TS_LOG_NORMAL, TS_LOG_ERROR, TS_LOG_COMMAND, TS_LOG_DEBUG}; +typedef void(*fLogCallback)(const char* szString, eLogType Type); + +typedef bool (*tScripterLoadFileA)(const char*); +typedef bool (*tScripterLoadFileW)(const wchar_t*); +typedef bool (*tScripterLoadBuffer)(const char*); +typedef bool (*tScripterResume)(); +typedef bool (*tScripterPause)(); +typedef bool (*tScripterAutoDebugA)(const char*); +typedef bool (*tScripterAutoDebugW)(const wchar_t*); +typedef void (*tScripterSetLogCallback)(fLogCallback Callback); +typedef bool (*tScripterExecuteWithTitanMistA)(const char*, const char*); + +// use like this: tScripterResume foo = GetTSFunctionPointer(Resume); +#define GetTSFunctionPointer(x) ((tScripter ## x)GetProcAddress(GetModuleHandleA("TitanScript"), "Scripter" #x)) + +#endif /*TITANSCRIPT_H*/ diff --git a/TitanScriptGui/TitanScriptGui.cpp b/TitanScriptGui/TitanScriptGui.cpp index 56de296..d76e4cd 100644 --- a/TitanScriptGui/TitanScriptGui.cpp +++ b/TitanScriptGui/TitanScriptGui.cpp @@ -1,122 +1,142 @@ -#include "stdafx.h" -#include "TitanScriptGui.h" -#include "TitanEngine.h" -#include "TitanScript.h" - -HINSTANCE hInst; -HWND hLogBox; -TCHAR FileNameTarget[MAX_PATH] = {}; -TCHAR FileNameScript[MAX_PATH] = {}; - -INT_PTR CALLBACK WndProc(HWND, UINT, WPARAM, LPARAM); -bool GetFileDialog(TCHAR[MAX_PATH]); -void AddLogMessage(const char* szLogMessage, eLogType Type); - -tScripterLoadFileA load_file = NULL; -tScripterExecuteWithTitanMistA exec = NULL; -tScripterSetLogCallback set_log_callback = NULL; - -int APIENTRY _tWinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPTSTR lpCmdLine, int nCmdShow) -{ - UNREFERENCED_PARAMETER(hPrevInstance); - UNREFERENCED_PARAMETER(lpCmdLine); - - DialogBox(hInstance, MAKEINTRESOURCE(IDD_MAINWINDOW), NULL, &WndProc); - ExitProcess(NULL); -} - -INT_PTR CALLBACK WndProc(HWND hWnd, UINT message, WPARAM wParam, LPARAM lParam) -{ - - switch (message) - { - case WM_INITDIALOG: { - hLogBox = GetDlgItem(hWnd, IDC_LOG); - - //make sure TitanScript is available - if ( !ExtensionManagerIsPluginLoaded( "TitanScript" ) || !ExtensionManagerIsPluginEnabled( "TitanScript" ) ) { - AddLogMessage("TitanScript failed to load", TS_LOG_ERROR); - AddLogMessage("Ensure plugins\\x86\\TitanScript.dll exists !", TS_LOG_ERROR); - - EnableWindow(GetDlgItem(hWnd, IDC_RUN ), FALSE); - } else { - load_file = GetTSFunctionPointer( LoadFileA ); - exec = GetTSFunctionPointer( ExecuteWithTitanMistA ); - set_log_callback = GetTSFunctionPointer( SetLogCallback ); - - set_log_callback(&AddLogMessage); - } - - break; - } - case WM_COMMAND: - switch (LOWORD(wParam)) - { - case IDC_BROWSETARGET: { - if(GetFileDialog(FileNameTarget)) - { - SetDlgItemText(hWnd, IDC_TARGETPATH, FileNameTarget); - } - break; - } - case IDC_BROWSESCRIPT: { - if(GetFileDialog(FileNameScript)) - { - SetDlgItemText(hWnd, IDC_SCRIPTPATH, FileNameScript); - } - break; - } - case IDC_RUN: { - char buf[MAX_PATH] = {0}; - - wcstombs(buf, FileNameScript, sizeof(buf)); - if(!load_file(buf)) { - AddLogMessage("Script failed to load", TS_LOG_ERROR); - break; - } - - wcstombs(buf, FileNameTarget, sizeof(buf)); - if(!exec(buf, "dump.exe")) { - AddLogMessage("Failed to execute", TS_LOG_ERROR); - break; - } - - break; - } - - } - break; - case WM_CLOSE: - EndDialog(hWnd, NULL); - break; - default: - return false; - } - return 0; -} - -bool GetFileDialog(TCHAR Buffer[MAX_PATH]) -{ - OPENFILENAME sOpenFileName = {0}; - const TCHAR szFilterString[] = _T("All Files \0*.*\0\0"); - const TCHAR szDialogTitle[] = _T("TitanScriptGUI"); - - Buffer[0] = 0; - - sOpenFileName.lStructSize = sizeof(sOpenFileName); - sOpenFileName.lpstrFilter = szFilterString; - sOpenFileName.lpstrFile = Buffer; - sOpenFileName.nMaxFile = MAX_PATH; - sOpenFileName.Flags = OFN_FILEMUSTEXIST | OFN_PATHMUSTEXIST | OFN_LONGNAMES | OFN_EXPLORER | OFN_HIDEREADONLY; - sOpenFileName.lpstrTitle = szDialogTitle; - - return (TRUE == GetOpenFileName(&sOpenFileName)); -} - -void AddLogMessage(const char* szLogMessage, eLogType Type) -{ - TCHAR buf[100] = {0}; - mbstowcs(buf, szLogMessage, sizeof(buf)); - LRESULT cSelect = SendMessage(hLogBox, LB_INSERTSTRING, (WPARAM)-1, (LPARAM)buf); - SendMessage(hLogBox, LB_SETCURSEL, cSelect, NULL); -} \ No newline at end of file +#include "stdafx.h" +#include "TitanScriptGui.h" +#include "..\SDK\CPP\TitanEngine.h" +#include "TitanScript.h" + +HINSTANCE hInst; +HWND hLogBox; +TCHAR FileNameTarget[MAX_PATH] = {}; +TCHAR FileNameScript[MAX_PATH] = {}; + +INT_PTR CALLBACK WndProc(HWND, UINT, WPARAM, LPARAM); +bool GetFileDialog(TCHAR[MAX_PATH]); +void AddLogMessage(const char* szLogMessage, eLogType Type); + +tScripterLoadFileA load_file = NULL; +tScripterExecuteWithTitanMistA exec = NULL; +tScripterSetLogCallback set_log_callback = NULL; + +int APIENTRY _tWinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPTSTR lpCmdLine, int nCmdShow) +{ + UNREFERENCED_PARAMETER(hPrevInstance); + UNREFERENCED_PARAMETER(lpCmdLine); + + hInst = hInstance; + + DialogBox(hInstance, MAKEINTRESOURCE(IDD_MAINWINDOW), NULL, &WndProc); + ExitProcess(NULL); +} + +INT_PTR CALLBACK WndProc(HWND hWnd, UINT message, WPARAM wParam, LPARAM lParam) +{ + + switch (message) + { + case WM_INITDIALOG: + { + HICON hIconLarge = (HICON)LoadImage(hInst, MAKEINTRESOURCE(IDI_ICON1), IMAGE_ICON, 32, 32, LR_DEFAULTSIZE); + SendMessage(hWnd, WM_SETICON, ICON_BIG, (LPARAM)hIconLarge); + HICON hIconSmall = (HICON)LoadImage(hInst, MAKEINTRESOURCE(IDI_ICON1), IMAGE_ICON, 16, 16, LR_DEFAULTSIZE); + SendMessage(hWnd, WM_SETICON, ICON_SMALL, (LPARAM)hIconSmall); + + hLogBox = GetDlgItem(hWnd, IDC_LOG); + + //make sure TitanScript is available + if ( !ExtensionManagerIsPluginLoaded( "TitanScript" ) || !ExtensionManagerIsPluginEnabled( "TitanScript" ) ) + { + AddLogMessage("TitanScript failed to load", TS_LOG_ERROR); +#ifdef _WIN64 + AddLogMessage("Ensure plugins\\x64\\TitanScript.dll exists !", TS_LOG_ERROR); +#else + AddLogMessage("Ensure plugins\\x86\\TitanScript.dll exists !", TS_LOG_ERROR); +#endif //_WIN64 + + EnableWindow(GetDlgItem(hWnd, IDC_RUN ), FALSE); + } + else + { + load_file = GetTSFunctionPointer( LoadFileA ); + exec = GetTSFunctionPointer( ExecuteWithTitanMistA ); + set_log_callback = GetTSFunctionPointer( SetLogCallback ); + + set_log_callback(&AddLogMessage); + } + + break; + } + case WM_COMMAND: + switch (LOWORD(wParam)) + { + case IDC_BROWSETARGET: + { + if(GetFileDialog(FileNameTarget)) + { + SetDlgItemText(hWnd, IDC_TARGETPATH, FileNameTarget); + } + break; + } + case IDC_BROWSESCRIPT: + { + if(GetFileDialog(FileNameScript)) + { + SetDlgItemText(hWnd, IDC_SCRIPTPATH, FileNameScript); + } + break; + } + case IDC_RUN: + { + char buf[MAX_PATH] = {0}; + + wcstombs(buf, FileNameScript, sizeof(buf)); + if(!load_file(buf)) + { + AddLogMessage("Script failed to load", TS_LOG_ERROR); + break; + } + + wcstombs(buf, FileNameTarget, sizeof(buf)); + if(!exec(buf, "dump.exe")) + { + AddLogMessage("Failed to execute", TS_LOG_ERROR); + break; + } + + break; + } + + } + break; + case WM_CLOSE: + EndDialog(hWnd, NULL); + break; + default: + return false; + } + return 0; +} + +bool GetFileDialog(TCHAR Buffer[MAX_PATH]) +{ + OPENFILENAME sOpenFileName = {0}; + const TCHAR szFilterString[] = _T("All Files \0*.*\0\0"); + const TCHAR szDialogTitle[] = _T("TitanScriptGUI"); + + Buffer[0] = 0; + + sOpenFileName.lStructSize = sizeof(sOpenFileName); + sOpenFileName.lpstrFilter = szFilterString; + sOpenFileName.lpstrFile = Buffer; + sOpenFileName.nMaxFile = MAX_PATH; + sOpenFileName.Flags = OFN_FILEMUSTEXIST | OFN_PATHMUSTEXIST | OFN_LONGNAMES | OFN_EXPLORER | OFN_HIDEREADONLY; + sOpenFileName.lpstrTitle = szDialogTitle; + + return (TRUE == GetOpenFileName(&sOpenFileName)); +} + +void AddLogMessage(const char* szLogMessage, eLogType Type) +{ + TCHAR buf[100] = {0}; + mbstowcs(buf, szLogMessage, sizeof(buf)); + LRESULT cSelect = SendMessage(hLogBox, LB_INSERTSTRING, (WPARAM)-1, (LPARAM)buf); + SendMessage(hLogBox, LB_SETCURSEL, cSelect, NULL); +} diff --git a/TitanScriptGui/TitanScriptGui.h b/TitanScriptGui/TitanScriptGui.h index d00d47e..e60f2eb 100644 --- a/TitanScriptGui/TitanScriptGui.h +++ b/TitanScriptGui/TitanScriptGui.h @@ -1,3 +1,3 @@ -#pragma once - -#include "resource.h" +#pragma once + +#include "resource.h" diff --git a/TitanScriptGui/TitanScriptGui.rc b/TitanScriptGui/TitanScriptGui.rc index 055a826..52caa25 100644 Binary files a/TitanScriptGui/TitanScriptGui.rc and b/TitanScriptGui/TitanScriptGui.rc differ diff --git a/TitanScriptGui/TitanScriptGui.vcxproj b/TitanScriptGui/TitanScriptGui.vcxproj index 71b23c3..998a2ee 100644 --- a/TitanScriptGui/TitanScriptGui.vcxproj +++ b/TitanScriptGui/TitanScriptGui.vcxproj @@ -1,102 +1,172 @@ - - - - - Debug - Win32 - - - Release - Win32 - - - - {49C88677-C374-4AE2-B431-8F3B424BF245} - Win32Proj - TitanScriptGui - - - - Application - true - Unicode - - - Application - false - true - Unicode - - - - - - - - - - - - - true - $(SolutionDir)\$(IntDir)x32\ - - - false - $(SolutionDir)\$(IntDir)x32\ - - - - Use - Level3 - Disabled - WIN32;_DEBUG;_WINDOWS;%(PreprocessorDefinitions) - - - Windows - true - TitanEngine.lib;%(AdditionalDependencies) - - - - - Level3 - Use - MaxSpeed - true - true - WIN32;NDEBUG;_WINDOWS;%(PreprocessorDefinitions) - - - Windows - true - true - true - TitanEngine.lib;%(AdditionalDependencies) - - - - - - - - - - - - - - - - Create - Create - - - - - - - - - + + + + + Debug + Win32 + + + Debug + x64 + + + Release + Win32 + + + Release + x64 + + + + {49C88677-C374-4AE2-B431-8F3B424BF245} + Win32Proj + TitanScriptGui + + + + Application + true + Unicode + + + Application + true + Unicode + + + Application + false + true + Unicode + + + Application + false + true + Unicode + + + + + + + + + + + + + + + + + + + true + $(SolutionDir)\$(Configuration)\x32\ + $(Configuration)\x32\ + + + true + $(SolutionDir)\$(Configuration)\x64\ + $(Configuration)\x64\ + + + false + $(SolutionDir)\$(Configuration)\x32\ + $(Configuration)\x32\ + + + false + $(SolutionDir)\$(Configuration)\x64\ + $(Configuration)\x64\ + + + + Use + Level3 + Disabled + WIN32;_DEBUG;_WINDOWS;%(PreprocessorDefinitions) + + + Windows + true + $(OutDir)TitanEngine.lib;comdlg32.lib;user32.lib + + + + + Use + Level3 + Disabled + WIN32;_DEBUG;_WINDOWS;%(PreprocessorDefinitions) + + + Windows + true + $(OutDir)TitanEngine.lib;comdlg32.lib;user32.lib + + + + + Level3 + Use + MaxSpeed + true + true + WIN32;NDEBUG;_WINDOWS;%(PreprocessorDefinitions) + + + Windows + true + true + true + $(OutDir)TitanEngine.lib;comdlg32.lib;user32.lib + + + + + Level3 + Use + MaxSpeed + true + true + WIN32;NDEBUG;_WINDOWS;%(PreprocessorDefinitions) + + + Windows + true + true + true + $(OutDir)TitanEngine.lib;comdlg32.lib;user32.lib + + + + + + + + + + + + + + + + + Create + Create + Create + Create + + + + + + + + + \ No newline at end of file diff --git a/TitanScriptGui/TitanScriptGui.vcxproj.filters b/TitanScriptGui/TitanScriptGui.vcxproj.filters index 16c706f..039b995 100644 --- a/TitanScriptGui/TitanScriptGui.vcxproj.filters +++ b/TitanScriptGui/TitanScriptGui.vcxproj.filters @@ -1,53 +1,64 @@ - - - - - {4FC737F1-C7A5-4376-A066-2A32D752A2FF} - cpp;c;cc;cxx;def;odl;idl;hpj;bat;asm;asmx - - - {93995380-89BD-4b04-88EB-625FBE52EBFB} - h;hpp;hxx;hm;inl;inc;xsd - - - {67DA6AB6-F800-4c08-8B7A-83BB121AAD01} - rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms - - - - - - - - Headerdateien - - - Headerdateien - - - Headerdateien - - - Headerdateien - - - Headerdateien - - - Headerdateien - - - - - Quelldateien - - - Quelldateien - - - - - Ressourcendateien - - + + + + + {93995380-89BD-4b04-88EB-625FBE52EBFB} + h;hpp;hxx;hm;inl;inc;xsd + + + {4FC737F1-C7A5-4376-A066-2A32D752A2FF} + cpp;c;cc;cxx;def;odl;idl;hpj;bat;asm;asmx + + + {67DA6AB6-F800-4c08-8B7A-83BB121AAD01} + rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms + + + {6072cfa4-c101-4f1a-9920-89951ba83a2b} + + + {a0cc27fd-de5f-4551-9fe5-4a45f9ae862c} + + + + + Resource Files\Images + + + + + Header Files + + + Header Files + + + Header Files + + + Header Files + + + Header Files + + + Header Files\SDK + + + Header Files\SDK + + + + + Source Files + + + Source Files + + + + + Resource Files + + \ No newline at end of file diff --git a/TitanScriptGui/resource.h b/TitanScriptGui/resource.h index 35fd2f8..17f8f28 100644 Binary files a/TitanScriptGui/resource.h and b/TitanScriptGui/resource.h differ diff --git a/TitanScriptGui/stdafx.cpp b/TitanScriptGui/stdafx.cpp index 106bd4f..1577c4e 100644 --- a/TitanScriptGui/stdafx.cpp +++ b/TitanScriptGui/stdafx.cpp @@ -1,8 +1 @@ -// stdafx.cpp : Quelldatei, die nur die Standard-Includes einbindet. -// TitanScriptGui.pch ist der vorkompilierte Header. -// stdafx.obj enthält die vorkompilierten Typinformationen. - -#include "stdafx.h" - -// TODO: Auf zusätzliche Header verweisen, die in STDAFX.H -// und nicht in dieser Datei erforderlich sind. +#include "stdafx.h" \ No newline at end of file diff --git a/TitanScriptGui/stdafx.h b/TitanScriptGui/stdafx.h index 7ca0378..a43f4f6 100644 --- a/TitanScriptGui/stdafx.h +++ b/TitanScriptGui/stdafx.h @@ -1,13 +1,12 @@ -#pragma once - -#include "targetver.h" - -#define WIN32_LEAN_AND_MEAN -#include -#include - -#include -#include -#include -#include - +#pragma once + +#include "targetver.h" + +#define WIN32_LEAN_AND_MEAN +#include +#include + +#include +#include +#include +#include diff --git a/TitanScriptGui/targetver.h b/TitanScriptGui/targetver.h index 05ba7d4..2b26ce2 100644 --- a/TitanScriptGui/targetver.h +++ b/TitanScriptGui/targetver.h @@ -1,3 +1,3 @@ -#pragma once - -#include +#pragma once + +#include diff --git a/TitanUnitTest/TitanEngine.h b/TitanUnitTest/TitanEngine.h deleted file mode 100644 index 206f9a4..0000000 --- a/TitanUnitTest/TitanEngine.h +++ /dev/null @@ -1,934 +0,0 @@ -#ifndef TITANENGINE -#define TITANENGINE - -#define TITCALL - -#if _MSC_VER > 1000 -#pragma once -#endif - -#include - -#pragma pack(push, 1) - -// Global.Constant.Structure.Declaration: -// Engine.External: -const BYTE UE_ACCESS_READ = 0; -const BYTE UE_ACCESS_WRITE = 1; -const BYTE UE_ACCESS_ALL = 2; - -const BYTE UE_HIDE_PEBONLY = 0; -const BYTE UE_HIDE_BASIC = 1; - -const BYTE UE_PLUGIN_CALL_REASON_PREDEBUG = 1; -const BYTE UE_PLUGIN_CALL_REASON_EXCEPTION = 2; -const BYTE UE_PLUGIN_CALL_REASON_POSTDEBUG = 3; -const BYTE UE_PLUGIN_CALL_REASON_UNHANDLEDEXCEPTION = 4; - -const BYTE TEE_HOOK_NRM_JUMP = 1; -const BYTE TEE_HOOK_NRM_CALL = 3; -const BYTE TEE_HOOK_IAT = 5; - -const BYTE UE_ENGINE_ALOW_MODULE_LOADING = 1; -const BYTE UE_ENGINE_AUTOFIX_FORWARDERS = 2; -const BYTE UE_ENGINE_PASS_ALL_EXCEPTIONS = 3; -const BYTE UE_ENGINE_NO_CONSOLE_WINDOW = 4; -const BYTE UE_ENGINE_BACKUP_FOR_CRITICAL_FUNCTIONS = 5; -const BYTE UE_ENGINE_CALL_PLUGIN_CALLBACK = 6; -const BYTE UE_ENGINE_RESET_CUSTOM_HANDLER = 7; -const BYTE UE_ENGINE_CALL_PLUGIN_DEBUG_CALLBACK = 8; - -const BYTE UE_OPTION_REMOVEALL = 1; -const BYTE UE_OPTION_DISABLEALL = 2; -const BYTE UE_OPTION_REMOVEALLDISABLED = 3; -const BYTE UE_OPTION_REMOVEALLENABLED = 4; - -const BYTE UE_STATIC_DECRYPTOR_XOR = 1; -const BYTE UE_STATIC_DECRYPTOR_SUB = 2; -const BYTE UE_STATIC_DECRYPTOR_ADD = 3; - -const BYTE UE_STATIC_DECRYPTOR_FOREWARD = 1; -const BYTE UE_STATIC_DECRYPTOR_BACKWARD = 2; - -const BYTE UE_STATIC_KEY_SIZE_1 = 1; -const BYTE UE_STATIC_KEY_SIZE_2 = 2; -const BYTE UE_STATIC_KEY_SIZE_4 = 4; -const BYTE UE_STATIC_KEY_SIZE_8 = 8; - -const BYTE UE_STATIC_APLIB = 1; -const BYTE UE_STATIC_APLIB_DEPACK = 2; -const BYTE UE_STATIC_LZMA = 3; - -const BYTE UE_STATIC_HASH_MD5 = 1; -const BYTE UE_STATIC_HASH_SHA1 = 2; -const BYTE UE_STATIC_HASH_CRC32 = 3; - -const DWORD UE_RESOURCE_LANGUAGE_ANY = -1; - -const BYTE UE_PE_OFFSET = 0; -const BYTE UE_IMAGEBASE = 1; -const BYTE UE_OEP = 2; -const BYTE UE_SIZEOFIMAGE = 3; -const BYTE UE_SIZEOFHEADERS = 4; -const BYTE UE_SIZEOFOPTIONALHEADER = 5; -const BYTE UE_SECTIONALIGNMENT = 6; -const BYTE UE_IMPORTTABLEADDRESS = 7; -const BYTE UE_IMPORTTABLESIZE = 8; -const BYTE UE_RESOURCETABLEADDRESS = 9; -const BYTE UE_RESOURCETABLESIZE = 10; -const BYTE UE_EXPORTTABLEADDRESS = 11; -const BYTE UE_EXPORTTABLESIZE = 12; -const BYTE UE_TLSTABLEADDRESS = 13; -const BYTE UE_TLSTABLESIZE = 14; -const BYTE UE_RELOCATIONTABLEADDRESS = 15; -const BYTE UE_RELOCATIONTABLESIZE = 16; -const BYTE UE_TIMEDATESTAMP = 17; -const BYTE UE_SECTIONNUMBER = 18; -const BYTE UE_CHECKSUM = 19; -const BYTE UE_SUBSYSTEM = 20; -const BYTE UE_CHARACTERISTICS = 21; -const BYTE UE_NUMBEROFRVAANDSIZES = 22; -const BYTE UE_BASEOFCODE = 23; -const BYTE UE_BASEOFDATA = 24; -//leaving some enum space here for future additions -const BYTE UE_SECTIONNAME = 40; -const BYTE UE_SECTIONVIRTUALOFFSET = 41; -const BYTE UE_SECTIONVIRTUALSIZE = 42; -const BYTE UE_SECTIONRAWOFFSET = 43; -const BYTE UE_SECTIONRAWSIZE = 44; -const BYTE UE_SECTIONFLAGS = 45; - -const long UE_VANOTFOUND = -2; - -const BYTE UE_CH_BREAKPOINT = 1; -const BYTE UE_CH_SINGLESTEP = 2; -const BYTE UE_CH_ACCESSVIOLATION = 3; -const BYTE UE_CH_ILLEGALINSTRUCTION = 4; -const BYTE UE_CH_NONCONTINUABLEEXCEPTION = 5; -const BYTE UE_CH_ARRAYBOUNDSEXCEPTION = 6; -const BYTE UE_CH_FLOATDENORMALOPERAND = 7; -const BYTE UE_CH_FLOATDEVIDEBYZERO = 8; -const BYTE UE_CH_INTEGERDEVIDEBYZERO = 9; -const BYTE UE_CH_INTEGEROVERFLOW = 10; -const BYTE UE_CH_PRIVILEGEDINSTRUCTION = 11; -const BYTE UE_CH_PAGEGUARD = 12; -const BYTE UE_CH_EVERYTHINGELSE = 13; -const BYTE UE_CH_CREATETHREAD = 14; -const BYTE UE_CH_EXITTHREAD = 15; -const BYTE UE_CH_CREATEPROCESS = 16; -const BYTE UE_CH_EXITPROCESS = 17; -const BYTE UE_CH_LOADDLL = 18; -const BYTE UE_CH_UNLOADDLL = 19; -const BYTE UE_CH_OUTPUTDEBUGSTRING = 20; -const BYTE UE_CH_AFTEREXCEPTIONPROCESSING = 21; -const BYTE UE_CH_ALLEVENTS = 22; -const BYTE UE_CH_SYSTEMBREAKPOINT = 23; -const BYTE UE_CH_UNHANDLEDEXCEPTION = 24; -const BYTE UE_CH_RIPEVENT = 25; - -const BYTE UE_OPTION_HANDLER_RETURN_HANDLECOUNT = 1; -const BYTE UE_OPTION_HANDLER_RETURN_ACCESS = 2; -const BYTE UE_OPTION_HANDLER_RETURN_FLAGS = 3; -const BYTE UE_OPTION_HANDLER_RETURN_TYPENAME = 4; - -const BYTE UE_BREAKPOINT_INT3 = 1; -const BYTE UE_BREAKPOINT_LONG_INT3 = 2; -const BYTE UE_BREAKPOINT_UD2 = 3; - -const BYTE UE_BPXREMOVED = 0; -const BYTE UE_BPXACTIVE = 1; -const BYTE UE_BPXINACTIVE = 2; - -const BYTE UE_BREAKPOINT = 0; -const BYTE UE_SINGLESHOOT = 1; -const BYTE UE_HARDWARE = 2; -const BYTE UE_MEMORY = 3; -const BYTE UE_MEMORY_READ = 4; -const BYTE UE_MEMORY_WRITE = 5; -const BYTE UE_MEMORY_EXECUTE = 6; -const DWORD UE_BREAKPOINT_TYPE_INT3 = 0x10000000; -const DWORD UE_BREAKPOINT_TYPE_LONG_INT3 = 0x20000000; -const DWORD UE_BREAKPOINT_TYPE_UD2 = 0x30000000; - -const BYTE UE_HARDWARE_EXECUTE = 4; -const BYTE UE_HARDWARE_WRITE = 5; -const BYTE UE_HARDWARE_READWRITE = 6; - -const BYTE UE_HARDWARE_SIZE_1 = 7; -const BYTE UE_HARDWARE_SIZE_2 = 8; -const BYTE UE_HARDWARE_SIZE_4 = 9; -const BYTE UE_HARDWARE_SIZE_8 = 10; - -const BYTE UE_ON_LIB_LOAD = 1; -const BYTE UE_ON_LIB_UNLOAD = 2; -const BYTE UE_ON_LIB_ALL = 3; - -const BYTE UE_APISTART = 0; -const BYTE UE_APIEND = 1; - -const BYTE UE_PLATFORM_x86 = 1; -const BYTE UE_PLATFORM_x64 = 2; -const BYTE UE_PLATFORM_ALL = 3; - -const BYTE UE_FUNCTION_STDCALL = 1; -const BYTE UE_FUNCTION_CCALL = 2; -const BYTE UE_FUNCTION_FASTCALL = 3; -const BYTE UE_FUNCTION_STDCALL_RET = 4; -const BYTE UE_FUNCTION_CCALL_RET = 5; -const BYTE UE_FUNCTION_FASTCALL_RET = 6; -const BYTE UE_FUNCTION_STDCALL_CALL = 7; -const BYTE UE_FUNCTION_CCALL_CALL = 8; -const BYTE UE_FUNCTION_FASTCALL_CALL = 9; -const BYTE UE_PARAMETER_BYTE = 0; -const BYTE UE_PARAMETER_WORD = 1; -const BYTE UE_PARAMETER_DWORD = 2; -const BYTE UE_PARAMETER_QWORD = 3; -const BYTE UE_PARAMETER_PTR_BYTE = 4; -const BYTE UE_PARAMETER_PTR_WORD = 5; -const BYTE UE_PARAMETER_PTR_DWORD = 6; -const BYTE UE_PARAMETER_PTR_QWORD = 7; -const BYTE UE_PARAMETER_STRING = 8; -const BYTE UE_PARAMETER_UNICODE = 9; - -const BYTE UE_EAX = 1; -const BYTE UE_EBX = 2; -const BYTE UE_ECX = 3; -const BYTE UE_EDX = 4; -const BYTE UE_EDI = 5; -const BYTE UE_ESI = 6; -const BYTE UE_EBP = 7; -const BYTE UE_ESP = 8; -const BYTE UE_EIP = 9; -const BYTE UE_EFLAGS = 10; -const BYTE UE_DR0 = 11; -const BYTE UE_DR1 = 12; -const BYTE UE_DR2 = 13; -const BYTE UE_DR3 = 14; -const BYTE UE_DR6 = 15; -const BYTE UE_DR7 = 16; -const BYTE UE_RAX = 17; -const BYTE UE_RBX = 18; -const BYTE UE_RCX = 19; -const BYTE UE_RDX = 20; -const BYTE UE_RDI = 21; -const BYTE UE_RSI = 22; -const BYTE UE_RBP = 23; -const BYTE UE_RSP = 24; -const BYTE UE_RIP = 25; -const BYTE UE_RFLAGS = 26; -const BYTE UE_R8 = 27; -const BYTE UE_R9 = 28; -const BYTE UE_R10 = 29; -const BYTE UE_R11 = 30; -const BYTE UE_R12 = 31; -const BYTE UE_R13 = 32; -const BYTE UE_R14 = 33; -const BYTE UE_R15 = 34; -const BYTE UE_CIP = 35; -const BYTE UE_CSP = 36; -#ifdef _WIN64 -const BYTE UE_CFLAGS = UE_RFLAGS; -#else -const BYTE UE_CFLAGS = UE_EFLAGS; -#endif -const BYTE UE_SEG_GS = 37; -const BYTE UE_SEG_FS = 38; -const BYTE UE_SEG_ES = 39; -const BYTE UE_SEG_DS = 40; -const BYTE UE_SEG_CS = 41; -const BYTE UE_SEG_SS = 42; - -typedef struct -{ - DWORD PE32Offset; - DWORD ImageBase; - DWORD OriginalEntryPoint; - DWORD BaseOfCode; - DWORD BaseOfData; - DWORD NtSizeOfImage; - DWORD NtSizeOfHeaders; - WORD SizeOfOptionalHeaders; - DWORD FileAlignment; - DWORD SectionAligment; - DWORD ImportTableAddress; - DWORD ImportTableSize; - DWORD ResourceTableAddress; - DWORD ResourceTableSize; - DWORD ExportTableAddress; - DWORD ExportTableSize; - DWORD TLSTableAddress; - DWORD TLSTableSize; - DWORD RelocationTableAddress; - DWORD RelocationTableSize; - DWORD TimeDateStamp; - WORD SectionNumber; - DWORD CheckSum; - WORD SubSystem; - WORD Characteristics; - DWORD NumberOfRvaAndSizes; -} PE32Struct, *PPE32Struct; - -typedef struct -{ - DWORD PE64Offset; - DWORD64 ImageBase; - DWORD OriginalEntryPoint; - DWORD BaseOfCode; - DWORD BaseOfData; - DWORD NtSizeOfImage; - DWORD NtSizeOfHeaders; - WORD SizeOfOptionalHeaders; - DWORD FileAlignment; - DWORD SectionAligment; - DWORD ImportTableAddress; - DWORD ImportTableSize; - DWORD ResourceTableAddress; - DWORD ResourceTableSize; - DWORD ExportTableAddress; - DWORD ExportTableSize; - DWORD TLSTableAddress; - DWORD TLSTableSize; - DWORD RelocationTableAddress; - DWORD RelocationTableSize; - DWORD TimeDateStamp; - WORD SectionNumber; - DWORD CheckSum; - WORD SubSystem; - WORD Characteristics; - DWORD NumberOfRvaAndSizes; -} PE64Struct, *PPE64Struct; - -#if defined(_WIN64) -typedef PE64Struct PEStruct; -#else -typedef PE32Struct PEStruct; -#endif - -typedef struct -{ - bool NewDll; - int NumberOfImports; - ULONG_PTR ImageBase; - ULONG_PTR BaseImportThunk; - ULONG_PTR ImportThunk; - char* APIName; - char* DLLName; -} ImportEnumData, *PImportEnumData; - -typedef struct -{ - HANDLE hThread; - DWORD dwThreadId; - void* ThreadStartAddress; - void* ThreadLocalBase; -} THREAD_ITEM_DATA, *PTHREAD_ITEM_DATA; - -typedef struct -{ - HANDLE hFile; - void* BaseOfDll; - HANDLE hFileMapping; - void* hFileMappingView; - char szLibraryPath[MAX_PATH]; - char szLibraryName[MAX_PATH]; -} LIBRARY_ITEM_DATA, *PLIBRARY_ITEM_DATA; - -typedef struct -{ - HANDLE hFile; - void* BaseOfDll; - HANDLE hFileMapping; - void* hFileMappingView; - wchar_t szLibraryPath[MAX_PATH]; - wchar_t szLibraryName[MAX_PATH]; -} LIBRARY_ITEM_DATAW, *PLIBRARY_ITEM_DATAW; - -typedef struct -{ - HANDLE hProcess; - DWORD dwProcessId; - HANDLE hThread; - DWORD dwThreadId; - HANDLE hFile; - void* BaseOfImage; - void* ThreadStartAddress; - void* ThreadLocalBase; -} PROCESS_ITEM_DATA, *PPROCESS_ITEM_DATA; - -typedef struct -{ - ULONG ProcessId; - HANDLE hHandle; -} HandlerArray, *PHandlerArray; - -typedef struct -{ - char PluginName[64]; - DWORD PluginMajorVersion; - DWORD PluginMinorVersion; - HMODULE PluginBaseAddress; - void* TitanDebuggingCallBack; - void* TitanRegisterPlugin; - void* TitanReleasePlugin; - void* TitanResetPlugin; - bool PluginDisabled; -} PluginInformation, *PPluginInformation; - -const size_t TEE_MAXIMUM_HOOK_SIZE = 14; -const size_t TEE_MAXIMUM_HOOK_RELOCS = 7; -#if defined(_WIN64) -const size_t TEE_MAXIMUM_HOOK_INSERT_SIZE = 14; -#else -const size_t TEE_MAXIMUM_HOOK_INSERT_SIZE = 5; -#endif - -typedef struct HOOK_ENTRY -{ - bool IATHook; - BYTE HookType; - DWORD HookSize; - void* HookAddress; - void* RedirectionAddress; - BYTE HookBytes[TEE_MAXIMUM_HOOK_SIZE]; - BYTE OriginalBytes[TEE_MAXIMUM_HOOK_SIZE]; - void* IATHookModuleBase; - DWORD IATHookNameHash; - bool HookIsEnabled; - bool HookIsRemote; - void* PatchedEntry; - DWORD RelocationInfo[TEE_MAXIMUM_HOOK_RELOCS]; - int RelocationCount; -} HOOK_ENTRY, *PHOOK_ENTRY; - -const BYTE UE_DEPTH_SURFACE = 0; -const BYTE UE_DEPTH_DEEP = 1; - -const BYTE UE_UNPACKER_CONDITION_SEARCH_FROM_EP = 1; - -const BYTE UE_UNPACKER_CONDITION_LOADLIBRARY = 1; -const BYTE UE_UNPACKER_CONDITION_GETPROCADDRESS = 2; -const BYTE UE_UNPACKER_CONDITION_ENTRYPOINTBREAK = 3; -const BYTE UE_UNPACKER_CONDITION_RELOCSNAPSHOT1 = 4; -const BYTE UE_UNPACKER_CONDITION_RELOCSNAPSHOT2 = 5; - -const BYTE UE_FIELD_OK = 0; -const BYTE UE_FIELD_BROKEN_NON_FIXABLE = 1; -const BYTE UE_FIELD_BROKEN_NON_CRITICAL = 2; -const BYTE UE_FIELD_BROKEN_FIXABLE_FOR_STATIC_USE = 3; -const BYTE UE_FIELD_BROKEN_BUT_CAN_BE_EMULATED = 4; -const BYTE UE_FIELD_FIXABLE_NON_CRITICAL = 5; -const BYTE UE_FIELD_FIXABLE_CRITICAL = 6; -const BYTE UE_FIELD_NOT_PRESET = 7; -const BYTE UE_FIELD_NOT_PRESET_WARNING = 8; - -const BYTE UE_RESULT_FILE_OK = 10; -const BYTE UE_RESULT_FILE_INVALID_BUT_FIXABLE = 11; -const BYTE UE_RESULT_FILE_INVALID_AND_NON_FIXABLE = 12; -const BYTE UE_RESULT_FILE_INVALID_FORMAT = 13; - -typedef struct -{ - BYTE OveralEvaluation; - bool EvaluationTerminatedByException; - bool FileIs64Bit; - bool FileIsDLL; - bool FileIsConsole; - bool MissingDependencies; - bool MissingDeclaredAPIs; - BYTE SignatureMZ; - BYTE SignaturePE; - BYTE EntryPoint; - BYTE ImageBase; - BYTE SizeOfImage; - BYTE FileAlignment; - BYTE SectionAlignment; - BYTE ExportTable; - BYTE RelocationTable; - BYTE ImportTable; - BYTE ImportTableSection; - BYTE ImportTableData; - BYTE IATTable; - BYTE TLSTable; - BYTE LoadConfigTable; - BYTE BoundImportTable; - BYTE COMHeaderTable; - BYTE ResourceTable; - BYTE ResourceData; - BYTE SectionTable; -} FILE_STATUS_INFO, *PFILE_STATUS_INFO; - -typedef struct -{ - BYTE OveralEvaluation; - bool FixingTerminatedByException; - bool FileFixPerformed; - bool StrippedRelocation; - bool DontFixRelocations; - DWORD OriginalRelocationTableAddress; - DWORD OriginalRelocationTableSize; - bool StrippedExports; - bool DontFixExports; - DWORD OriginalExportTableAddress; - DWORD OriginalExportTableSize; - bool StrippedResources; - bool DontFixResources; - DWORD OriginalResourceTableAddress; - DWORD OriginalResourceTableSize; - bool StrippedTLS; - bool DontFixTLS; - DWORD OriginalTLSTableAddress; - DWORD OriginalTLSTableSize; - bool StrippedLoadConfig; - bool DontFixLoadConfig; - DWORD OriginalLoadConfigTableAddress; - DWORD OriginalLoadConfigTableSize; - bool StrippedBoundImports; - bool DontFixBoundImports; - DWORD OriginalBoundImportTableAddress; - DWORD OriginalBoundImportTableSize; - bool StrippedIAT; - bool DontFixIAT; - DWORD OriginalImportAddressTableAddress; - DWORD OriginalImportAddressTableSize; - bool StrippedCOM; - bool DontFixCOM; - DWORD OriginalCOMTableAddress; - DWORD OriginalCOMTableSize; -} FILE_FIX_INFO, *PFILE_FIX_INFO; - -#ifdef __cplusplus -extern "C" { -#endif /*__cplusplus*/ - -// Global.Function.Declaration: -// TitanEngine.Dumper.functions: -__declspec(dllimport) bool TITCALL DumpProcess(HANDLE hProcess, LPVOID ImageBase, char* szDumpFileName, ULONG_PTR EntryPoint); -__declspec(dllimport) bool TITCALL DumpProcessW(HANDLE hProcess, LPVOID ImageBase, wchar_t* szDumpFileName, ULONG_PTR EntryPoint); -__declspec(dllimport) bool TITCALL DumpProcessEx(DWORD ProcessId, LPVOID ImageBase, char* szDumpFileName, ULONG_PTR EntryPoint); -__declspec(dllimport) bool TITCALL DumpProcessExW(DWORD ProcessId, LPVOID ImageBase, wchar_t* szDumpFileName, ULONG_PTR EntryPoint); -__declspec(dllimport) bool TITCALL DumpMemory(HANDLE hProcess, LPVOID MemoryStart, ULONG_PTR MemorySize, char* szDumpFileName); -__declspec(dllimport) bool TITCALL DumpMemoryW(HANDLE hProcess, LPVOID MemoryStart, ULONG_PTR MemorySize, wchar_t* szDumpFileName); -__declspec(dllimport) bool TITCALL DumpMemoryEx(DWORD ProcessId, LPVOID MemoryStart, ULONG_PTR MemorySize, char* szDumpFileName); -__declspec(dllimport) bool TITCALL DumpMemoryExW(DWORD ProcessId, LPVOID MemoryStart, ULONG_PTR MemorySize, wchar_t* szDumpFileName); -__declspec(dllimport) bool TITCALL DumpRegions(HANDLE hProcess, char* szDumpFolder, bool DumpAboveImageBaseOnly); -__declspec(dllimport) bool TITCALL DumpRegionsW(HANDLE hProcess, wchar_t* szDumpFolder, bool DumpAboveImageBaseOnly); -__declspec(dllimport) bool TITCALL DumpRegionsEx(DWORD ProcessId, char* szDumpFolder, bool DumpAboveImageBaseOnly); -__declspec(dllimport) bool TITCALL DumpRegionsExW(DWORD ProcessId, wchar_t* szDumpFolder, bool DumpAboveImageBaseOnly); -__declspec(dllimport) bool TITCALL DumpModule(HANDLE hProcess, LPVOID ModuleBase, char* szDumpFileName); -__declspec(dllimport) bool TITCALL DumpModuleW(HANDLE hProcess, LPVOID ModuleBase, wchar_t* szDumpFileName); -__declspec(dllimport) bool TITCALL DumpModuleEx(DWORD ProcessId, LPVOID ModuleBase, char* szDumpFileName); -__declspec(dllimport) bool TITCALL DumpModuleExW(DWORD ProcessId, LPVOID ModuleBase, wchar_t* szDumpFileName); -__declspec(dllimport) bool TITCALL PastePEHeader(HANDLE hProcess, LPVOID ImageBase, char* szDebuggedFileName); -__declspec(dllimport) bool TITCALL PastePEHeaderW(HANDLE hProcess, LPVOID ImageBase, wchar_t* szDebuggedFileName); -__declspec(dllimport) bool TITCALL ExtractSection(char* szFileName, char* szDumpFileName, DWORD SectionNumber); -__declspec(dllimport) bool TITCALL ExtractSectionW(wchar_t* szFileName, wchar_t* szDumpFileName, DWORD SectionNumber); -__declspec(dllimport) bool TITCALL ResortFileSections(char* szFileName); -__declspec(dllimport) bool TITCALL ResortFileSectionsW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL FindOverlay(char* szFileName, LPDWORD OverlayStart, LPDWORD OverlaySize); -__declspec(dllimport) bool TITCALL FindOverlayW(wchar_t* szFileName, LPDWORD OverlayStart, LPDWORD OverlaySize); -__declspec(dllimport) bool TITCALL ExtractOverlay(char* szFileName, char* szExtractedFileName); -__declspec(dllimport) bool TITCALL ExtractOverlayW(wchar_t* szFileName, wchar_t* szExtractedFileName); -__declspec(dllimport) bool TITCALL AddOverlay(char* szFileName, char* szOverlayFileName); -__declspec(dllimport) bool TITCALL AddOverlayW(wchar_t* szFileName, wchar_t* szOverlayFileName); -__declspec(dllimport) bool TITCALL CopyOverlay(char* szInFileName, char* szOutFileName); -__declspec(dllimport) bool TITCALL CopyOverlayW(wchar_t* szInFileName, wchar_t* szOutFileName); -__declspec(dllimport) bool TITCALL RemoveOverlay(char* szFileName); -__declspec(dllimport) bool TITCALL RemoveOverlayW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL MakeAllSectionsRWE(char* szFileName); -__declspec(dllimport) bool TITCALL MakeAllSectionsRWEW(wchar_t* szFileName); -__declspec(dllimport) long TITCALL AddNewSectionEx(char* szFileName, char* szSectionName, DWORD SectionSize, DWORD SectionAttributes, LPVOID SectionContent, DWORD ContentSize); -__declspec(dllimport) long TITCALL AddNewSectionExW(wchar_t* szFileName, char* szSectionName, DWORD SectionSize, DWORD SectionAttributes, LPVOID SectionContent, DWORD ContentSize); -__declspec(dllimport) long TITCALL AddNewSection(char* szFileName, char* szSectionName, DWORD SectionSize); -__declspec(dllimport) long TITCALL AddNewSectionW(wchar_t* szFileName, char* szSectionName, DWORD SectionSize); -__declspec(dllimport) bool TITCALL ResizeLastSection(char* szFileName, DWORD NumberOfExpandBytes, bool AlignResizeData); -__declspec(dllimport) bool TITCALL ResizeLastSectionW(wchar_t* szFileName, DWORD NumberOfExpandBytes, bool AlignResizeData); -__declspec(dllimport) void TITCALL SetSharedOverlay(char* szFileName); -__declspec(dllimport) void TITCALL SetSharedOverlayW(wchar_t* szFileName); -__declspec(dllimport) char* TITCALL GetSharedOverlay(); -__declspec(dllimport) wchar_t* TITCALL GetSharedOverlayW(); -__declspec(dllimport) bool TITCALL DeleteLastSection(char* szFileName); -__declspec(dllimport) bool TITCALL DeleteLastSectionW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL DeleteLastSectionEx(char* szFileName, DWORD NumberOfSections); -__declspec(dllimport) bool TITCALL DeleteLastSectionExW(wchar_t* szFileName, DWORD NumberOfSections); -__declspec(dllimport) long long TITCALL GetPE32DataFromMappedFile(ULONG_PTR FileMapVA, DWORD WhichSection, DWORD WhichData); -__declspec(dllimport) long long TITCALL GetPE32Data(char* szFileName, DWORD WhichSection, DWORD WhichData); -__declspec(dllimport) long long TITCALL GetPE32DataW(wchar_t* szFileName, DWORD WhichSection, DWORD WhichData); -__declspec(dllimport) bool TITCALL GetPE32DataFromMappedFileEx(ULONG_PTR FileMapVA, LPVOID DataStorage); -__declspec(dllimport) bool TITCALL GetPE32DataEx(char* szFileName, LPVOID DataStorage); -__declspec(dllimport) bool TITCALL GetPE32DataExW(wchar_t* szFileName, LPVOID DataStorage); -__declspec(dllimport) bool TITCALL SetPE32DataForMappedFile(ULONG_PTR FileMapVA, DWORD WhichSection, DWORD WhichData, ULONG_PTR NewDataValue); -__declspec(dllimport) bool TITCALL SetPE32Data(char* szFileName, DWORD WhichSection, DWORD WhichData, ULONG_PTR NewDataValue); -__declspec(dllimport) bool TITCALL SetPE32DataW(wchar_t* szFileName, DWORD WhichSection, DWORD WhichData, ULONG_PTR NewDataValue); -__declspec(dllimport) bool TITCALL SetPE32DataForMappedFileEx(ULONG_PTR FileMapVA, LPVOID DataStorage); -__declspec(dllimport) bool TITCALL SetPE32DataEx(char* szFileName, LPVOID DataStorage); -__declspec(dllimport) bool TITCALL SetPE32DataExW(wchar_t* szFileName, LPVOID DataStorage); -__declspec(dllimport) long TITCALL GetPE32SectionNumberFromVA(ULONG_PTR FileMapVA, ULONG_PTR AddressToConvert); -__declspec(dllimport) long long TITCALL ConvertVAtoFileOffset(ULONG_PTR FileMapVA, ULONG_PTR AddressToConvert, bool ReturnType); -__declspec(dllimport) long long TITCALL ConvertVAtoFileOffsetEx(ULONG_PTR FileMapVA, DWORD FileSize, ULONG_PTR ImageBase, ULONG_PTR AddressToConvert, bool AddressIsRVA, bool ReturnType); -__declspec(dllimport) long long TITCALL ConvertFileOffsetToVA(ULONG_PTR FileMapVA, ULONG_PTR AddressToConvert, bool ReturnType); -__declspec(dllimport) long long TITCALL ConvertFileOffsetToVAEx(ULONG_PTR FileMapVA, DWORD FileSize, ULONG_PTR ImageBase, ULONG_PTR AddressToConvert, bool ReturnType); -__declspec(dllimport) bool TITCALL MemoryReadSafe(HANDLE hProcess, LPVOID lpBaseAddress, LPVOID lpBuffer, SIZE_T nSize, SIZE_T * lpNumberOfBytesRead); -__declspec(dllimport) bool TITCALL MemoryWriteSafe(HANDLE hProcess, LPVOID lpBaseAddress, LPCVOID lpBuffer, SIZE_T nSize, SIZE_T * lpNumberOfBytesWritten); -// TitanEngine.Realigner.functions: -__declspec(dllimport) bool TITCALL FixHeaderCheckSum(char* szFileName); -__declspec(dllimport) bool TITCALL FixHeaderCheckSumW(wchar_t* szFileName); -__declspec(dllimport) long TITCALL RealignPE(ULONG_PTR FileMapVA, DWORD FileSize, DWORD RealingMode); -__declspec(dllimport) long TITCALL RealignPEEx(char* szFileName, DWORD RealingFileSize, DWORD ForcedFileAlignment); -__declspec(dllimport) long TITCALL RealignPEExW(wchar_t* szFileName, DWORD RealingFileSize, DWORD ForcedFileAlignment); -__declspec(dllimport) bool TITCALL WipeSection(char* szFileName, int WipeSectionNumber, bool RemovePhysically); -__declspec(dllimport) bool TITCALL WipeSectionW(wchar_t* szFileName, int WipeSectionNumber, bool RemovePhysically); -__declspec(dllimport) bool TITCALL IsPE32FileValidEx(char* szFileName, DWORD CheckDepth, LPVOID FileStatusInfo); -__declspec(dllimport) bool TITCALL IsPE32FileValidExW(wchar_t* szFileName, DWORD CheckDepth, LPVOID FileStatusInfo); -__declspec(dllimport) bool TITCALL FixBrokenPE32FileEx(char* szFileName, LPVOID FileStatusInfo, LPVOID FileFixInfo); -__declspec(dllimport) bool TITCALL FixBrokenPE32FileExW(wchar_t* szFileName, LPVOID FileStatusInfo, LPVOID FileFixInfo); -__declspec(dllimport) bool TITCALL IsFileDLL(char* szFileName, ULONG_PTR FileMapVA); -__declspec(dllimport) bool TITCALL IsFileDLLW(wchar_t* szFileName, ULONG_PTR FileMapVA); -// TitanEngine.Hider.functions: -__declspec(dllimport) void* TITCALL GetPEBLocation(HANDLE hProcess); -__declspec(dllimport) void* TITCALL GetPEBLocation64(HANDLE hProcess); -__declspec(dllimport) void* TITCALL GetTEBLocation(HANDLE hThread); -__declspec(dllimport) void* TITCALL GetTEBLocation64(HANDLE hThread); -__declspec(dllimport) bool TITCALL HideDebugger(HANDLE hProcess, DWORD PatchAPILevel); -__declspec(dllimport) bool TITCALL UnHideDebugger(HANDLE hProcess, DWORD PatchAPILevel); -// TitanEngine.Relocater.functions: -__declspec(dllimport) void TITCALL RelocaterCleanup(); -__declspec(dllimport) void TITCALL RelocaterInit(DWORD MemorySize, ULONG_PTR OldImageBase, ULONG_PTR NewImageBase); -__declspec(dllimport) void TITCALL RelocaterAddNewRelocation(HANDLE hProcess, ULONG_PTR RelocateAddress, DWORD RelocateState); -__declspec(dllimport) long TITCALL RelocaterEstimatedSize(); -__declspec(dllimport) bool TITCALL RelocaterExportRelocation(ULONG_PTR StorePlace, DWORD StorePlaceRVA, ULONG_PTR FileMapVA); -__declspec(dllimport) bool TITCALL RelocaterExportRelocationEx(char* szFileName, char* szSectionName); -__declspec(dllimport) bool TITCALL RelocaterExportRelocationExW(wchar_t* szFileName, char* szSectionName); -__declspec(dllimport) bool TITCALL RelocaterGrabRelocationTable(HANDLE hProcess, ULONG_PTR MemoryStart, DWORD MemorySize); -__declspec(dllimport) bool TITCALL RelocaterGrabRelocationTableEx(HANDLE hProcess, ULONG_PTR MemoryStart, ULONG_PTR MemorySize, DWORD NtSizeOfImage); -__declspec(dllimport) bool TITCALL RelocaterMakeSnapshot(HANDLE hProcess, char* szSaveFileName, LPVOID MemoryStart, ULONG_PTR MemorySize); -__declspec(dllimport) bool TITCALL RelocaterMakeSnapshotW(HANDLE hProcess, wchar_t* szSaveFileName, LPVOID MemoryStart, ULONG_PTR MemorySize); -__declspec(dllimport) bool TITCALL RelocaterCompareTwoSnapshots(HANDLE hProcess, ULONG_PTR LoadedImageBase, ULONG_PTR NtSizeOfImage, char* szDumpFile1, char* szDumpFile2, ULONG_PTR MemStart); -__declspec(dllimport) bool TITCALL RelocaterCompareTwoSnapshotsW(HANDLE hProcess, ULONG_PTR LoadedImageBase, ULONG_PTR NtSizeOfImage, wchar_t* szDumpFile1, wchar_t* szDumpFile2, ULONG_PTR MemStart); -__declspec(dllimport) bool TITCALL RelocaterChangeFileBase(char* szFileName, ULONG_PTR NewImageBase); -__declspec(dllimport) bool TITCALL RelocaterChangeFileBaseW(wchar_t* szFileName, ULONG_PTR NewImageBase); -__declspec(dllimport) bool TITCALL RelocaterRelocateMemoryBlock(ULONG_PTR FileMapVA, ULONG_PTR MemoryLocation, void* RelocateMemory, DWORD RelocateMemorySize, ULONG_PTR CurrentLoadedBase, ULONG_PTR RelocateBase); -__declspec(dllimport) bool TITCALL RelocaterWipeRelocationTable(char* szFileName); -__declspec(dllimport) bool TITCALL RelocaterWipeRelocationTableW(wchar_t* szFileName); -// TitanEngine.Resourcer.functions: -__declspec(dllimport) long long TITCALL ResourcerLoadFileForResourceUse(char* szFileName); -__declspec(dllimport) long long TITCALL ResourcerLoadFileForResourceUseW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL ResourcerFreeLoadedFile(LPVOID LoadedFileBase); -__declspec(dllimport) bool TITCALL ResourcerExtractResourceFromFileEx(ULONG_PTR FileMapVA, char* szResourceType, char* szResourceName, char* szExtractedFileName); -__declspec(dllimport) bool TITCALL ResourcerExtractResourceFromFile(char* szFileName, char* szResourceType, char* szResourceName, char* szExtractedFileName); -__declspec(dllimport) bool TITCALL ResourcerExtractResourceFromFileW(wchar_t* szFileName, char* szResourceType, char* szResourceName, char* szExtractedFileName); -__declspec(dllimport) bool TITCALL ResourcerFindResource(char* szFileName, char* szResourceType, DWORD ResourceType, char* szResourceName, DWORD ResourceName, DWORD ResourceLanguage, PULONG_PTR pResourceData, LPDWORD pResourceSize); -__declspec(dllimport) bool TITCALL ResourcerFindResourceW(wchar_t* szFileName, wchar_t* szResourceType, DWORD ResourceType, wchar_t* szResourceName, DWORD ResourceName, DWORD ResourceLanguage, PULONG_PTR pResourceData, LPDWORD pResourceSize); -__declspec(dllimport) bool TITCALL ResourcerFindResourceEx(ULONG_PTR FileMapVA, DWORD FileSize, wchar_t* szResourceType, DWORD ResourceType, wchar_t* szResourceName, DWORD ResourceName, DWORD ResourceLanguage, PULONG_PTR pResourceData, LPDWORD pResourceSize); -__declspec(dllimport) void TITCALL ResourcerEnumerateResource(char* szFileName, void* CallBack); -__declspec(dllimport) void TITCALL ResourcerEnumerateResourceW(wchar_t* szFileName, void* CallBack); -__declspec(dllimport) void TITCALL ResourcerEnumerateResourceEx(ULONG_PTR FileMapVA, DWORD FileSize, void* CallBack); -// TitanEngine.Threader.functions: -__declspec(dllimport) bool TITCALL ThreaderImportRunningThreadData(DWORD ProcessId); -__declspec(dllimport) void* TITCALL ThreaderGetThreadInfo(HANDLE hThread, DWORD ThreadId); -__declspec(dllimport) void TITCALL ThreaderEnumThreadInfo(void* EnumCallBack); -__declspec(dllimport) bool TITCALL ThreaderPauseThread(HANDLE hThread); -__declspec(dllimport) bool TITCALL ThreaderResumeThread(HANDLE hThread); -__declspec(dllimport) bool TITCALL ThreaderTerminateThread(HANDLE hThread, DWORD ThreadExitCode); -__declspec(dllimport) bool TITCALL ThreaderPauseAllThreads(bool LeaveMainRunning); -__declspec(dllimport) bool TITCALL ThreaderResumeAllThreads(bool LeaveMainPaused); -__declspec(dllimport) bool TITCALL ThreaderPauseProcess(); -__declspec(dllimport) bool TITCALL ThreaderResumeProcess(); -__declspec(dllimport) long long TITCALL ThreaderCreateRemoteThread(ULONG_PTR ThreadStartAddress, bool AutoCloseTheHandle, LPVOID ThreadPassParameter, LPDWORD ThreadId); -__declspec(dllimport) bool TITCALL ThreaderInjectAndExecuteCode(LPVOID InjectCode, DWORD StartDelta, DWORD InjectSize); -__declspec(dllimport) long long TITCALL ThreaderCreateRemoteThreadEx(HANDLE hProcess, ULONG_PTR ThreadStartAddress, bool AutoCloseTheHandle, LPVOID ThreadPassParameter, LPDWORD ThreadId); -__declspec(dllimport) bool TITCALL ThreaderInjectAndExecuteCodeEx(HANDLE hProcess, LPVOID InjectCode, DWORD StartDelta, DWORD InjectSize); -__declspec(dllimport) void TITCALL ThreaderSetCallBackForNextExitThreadEvent(LPVOID exitThreadCallBack); -__declspec(dllimport) bool TITCALL ThreaderIsThreadStillRunning(HANDLE hThread); -__declspec(dllimport) bool TITCALL ThreaderIsThreadActive(HANDLE hThread); -__declspec(dllimport) bool TITCALL ThreaderIsAnyThreadActive(); -__declspec(dllimport) bool TITCALL ThreaderExecuteOnlyInjectedThreads(); -__declspec(dllimport) long long TITCALL ThreaderGetOpenHandleForThread(DWORD ThreadId); -__declspec(dllimport) bool TITCALL ThreaderIsExceptionInMainThread(); -// TitanEngine.Debugger.functions: -__declspec(dllimport) void* TITCALL StaticDisassembleEx(ULONG_PTR DisassmStart, LPVOID DisassmAddress); -__declspec(dllimport) void* TITCALL StaticDisassemble(LPVOID DisassmAddress); -__declspec(dllimport) void* TITCALL DisassembleEx(HANDLE hProcess, LPVOID DisassmAddress, bool ReturnInstructionType); -__declspec(dllimport) void* TITCALL Disassemble(LPVOID DisassmAddress); -__declspec(dllimport) long TITCALL StaticLengthDisassemble(LPVOID DisassmAddress); -__declspec(dllimport) long TITCALL LengthDisassembleEx(HANDLE hProcess, LPVOID DisassmAddress); -__declspec(dllimport) long TITCALL LengthDisassemble(LPVOID DisassmAddress); -__declspec(dllimport) void* TITCALL InitDebug(char* szFileName, char* szCommandLine, char* szCurrentFolder); -__declspec(dllimport) void* TITCALL InitDebugW(wchar_t* szFileName, wchar_t* szCommandLine, wchar_t* szCurrentFolder); -__declspec(dllimport) void* TITCALL InitDebugEx(char* szFileName, char* szCommandLine, char* szCurrentFolder, LPVOID EntryCallBack); -__declspec(dllimport) void* TITCALL InitDebugExW(wchar_t* szFileName, wchar_t* szCommandLine, wchar_t* szCurrentFolder, LPVOID EntryCallBack); -__declspec(dllimport) void* TITCALL InitDLLDebug(char* szFileName, bool ReserveModuleBase, char* szCommandLine, char* szCurrentFolder, LPVOID EntryCallBack); -__declspec(dllimport) void* TITCALL InitDLLDebugW(wchar_t* szFileName, bool ReserveModuleBase, wchar_t* szCommandLine, wchar_t* szCurrentFolder, LPVOID EntryCallBack); -__declspec(dllimport) bool TITCALL StopDebug(); -__declspec(dllimport) void TITCALL SetBPXOptions(long DefaultBreakPointType); -__declspec(dllimport) bool TITCALL IsBPXEnabled(ULONG_PTR bpxAddress); -__declspec(dllimport) bool TITCALL EnableBPX(ULONG_PTR bpxAddress); -__declspec(dllimport) bool TITCALL DisableBPX(ULONG_PTR bpxAddress); -__declspec(dllimport) bool TITCALL SetBPX(ULONG_PTR bpxAddress, DWORD bpxType, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL DeleteBPX(ULONG_PTR bpxAddress); -__declspec(dllimport) bool TITCALL SafeDeleteBPX(ULONG_PTR bpxAddress); -__declspec(dllimport) bool TITCALL SetAPIBreakPoint(const char* szDLLName, const char* szAPIName, DWORD bpxType, DWORD bpxPlace, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL DeleteAPIBreakPoint(const char* szDLLName, const char* szAPIName, DWORD bpxPlace); -__declspec(dllimport) bool TITCALL SafeDeleteAPIBreakPoint(const char* szDLLName, const char* szAPIName, DWORD bpxPlace); -__declspec(dllimport) bool TITCALL SetMemoryBPX(ULONG_PTR MemoryStart, SIZE_T SizeOfMemory, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL SetMemoryBPXEx(ULONG_PTR MemoryStart, SIZE_T SizeOfMemory, DWORD BreakPointType, bool RestoreOnHit, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL RemoveMemoryBPX(ULONG_PTR MemoryStart, SIZE_T SizeOfMemory); -__declspec(dllimport) bool TITCALL GetContextFPUDataEx(HANDLE hActiveThread, void* FPUSaveArea); -__declspec(dllimport) long long TITCALL GetContextDataEx(HANDLE hActiveThread, DWORD IndexOfRegister); -__declspec(dllimport) long long TITCALL GetContextData(DWORD IndexOfRegister); -__declspec(dllimport) bool TITCALL SetContextFPUDataEx(HANDLE hActiveThread, void* FPUSaveArea); -__declspec(dllimport) bool TITCALL SetContextDataEx(HANDLE hActiveThread, DWORD IndexOfRegister, ULONG_PTR NewRegisterValue); -__declspec(dllimport) bool TITCALL SetContextData(DWORD IndexOfRegister, ULONG_PTR NewRegisterValue); -__declspec(dllimport) void TITCALL ClearExceptionNumber(); -__declspec(dllimport) long TITCALL CurrentExceptionNumber(); -__declspec(dllimport) bool TITCALL MatchPatternEx(HANDLE hProcess, void* MemoryToCheck, int SizeOfMemoryToCheck, void* PatternToMatch, int SizeOfPatternToMatch, PBYTE WildCard); -__declspec(dllimport) bool TITCALL MatchPattern(void* MemoryToCheck, int SizeOfMemoryToCheck, void* PatternToMatch, int SizeOfPatternToMatch, PBYTE WildCard); -__declspec(dllimport) long long TITCALL FindEx(HANDLE hProcess, LPVOID MemoryStart, DWORD MemorySize, LPVOID SearchPattern, DWORD PatternSize, LPBYTE WildCard); -__declspec(dllimport) long long TITCALL Find(LPVOID MemoryStart, DWORD MemorySize, LPVOID SearchPattern, DWORD PatternSize, LPBYTE WildCard); -__declspec(dllimport) bool TITCALL FillEx(HANDLE hProcess, LPVOID MemoryStart, DWORD MemorySize, PBYTE FillByte); -__declspec(dllimport) bool TITCALL Fill(LPVOID MemoryStart, DWORD MemorySize, PBYTE FillByte); -__declspec(dllimport) bool TITCALL PatchEx(HANDLE hProcess, LPVOID MemoryStart, DWORD MemorySize, LPVOID ReplacePattern, DWORD ReplaceSize, bool AppendNOP, bool PrependNOP); -__declspec(dllimport) bool TITCALL Patch(LPVOID MemoryStart, DWORD MemorySize, LPVOID ReplacePattern, DWORD ReplaceSize, bool AppendNOP, bool PrependNOP); -__declspec(dllimport) bool TITCALL ReplaceEx(HANDLE hProcess, LPVOID MemoryStart, DWORD MemorySize, LPVOID SearchPattern, DWORD PatternSize, DWORD NumberOfRepetitions, LPVOID ReplacePattern, DWORD ReplaceSize, PBYTE WildCard); -__declspec(dllimport) bool TITCALL Replace(LPVOID MemoryStart, DWORD MemorySize, LPVOID SearchPattern, DWORD PatternSize, DWORD NumberOfRepetitions, LPVOID ReplacePattern, DWORD ReplaceSize, PBYTE WildCard); -__declspec(dllimport) void* TITCALL GetDebugData(); -__declspec(dllimport) void* TITCALL GetTerminationData(); -__declspec(dllimport) long TITCALL GetExitCode(); -__declspec(dllimport) long long TITCALL GetDebuggedDLLBaseAddress(); -__declspec(dllimport) long long TITCALL GetDebuggedFileBaseAddress(); -__declspec(dllimport) bool TITCALL GetRemoteString(HANDLE hProcess, LPVOID StringAddress, LPVOID StringStorage, int MaximumStringSize); -__declspec(dllimport) long long TITCALL GetFunctionParameter(HANDLE hProcess, DWORD FunctionType, DWORD ParameterNumber, DWORD ParameterType); -__declspec(dllimport) long long TITCALL GetJumpDestinationEx(HANDLE hProcess, ULONG_PTR InstructionAddress, bool JustJumps); -__declspec(dllimport) long long TITCALL GetJumpDestination(HANDLE hProcess, ULONG_PTR InstructionAddress); -__declspec(dllimport) bool TITCALL IsJumpGoingToExecuteEx(HANDLE hProcess, HANDLE hThread, ULONG_PTR InstructionAddress, ULONG_PTR RegFlags); -__declspec(dllimport) bool TITCALL IsJumpGoingToExecute(); -__declspec(dllimport) void TITCALL SetCustomHandler(DWORD ExceptionId, LPVOID CallBack); -__declspec(dllimport) void TITCALL ForceClose(); -__declspec(dllimport) void TITCALL StepInto(LPVOID traceCallBack); -__declspec(dllimport) void TITCALL StepOver(LPVOID traceCallBack); -__declspec(dllimport) void TITCALL StepOut(LPVOID StepOut, bool StepFinal); -__declspec(dllimport) void TITCALL SingleStep(DWORD StepCount, LPVOID StepCallBack); -__declspec(dllimport) bool TITCALL GetUnusedHardwareBreakPointRegister(LPDWORD RegisterIndex); -__declspec(dllimport) bool TITCALL SetHardwareBreakPointEx(HANDLE hActiveThread, ULONG_PTR bpxAddress, DWORD IndexOfRegister, DWORD bpxType, DWORD bpxSize, LPVOID bpxCallBack, LPDWORD IndexOfSelectedRegister); -__declspec(dllimport) bool TITCALL SetHardwareBreakPoint(ULONG_PTR bpxAddress, DWORD IndexOfRegister, DWORD bpxType, DWORD bpxSize, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL DeleteHardwareBreakPoint(DWORD IndexOfRegister); -__declspec(dllimport) bool TITCALL RemoveAllBreakPoints(DWORD RemoveOption); -__declspec(dllimport) void* TITCALL GetProcessInformation(); -__declspec(dllimport) void* TITCALL GetStartupInformation(); -__declspec(dllimport) void TITCALL DebugLoop(); -__declspec(dllimport) void TITCALL SetDebugLoopTimeOut(DWORD TimeOut); -__declspec(dllimport) void TITCALL SetNextDbgContinueStatus(DWORD SetDbgCode); -__declspec(dllimport) bool TITCALL AttachDebugger(DWORD ProcessId, bool KillOnExit, LPVOID DebugInfo, LPVOID CallBack); -__declspec(dllimport) bool TITCALL DetachDebugger(DWORD ProcessId); -__declspec(dllimport) bool TITCALL DetachDebuggerEx(DWORD ProcessId); -__declspec(dllimport) void TITCALL DebugLoopEx(DWORD TimeOut); -__declspec(dllimport) void TITCALL AutoDebugEx(char* szFileName, bool ReserveModuleBase, char* szCommandLine, char* szCurrentFolder, DWORD TimeOut, LPVOID EntryCallBack); -__declspec(dllimport) void TITCALL AutoDebugExW(wchar_t* szFileName, bool ReserveModuleBase, wchar_t* szCommandLine, wchar_t* szCurrentFolder, DWORD TimeOut, LPVOID EntryCallBack); -__declspec(dllimport) bool TITCALL IsFileBeingDebugged(); -__declspec(dllimport) void TITCALL SetErrorModel(bool DisplayErrorMessages); -// TitanEngine.FindOEP.functions: -__declspec(dllimport) void TITCALL FindOEPInit(); -__declspec(dllimport) bool TITCALL FindOEPGenerically(char* szFileName, LPVOID TraceInitCallBack, LPVOID CallBack); -__declspec(dllimport) bool TITCALL FindOEPGenericallyW(wchar_t* szFileName, LPVOID TraceInitCallBack, LPVOID CallBack); -// TitanEngine.Importer.functions: -__declspec(dllimport) void TITCALL ImporterAddNewDll(char* szDLLName, ULONG_PTR FirstThunk); -__declspec(dllimport) void TITCALL ImporterAddNewAPI(char* szAPIName, ULONG_PTR ThunkValue); -__declspec(dllimport) void TITCALL ImporterAddNewOrdinalAPI(ULONG_PTR OrdinalNumber, ULONG_PTR ThunkValue); -__declspec(dllimport) long TITCALL ImporterGetAddedDllCount(); -__declspec(dllimport) long TITCALL ImporterGetAddedAPICount(); -__declspec(dllimport) bool TITCALL ImporterExportIAT(ULONG_PTR StorePlace, ULONG_PTR FileMapVA, HANDLE hFileMap); -__declspec(dllimport) long TITCALL ImporterEstimatedSize(); -__declspec(dllimport) bool TITCALL ImporterExportIATEx(char* szDumpFileName, char* szExportFileName, char* szSectionName); -__declspec(dllimport) bool TITCALL ImporterExportIATExW(wchar_t* szDumpFileName, wchar_t* szExportFileName, wchar_t* szSectionName = L".RL!TEv2"); -__declspec(dllimport) long long TITCALL ImporterFindAPIWriteLocation(char* szAPIName); -__declspec(dllimport) long long TITCALL ImporterFindOrdinalAPIWriteLocation(ULONG_PTR OrdinalNumber); -__declspec(dllimport) long long TITCALL ImporterFindAPIByWriteLocation(ULONG_PTR APIWriteLocation); -__declspec(dllimport) long long TITCALL ImporterFindDLLByWriteLocation(ULONG_PTR APIWriteLocation); -__declspec(dllimport) void* TITCALL ImporterGetDLLName(ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetDLLNameW(ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetAPIName(ULONG_PTR APIAddress); -__declspec(dllimport) long long TITCALL ImporterGetAPIOrdinalNumber(ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetAPINameEx(ULONG_PTR APIAddress, ULONG_PTR DLLBasesList); -__declspec(dllimport) long long TITCALL ImporterGetRemoteAPIAddress(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) long long TITCALL ImporterGetRemoteAPIAddressEx(char* szDLLName, char* szAPIName); -__declspec(dllimport) long long TITCALL ImporterGetLocalAPIAddress(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetDLLNameFromDebugee(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetDLLNameFromDebugeeW(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetAPINameFromDebugee(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) long long TITCALL ImporterGetAPIOrdinalNumberFromDebugee(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) long TITCALL ImporterGetDLLIndexEx(ULONG_PTR APIAddress, ULONG_PTR DLLBasesList); -__declspec(dllimport) long TITCALL ImporterGetDLLIndex(HANDLE hProcess, ULONG_PTR APIAddress, ULONG_PTR DLLBasesList); -__declspec(dllimport) long long TITCALL ImporterGetRemoteDLLBase(HANDLE hProcess, HMODULE LocalModuleBase); -__declspec(dllimport) long long TITCALL ImporterGetRemoteDLLBaseEx(HANDLE hProcess, char* szModuleName); -__declspec(dllimport) void* TITCALL ImporterGetRemoteDLLBaseExW(HANDLE hProcess, wchar_t* szModuleName); -__declspec(dllimport) bool TITCALL ImporterIsForwardedAPI(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetForwardedAPIName(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetForwardedDLLName(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) long TITCALL ImporterGetForwardedDLLIndex(HANDLE hProcess, ULONG_PTR APIAddress, ULONG_PTR DLLBasesList); -__declspec(dllimport) long long TITCALL ImporterGetForwardedAPIOrdinalNumber(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) long long TITCALL ImporterGetNearestAPIAddress(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) void* TITCALL ImporterGetNearestAPIName(HANDLE hProcess, ULONG_PTR APIAddress); -__declspec(dllimport) bool TITCALL ImporterCopyOriginalIAT(char* szOriginalFile, char* szDumpFile); -__declspec(dllimport) bool TITCALL ImporterCopyOriginalIATW(wchar_t* szOriginalFile, wchar_t* szDumpFile); -__declspec(dllimport) bool TITCALL ImporterLoadImportTable(char* szFileName); -__declspec(dllimport) bool TITCALL ImporterLoadImportTableW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL ImporterMoveOriginalIAT(char* szOriginalFile, char* szDumpFile, char* szSectionName); -__declspec(dllimport) bool TITCALL ImporterMoveOriginalIATW(wchar_t* szOriginalFile, wchar_t* szDumpFile, char* szSectionName); -__declspec(dllimport) void TITCALL ImporterAutoSearchIAT(DWORD ProcessId, char* szFileName, ULONG_PTR SearchStart, LPVOID pIATStart, LPVOID pIATSize); -__declspec(dllimport) void TITCALL ImporterAutoSearchIATW(DWORD ProcessIds, wchar_t* szFileName, ULONG_PTR SearchStart, LPVOID pIATStart, LPVOID pIATSize); -__declspec(dllimport) void TITCALL ImporterAutoSearchIATEx(DWORD ProcessId, ULONG_PTR ImageBase, ULONG_PTR SearchStart, LPVOID pIATStart, LPVOID pIATSize); -__declspec(dllimport) void TITCALL ImporterEnumAddedData(LPVOID EnumCallBack); -__declspec(dllimport) long TITCALL ImporterAutoFixIATEx(DWORD ProcessId, char* szDumpedFile, char* szSectionName, bool DumpRunningProcess, bool RealignFile, ULONG_PTR EntryPointAddress, ULONG_PTR ImageBase, ULONG_PTR SearchStart, bool TryAutoFix, bool FixEliminations, LPVOID UnknownPointerFixCallback); -__declspec(dllimport) long TITCALL ImporterAutoFixIATExW(DWORD ProcessId, wchar_t* szDumpedFile, char* szSectionName, bool DumpRunningProcess, bool RealignFile, ULONG_PTR EntryPointAddress, ULONG_PTR ImageBase, ULONG_PTR SearchStart, bool TryAutoFix, bool FixEliminations, LPVOID UnknownPointerFixCallback); -__declspec(dllimport) long TITCALL ImporterAutoFixIAT(DWORD ProcessId, char* szDumpedFile, ULONG_PTR SearchStart); -__declspec(dllimport) long TITCALL ImporterAutoFixIATW(DWORD ProcessId, wchar_t* szDumpedFile, ULONG_PTR SearchStart); -__declspec(dllimport) bool TITCALL ImporterDeleteAPI(DWORD_PTR apiAddr); -// Global.Engine.Hook.functions: -__declspec(dllimport) bool TITCALL HooksSafeTransitionEx(LPVOID HookAddressArray, int NumberOfHooks, bool TransitionStart); -__declspec(dllimport) bool TITCALL HooksSafeTransition(LPVOID HookAddress, bool TransitionStart); -__declspec(dllimport) bool TITCALL HooksIsAddressRedirected(LPVOID HookAddress); -__declspec(dllimport) void* TITCALL HooksGetTrampolineAddress(LPVOID HookAddress); -__declspec(dllimport) void* TITCALL HooksGetHookEntryDetails(LPVOID HookAddress); -__declspec(dllimport) bool TITCALL HooksInsertNewRedirection(LPVOID HookAddress, LPVOID RedirectTo, int HookType); -__declspec(dllimport) bool TITCALL HooksInsertNewIATRedirectionEx(ULONG_PTR FileMapVA, ULONG_PTR LoadedModuleBase, char* szHookFunction, LPVOID RedirectTo); -__declspec(dllimport) bool TITCALL HooksInsertNewIATRedirection(char* szModuleName, char* szHookFunction, LPVOID RedirectTo); -__declspec(dllimport) bool TITCALL HooksRemoveRedirection(LPVOID HookAddress, bool RemoveAll); -__declspec(dllimport) bool TITCALL HooksRemoveRedirectionsForModule(HMODULE ModuleBase); -__declspec(dllimport) bool TITCALL HooksRemoveIATRedirection(char* szModuleName, char* szHookFunction, bool RemoveAll); -__declspec(dllimport) bool TITCALL HooksDisableRedirection(LPVOID HookAddress, bool DisableAll); -__declspec(dllimport) bool TITCALL HooksDisableRedirectionsForModule(HMODULE ModuleBase); -__declspec(dllimport) bool TITCALL HooksDisableIATRedirection(char* szModuleName, char* szHookFunction, bool DisableAll); -__declspec(dllimport) bool TITCALL HooksEnableRedirection(LPVOID HookAddress, bool EnableAll); -__declspec(dllimport) bool TITCALL HooksEnableRedirectionsForModule(HMODULE ModuleBase); -__declspec(dllimport) bool TITCALL HooksEnableIATRedirection(char* szModuleName, char* szHookFunction, bool EnableAll); -__declspec(dllimport) void TITCALL HooksScanModuleMemory(HMODULE ModuleBase, LPVOID CallBack); -__declspec(dllimport) void TITCALL HooksScanEntireProcessMemory(LPVOID CallBack); -__declspec(dllimport) void TITCALL HooksScanEntireProcessMemoryEx(); -// TitanEngine.Tracer.functions: -__declspec(dllimport) void TITCALL TracerInit(); -__declspec(dllimport) long long TITCALL TracerLevel1(HANDLE hProcess, ULONG_PTR AddressToTrace); -__declspec(dllimport) long long TITCALL HashTracerLevel1(HANDLE hProcess, ULONG_PTR AddressToTrace, DWORD InputNumberOfInstructions); -__declspec(dllimport) long TITCALL TracerDetectRedirection(HANDLE hProcess, ULONG_PTR AddressToTrace); -__declspec(dllimport) long long TITCALL TracerFixKnownRedirection(HANDLE hProcess, ULONG_PTR AddressToTrace, DWORD RedirectionId); -__declspec(dllimport) long long TITCALL TracerFixRedirectionViaModule(HMODULE hModuleHandle, HANDLE hProcess, ULONG_PTR AddressToTrace, DWORD IdParameter); -__declspec(dllimport) long long TITCALL TracerDetectRedirectionViaModule(HMODULE hModuleHandle, HANDLE hProcess, ULONG_PTR AddressToTrace, PDWORD ReturnedId); -__declspec(dllimport) long TITCALL TracerFixRedirectionViaImpRecPlugin(HANDLE hProcess, char* szPluginName, ULONG_PTR AddressToTrace); -// TitanEngine.Exporter.functions: -__declspec(dllimport) void TITCALL ExporterCleanup(); -__declspec(dllimport) void TITCALL ExporterSetImageBase(ULONG_PTR ImageBase); -__declspec(dllimport) void TITCALL ExporterInit(DWORD MemorySize, ULONG_PTR ImageBase, DWORD ExportOrdinalBase, char* szExportModuleName); -__declspec(dllimport) bool TITCALL ExporterAddNewExport(char* szExportName, DWORD ExportRelativeAddress); -__declspec(dllimport) bool TITCALL ExporterAddNewOrdinalExport(DWORD OrdinalNumber, DWORD ExportRelativeAddress); -__declspec(dllimport) long TITCALL ExporterGetAddedExportCount(); -__declspec(dllimport) long TITCALL ExporterEstimatedSize(); -__declspec(dllimport) bool TITCALL ExporterBuildExportTable(ULONG_PTR StorePlace, ULONG_PTR FileMapVA); -__declspec(dllimport) bool TITCALL ExporterBuildExportTableEx(char* szExportFileName, char* szSectionName); -__declspec(dllimport) bool TITCALL ExporterBuildExportTableExW(wchar_t* szExportFileName, char* szSectionName); -__declspec(dllimport) bool TITCALL ExporterLoadExportTable(char* szFileName); -__declspec(dllimport) bool TITCALL ExporterLoadExportTableW(wchar_t* szFileName); -// TitanEngine.Librarian.functions: -__declspec(dllimport) bool TITCALL LibrarianSetBreakPoint(char* szLibraryName, DWORD bpxType, bool SingleShoot, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL LibrarianRemoveBreakPoint(char* szLibraryName, DWORD bpxType); -__declspec(dllimport) void* TITCALL LibrarianGetLibraryInfo(char* szLibraryName); -__declspec(dllimport) void* TITCALL LibrarianGetLibraryInfoW(wchar_t* szLibraryName); -__declspec(dllimport) void* TITCALL LibrarianGetLibraryInfoEx(void* BaseOfDll); -__declspec(dllimport) void* TITCALL LibrarianGetLibraryInfoExW(void* BaseOfDll); -__declspec(dllimport) void TITCALL LibrarianEnumLibraryInfo(void* EnumCallBack); -__declspec(dllimport) void TITCALL LibrarianEnumLibraryInfoW(void* EnumCallBack); -// TitanEngine.Process.functions: -__declspec(dllimport) long TITCALL GetActiveProcessId(char* szImageName); -__declspec(dllimport) long TITCALL GetActiveProcessIdW(wchar_t* szImageName); -__declspec(dllimport) void TITCALL EnumProcessesWithLibrary(char* szLibraryName, void* EnumFunction); -// TitanEngine.TLSFixer.functions: -__declspec(dllimport) bool TITCALL TLSBreakOnCallBack(LPVOID ArrayOfCallBacks, DWORD NumberOfCallBacks, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL TLSGrabCallBackData(char* szFileName, LPVOID ArrayOfCallBacks, LPDWORD NumberOfCallBacks); -__declspec(dllimport) bool TITCALL TLSGrabCallBackDataW(wchar_t* szFileName, LPVOID ArrayOfCallBacks, LPDWORD NumberOfCallBacks); -__declspec(dllimport) bool TITCALL TLSBreakOnCallBackEx(char* szFileName, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL TLSBreakOnCallBackExW(wchar_t* szFileName, LPVOID bpxCallBack); -__declspec(dllimport) bool TITCALL TLSRemoveCallback(char* szFileName); -__declspec(dllimport) bool TITCALL TLSRemoveCallbackW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL TLSRemoveTable(char* szFileName); -__declspec(dllimport) bool TITCALL TLSRemoveTableW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL TLSBackupData(char* szFileName); -__declspec(dllimport) bool TITCALL TLSBackupDataW(wchar_t* szFileName); -__declspec(dllimport) bool TITCALL TLSRestoreData(); -__declspec(dllimport) bool TITCALL TLSBuildNewTable(ULONG_PTR FileMapVA, ULONG_PTR StorePlace, ULONG_PTR StorePlaceRVA, LPVOID ArrayOfCallBacks, DWORD NumberOfCallBacks); -__declspec(dllimport) bool TITCALL TLSBuildNewTableEx(char* szFileName, char* szSectionName, LPVOID ArrayOfCallBacks, DWORD NumberOfCallBacks); -__declspec(dllimport) bool TITCALL TLSBuildNewTableExW(wchar_t* szFileName, char* szSectionName, LPVOID ArrayOfCallBacks, DWORD NumberOfCallBacks); -// TitanEngine.TranslateName.functions: -__declspec(dllimport) void* TITCALL TranslateNativeName(char* szNativeName); -__declspec(dllimport) void* TITCALL TranslateNativeNameW(wchar_t* szNativeName); -// TitanEngine.Handler.functions: -__declspec(dllimport) long TITCALL HandlerGetActiveHandleCount(DWORD ProcessId); -__declspec(dllimport) bool TITCALL HandlerIsHandleOpen(DWORD ProcessId, HANDLE hHandle); -__declspec(dllimport) void* TITCALL HandlerGetHandleName(HANDLE hProcess, DWORD ProcessId, HANDLE hHandle, bool TranslateName); -__declspec(dllimport) void* TITCALL HandlerGetHandleNameW(HANDLE hProcess, DWORD ProcessId, HANDLE hHandle, bool TranslateName); -__declspec(dllimport) long TITCALL HandlerEnumerateOpenHandles(DWORD ProcessId, LPVOID HandleBuffer, DWORD MaxHandleCount); -__declspec(dllimport) long long TITCALL HandlerGetHandleDetails(HANDLE hProcess, DWORD ProcessId, HANDLE hHandle, DWORD InformationReturn); -__declspec(dllimport) bool TITCALL HandlerCloseRemoteHandle(HANDLE hProcess, HANDLE hHandle); -__declspec(dllimport) long TITCALL HandlerEnumerateLockHandles(char* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated, LPVOID HandleDataBuffer, DWORD MaxHandleCount); -__declspec(dllimport) long TITCALL HandlerEnumerateLockHandlesW(wchar_t* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated, LPVOID HandleDataBuffer, DWORD MaxHandleCount); -__declspec(dllimport) bool TITCALL HandlerCloseAllLockHandles(char* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated); -__declspec(dllimport) bool TITCALL HandlerCloseAllLockHandlesW(wchar_t* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated); -__declspec(dllimport) bool TITCALL HandlerIsFileLocked(char* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated); -__declspec(dllimport) bool TITCALL HandlerIsFileLockedW(wchar_t* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated); -// TitanEngine.Handler[Mutex].functions: -__declspec(dllimport) long TITCALL HandlerEnumerateOpenMutexes(HANDLE hProcess, DWORD ProcessId, LPVOID HandleBuffer, DWORD MaxHandleCount); -__declspec(dllimport) long long TITCALL HandlerGetOpenMutexHandle(HANDLE hProcess, DWORD ProcessId, char* szMutexString); -__declspec(dllimport) long long TITCALL HandlerGetOpenMutexHandleW(HANDLE hProcess, DWORD ProcessId, wchar_t* szMutexString); -__declspec(dllimport) long TITCALL HandlerGetProcessIdWhichCreatedMutex(char* szMutexString); -__declspec(dllimport) long TITCALL HandlerGetProcessIdWhichCreatedMutexW(wchar_t* szMutexString); -// TitanEngine.Injector.functions: -__declspec(dllimport) bool TITCALL RemoteLoadLibrary(HANDLE hProcess, char* szLibraryFile, bool WaitForThreadExit); -__declspec(dllimport) bool TITCALL RemoteLoadLibraryW(HANDLE hProcess, wchar_t* szLibraryFile, bool WaitForThreadExit); -__declspec(dllimport) bool TITCALL RemoteFreeLibrary(HANDLE hProcess, HMODULE hModule, char* szLibraryFile, bool WaitForThreadExit); -__declspec(dllimport) bool TITCALL RemoteFreeLibraryW(HANDLE hProcess, HMODULE hModule, wchar_t* szLibraryFile, bool WaitForThreadExit); -__declspec(dllimport) bool TITCALL RemoteExitProcess(HANDLE hProcess, DWORD ExitCode); -// TitanEngine.StaticUnpacker.functions: -__declspec(dllimport) bool TITCALL StaticFileLoad(char* szFileName, DWORD DesiredAccess, bool SimulateLoad, LPHANDLE FileHandle, LPDWORD LoadedSize, LPHANDLE FileMap, PULONG_PTR FileMapVA); -__declspec(dllimport) bool TITCALL StaticFileLoadW(wchar_t* szFileName, DWORD DesiredAccess, bool SimulateLoad, LPHANDLE FileHandle, LPDWORD LoadedSize, LPHANDLE FileMap, PULONG_PTR FileMapVA); -__declspec(dllimport) bool TITCALL StaticFileUnload(char* szFileName, bool CommitChanges, HANDLE FileHandle, DWORD LoadedSize, HANDLE FileMap, ULONG_PTR FileMapVA); -__declspec(dllimport) bool TITCALL StaticFileUnloadW(wchar_t* szFileName, bool CommitChanges, HANDLE FileHandle, DWORD LoadedSize, HANDLE FileMap, ULONG_PTR FileMapVA); -__declspec(dllimport) bool TITCALL StaticFileOpen(char* szFileName, DWORD DesiredAccess, LPHANDLE FileHandle, LPDWORD FileSizeLow, LPDWORD FileSizeHigh); -__declspec(dllimport) bool TITCALL StaticFileOpenW(wchar_t* szFileName, DWORD DesiredAccess, LPHANDLE FileHandle, LPDWORD FileSizeLow, LPDWORD FileSizeHigh); -__declspec(dllimport) bool TITCALL StaticFileGetContent(HANDLE FileHandle, DWORD FilePositionLow, LPDWORD FilePositionHigh, void* Buffer, DWORD Size); -__declspec(dllimport) void TITCALL StaticFileClose(HANDLE FileHandle); -__declspec(dllimport) void TITCALL StaticMemoryDecrypt(LPVOID MemoryStart, DWORD MemorySize, DWORD DecryptionType, DWORD DecryptionKeySize, ULONG_PTR DecryptionKey); -__declspec(dllimport) void TITCALL StaticMemoryDecryptEx(LPVOID MemoryStart, DWORD MemorySize, DWORD DecryptionKeySize, void* DecryptionCallBack); -__declspec(dllimport) void TITCALL StaticMemoryDecryptSpecial(LPVOID MemoryStart, DWORD MemorySize, DWORD DecryptionKeySize, DWORD SpecDecryptionType, void* DecryptionCallBack); -__declspec(dllimport) void TITCALL StaticSectionDecrypt(ULONG_PTR FileMapVA, DWORD SectionNumber, bool SimulateLoad, DWORD DecryptionType, DWORD DecryptionKeySize, ULONG_PTR DecryptionKey); -__declspec(dllimport) bool TITCALL StaticMemoryDecompress(void* Source, DWORD SourceSize, void* Destination, DWORD DestinationSize, int Algorithm); -__declspec(dllimport) bool TITCALL StaticRawMemoryCopy(HANDLE hFile, ULONG_PTR FileMapVA, ULONG_PTR VitualAddressToCopy, DWORD Size, bool AddressIsRVA, char* szDumpFileName); -__declspec(dllimport) bool TITCALL StaticRawMemoryCopyW(HANDLE hFile, ULONG_PTR FileMapVA, ULONG_PTR VitualAddressToCopy, DWORD Size, bool AddressIsRVA, wchar_t* szDumpFileName); -__declspec(dllimport) bool TITCALL StaticRawMemoryCopyEx(HANDLE hFile, DWORD RawAddressToCopy, DWORD Size, char* szDumpFileName); -__declspec(dllimport) bool TITCALL StaticRawMemoryCopyExW(HANDLE hFile, DWORD RawAddressToCopy, DWORD Size, wchar_t* szDumpFileName); -__declspec(dllimport) bool TITCALL StaticRawMemoryCopyEx64(HANDLE hFile, DWORD64 RawAddressToCopy, DWORD64 Size, char* szDumpFileName); -__declspec(dllimport) bool TITCALL StaticRawMemoryCopyEx64W(HANDLE hFile, DWORD64 RawAddressToCopy, DWORD64 Size, wchar_t* szDumpFileName); -__declspec(dllimport) bool TITCALL StaticHashMemory(void* MemoryToHash, DWORD SizeOfMemory, void* HashDigest, bool OutputString, int Algorithm); -__declspec(dllimport) bool TITCALL StaticHashFile(char* szFileName, char* HashDigest, bool OutputString, int Algorithm); -__declspec(dllimport) bool TITCALL StaticHashFileW(wchar_t* szFileName, char* HashDigest, bool OutputString, int Algorithm); -// TitanEngine.Engine.functions: -__declspec(dllimport) void TITCALL SetEngineVariable(DWORD VariableId, bool VariableSet); -__declspec(dllimport) bool TITCALL EngineCreateMissingDependencies(char* szFileName, char* szOutputFolder, bool LogCreatedFiles); -__declspec(dllimport) bool TITCALL EngineCreateMissingDependenciesW(wchar_t* szFileName, wchar_t* szOutputFolder, bool LogCreatedFiles); -__declspec(dllimport) bool TITCALL EngineFakeMissingDependencies(HANDLE hProcess); -__declspec(dllimport) bool TITCALL EngineDeleteCreatedDependencies(); -__declspec(dllimport) bool TITCALL EngineCreateUnpackerWindow(char* WindowUnpackerTitle, char* WindowUnpackerLongTitle, char* WindowUnpackerName, char* WindowUnpackerAuthor, void* StartUnpackingCallBack); -__declspec(dllimport) void TITCALL EngineAddUnpackerWindowLogMessage(char* szLogMessage); -// Global.Engine.Extension.Functions: -__declspec(dllimport) bool TITCALL ExtensionManagerIsPluginLoaded(char* szPluginName); -__declspec(dllimport) bool TITCALL ExtensionManagerIsPluginEnabled(char* szPluginName); -__declspec(dllimport) bool TITCALL ExtensionManagerDisableAllPlugins(); -__declspec(dllimport) bool TITCALL ExtensionManagerDisablePlugin(char* szPluginName); -__declspec(dllimport) bool TITCALL ExtensionManagerEnableAllPlugins(); -__declspec(dllimport) bool TITCALL ExtensionManagerEnablePlugin(char* szPluginName); -__declspec(dllimport) bool TITCALL ExtensionManagerUnloadAllPlugins(); -__declspec(dllimport) bool TITCALL ExtensionManagerUnloadPlugin(char* szPluginName); -__declspec(dllimport) void* TITCALL ExtensionManagerGetPluginInfo(char* szPluginName); - -#ifdef __cplusplus -} -#endif /*__cplusplus*/ - -#pragma pack(pop) - -#endif /*TITANENGINE*/ diff --git a/TitanUnitTest/TitanEngine.lib b/TitanUnitTest/TitanEngine.lib deleted file mode 100644 index 4b6174a..0000000 Binary files a/TitanUnitTest/TitanEngine.lib and /dev/null differ diff --git a/TitanUnitTest/TitanScript.h b/TitanUnitTest/TitanScript.h index 4eb75e2..28e5c8c 100644 --- a/TitanUnitTest/TitanScript.h +++ b/TitanUnitTest/TitanScript.h @@ -1,26 +1,26 @@ -#ifndef TITANSCRIPT_H -#define TITANSCRIPT_H - -#if _MSC_VER > 1000 -//#pragma once -#endif - -#include - -enum eLogType {TS_LOG_NORMAL, TS_LOG_ERROR, TS_LOG_COMMAND, TS_LOG_DEBUG}; -typedef void(*fLogCallback)(const char* szString, eLogType Type); - -typedef bool (*tScripterLoadFileA)(const char*); -typedef bool (*tScripterLoadFileW)(const wchar_t*); -typedef bool (*tScripterLoadBuffer)(const char*); -typedef bool (*tScripterResume)(); -typedef bool (*tScripterPause)(); -typedef bool (*tScripterAutoDebugA)(const char*); -typedef bool (*tScripterAutoDebugW)(const wchar_t*); -typedef void (*tScripterSetLogCallback)(fLogCallback Callback); -typedef bool (*tScripterExecuteWithTitanMistA)(const char*, const char*); - -// use like this: tScripterResume foo = GetTSFunctionPointer(Resume); -#define GetTSFunctionPointer(x) ((tScripter ## x)GetProcAddress(GetModuleHandleA("TitanScript"), "Scripter" #x)) - -#endif /*TITANSCRIPT_H*/ +#ifndef TITANSCRIPT_H +#define TITANSCRIPT_H + +#if _MSC_VER > 1000 +//#pragma once +#endif + +#include + +enum eLogType {TS_LOG_NORMAL, TS_LOG_ERROR, TS_LOG_COMMAND, TS_LOG_DEBUG}; +typedef void(*fLogCallback)(const char* szString, eLogType Type); + +typedef bool (*tScripterLoadFileA)(const char*); +typedef bool (*tScripterLoadFileW)(const wchar_t*); +typedef bool (*tScripterLoadBuffer)(const char*); +typedef bool (*tScripterResume)(); +typedef bool (*tScripterPause)(); +typedef bool (*tScripterAutoDebugA)(const char*); +typedef bool (*tScripterAutoDebugW)(const wchar_t*); +typedef void (*tScripterSetLogCallback)(fLogCallback Callback); +typedef bool (*tScripterExecuteWithTitanMistA)(const char*, const char*); + +// use like this: tScripterResume foo = GetTSFunctionPointer(Resume); +#define GetTSFunctionPointer(x) ((tScripter ## x)GetProcAddress(GetModuleHandleA("TitanScript"), "Scripter" #x)) + +#endif /*TITANSCRIPT_H*/ diff --git a/TitanUnitTest/TitanUnitTest.cpp b/TitanUnitTest/TitanUnitTest.cpp index 11c915a..176bae1 100644 --- a/TitanUnitTest/TitanUnitTest.cpp +++ b/TitanUnitTest/TitanUnitTest.cpp @@ -1,39 +1,43 @@ -#include "stdafx.h" -#include "TitanEngine.h" -#include "TitanScript.h" -#include - -void log_callback( const char* str, eLogType log_type ); - -int main(int argc, char* argv[]) -{ - if(argc < 3) { - log_callback("Usage: titan_unittest.exe script.osc target.exe", TS_LOG_ERROR); - return -1; - } - - if ( !ExtensionManagerIsPluginLoaded( "TitanScript" ) || !ExtensionManagerIsPluginEnabled( "TitanScript" ) ) { - throw std::runtime_error( "TitanScript failed to load!" ); - } - - tScripterLoadFileA load_file = GetTSFunctionPointer( LoadFileA ); - tScripterExecuteWithTitanMistA exec = GetTSFunctionPointer( ExecuteWithTitanMistA ); - tScripterSetLogCallback set_log_callback = GetTSFunctionPointer( SetLogCallback ); - - set_log_callback(&log_callback ); - - if(!load_file(argv[1])) { - log_callback("Error loading script", TS_LOG_ERROR); - return -1; - } - - exec(argv[2], "dump.exe" ); - - return 0; -} - - -void log_callback( const char* str, eLogType log_type ) { - std::cout << str << "\n" << std::flush; -} - +#include "stdafx.h" +#include "..\SDK\CPP\TitanEngine.h" +#include "TitanScript.h" +#include + +void log_callback( const char* str, eLogType log_type ); + +int main(int argc, char* argv[]) +{ + if(argc < 3) + { + log_callback("Usage: titan_unittest.exe script.osc target.exe", TS_LOG_ERROR); + return -1; + } + + if ( !ExtensionManagerIsPluginLoaded( "TitanScript" ) || !ExtensionManagerIsPluginEnabled( "TitanScript" ) ) + { + throw std::runtime_error( "TitanScript failed to load!" ); + } + + tScripterLoadFileA load_file = GetTSFunctionPointer( LoadFileA ); + tScripterExecuteWithTitanMistA exec = GetTSFunctionPointer( ExecuteWithTitanMistA ); + tScripterSetLogCallback set_log_callback = GetTSFunctionPointer( SetLogCallback ); + + set_log_callback(&log_callback ); + + if(!load_file(argv[1])) + { + log_callback("Error loading script", TS_LOG_ERROR); + return -1; + } + + exec(argv[2], "dump.exe" ); + + return 0; +} + + +void log_callback( const char* str, eLogType log_type ) +{ + std::cout << str << "\n" << std::flush; +} + diff --git a/TitanUnitTest/TitanUnitTest.vcxproj b/TitanUnitTest/TitanUnitTest.vcxproj index cbf6daa..02edfc5 100644 --- a/TitanUnitTest/TitanUnitTest.vcxproj +++ b/TitanUnitTest/TitanUnitTest.vcxproj @@ -1,96 +1,174 @@ - - - - - Debug - Win32 - - - Release - Win32 - - - - {5B5AB3CD-4D32-43B0-8840-E05C9483381D} - Win32Proj - titan_unittest - - - - Application - true - Unicode - true - - - Application - false - true - Unicode - - - - - - - - - - - - - true - - - false - - - - Use - Level3 - Disabled - WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions) - MultiThreadedDebugDLL - - - Console - true - TitanEngine.lib;%(AdditionalDependencies) - - - - - - - Level3 - Use - MaxSpeed - true - true - WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions) - MultiThreadedDLL - - - Console - true - true - true - - - - - - - - - - - Create - Create - - - - - - + + + + + Debug + Win32 + + + Debug + x64 + + + Release + Win32 + + + Release + x64 + + + + {5B5AB3CD-4D32-43B0-8840-E05C9483381D} + Win32Proj + titan_unittest + + + + Application + true + Unicode + true + + + Application + true + Unicode + true + + + Application + false + true + Unicode + + + Application + false + true + Unicode + + + + + + + + + + + + + + + + + + + true + $(SolutionDir)\$(Configuration)\x32\ + $(Configuration)\x32\ + + + true + $(SolutionDir)\$(Configuration)\x64\ + $(Configuration)\x64\ + + + false + $(SolutionDir)\$(Configuration)\x32\ + $(Configuration)\x32\ + + + false + $(SolutionDir)\$(Configuration)\x64\ + $(Configuration)\x64\ + + + + Use + Level3 + Disabled + WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions) + MultiThreadedDebugDLL + + + Console + true + $(OutDir)TitanEngine.lib;%(AdditionalDependencies) + + + + + + + Use + Level3 + Disabled + WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions) + MultiThreadedDebugDLL + + + Console + true + $(OutDir)TitanEngine.lib;%(AdditionalDependencies) + + + + + + + Level3 + Use + MaxSpeed + true + true + WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions) + MultiThreadedDLL + + + Console + true + true + true + $(OutDir)TitanEngine.lib;%(AdditionalDependencies) + + + + + Level3 + Use + MaxSpeed + true + true + WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions) + MultiThreadedDLL + + + Console + true + true + true + $(OutDir)TitanEngine.lib;%(AdditionalDependencies) + + + + + + + + + + + + Create + Create + Create + Create + + + + + + \ No newline at end of file diff --git a/TitanUnitTest/TitanUnitTest.vcxproj.filters b/TitanUnitTest/TitanUnitTest.vcxproj.filters index 305a47f..6cccd5b 100644 --- a/TitanUnitTest/TitanUnitTest.vcxproj.filters +++ b/TitanUnitTest/TitanUnitTest.vcxproj.filters @@ -9,6 +9,9 @@ {93995380-89BD-4b04-88EB-625FBE52EBFB} h;hpp;hxx;hm;inl;inc;xsd + + {dcabac3b-acfe-4e79-a827-01d97b369669} + @@ -25,17 +28,14 @@ Header Files - - Header Files - - - Header Files - Header Files - - Header Files + + Header Files\SDK + + + Header Files\SDK \ No newline at end of file diff --git a/TitanUnitTest/stdafx.cpp b/TitanUnitTest/stdafx.cpp index 20e8cfa..1577c4e 100644 --- a/TitanUnitTest/stdafx.cpp +++ b/TitanUnitTest/stdafx.cpp @@ -1,8 +1 @@ -// stdafx.cpp : Quelldatei, die nur die Standard-Includes einbindet. -// titan_unittest.pch ist der vorkompilierte Header. -// stdafx.obj enthält die vorkompilierten Typinformationen. - -#include "stdafx.h" - -// TODO: Auf zusätzliche Header verweisen, die in STDAFX.H -// und nicht in dieser Datei erforderlich sind. +#include "stdafx.h" \ No newline at end of file diff --git a/TitanUnitTest/stdafx.h b/TitanUnitTest/stdafx.h index b689b41..45c4afd 100644 --- a/TitanUnitTest/stdafx.h +++ b/TitanUnitTest/stdafx.h @@ -1,15 +1,6 @@ -// stdafx.h : Includedatei für Standardsystem-Includedateien -// oder häufig verwendete projektspezifische Includedateien, -// die nur in unregelmäßigen Abständen geändert werden. -// - -#pragma once - -#include "targetver.h" - -#include -#include - - - -// TODO: Hier auf zusätzliche Header, die das Programm erfordert, verweisen. +#pragma once + +#include "targetver.h" + +#include +#include diff --git a/TitanUnitTest/targetver.h b/TitanUnitTest/targetver.h index a765413..2b26ce2 100644 --- a/TitanUnitTest/targetver.h +++ b/TitanUnitTest/targetver.h @@ -1,8 +1,3 @@ -#pragma once - -// Durch Einbeziehen von"SDKDDKVer.h" wird die höchste verfügbare Windows-Plattform definiert. - -// Wenn Sie die Anwendung für eine frühere Windows-Plattform erstellen möchten, schließen Sie "WinSDKVer.h" ein, und -// legen Sie das _WIN32_WINNT-Makro auf die zu unterstützende Plattform fest, bevor Sie "SDKDDKVer.h" einschließen. - -#include +#pragma once + +#include