mirror of https://github.com/x64dbg/TitanEngine
- added UE_HARDWARE_SIZE_8 (for x64)
- fixed bug in EngineGlobalAPIHandler - added TitanEngine.h
This commit is contained in:
parent
c217fc31b6
commit
818ac8a7b1
Binary file not shown.
Binary file not shown.
Binary file not shown.
|
|
@ -1780,7 +1780,7 @@ long long EngineGlobalAPIHandler(HANDLE handleProcess, ULONG_PTR EnumedModulesBa
|
|||
ULONG_PTR ForwarderData = NULL;
|
||||
unsigned int ClosestAPI = 0x1000;
|
||||
int Vista64UserForwarderFix = 0;
|
||||
int Windows7KernelBase = 0;
|
||||
int Windows7KernelBase = -1;
|
||||
|
||||
RtlZeroMemory(&engineFoundDLLName, 512);
|
||||
RtlZeroMemory(&EnumeratedModules, 0x2000 * sizeof ULONG_PTR);
|
||||
|
|
@ -1823,7 +1823,7 @@ long long EngineGlobalAPIHandler(HANDLE handleProcess, ULONG_PTR EnumedModulesBa
|
|||
{
|
||||
Vista64UserForwarderFix = y;
|
||||
}
|
||||
else if(lstrcmpiA(RemoteDLLName, "kernelbase.dll") == NULL)
|
||||
/*else if(lstrcmpiA(RemoteDLLName, "kernelbase.dll") == NULL)
|
||||
{
|
||||
GetModuleFileNameExA(hProcess, (HMODULE)EnumeratedModules[y], (LPSTR)RemoteDLLName, MAX_PATH);
|
||||
RemoteDLLName[lstrlenA(szWindowsKernelBase)] = 0x00;
|
||||
|
|
@ -1831,7 +1831,7 @@ long long EngineGlobalAPIHandler(HANDLE handleProcess, ULONG_PTR EnumedModulesBa
|
|||
{
|
||||
Windows7KernelBase = y;
|
||||
}
|
||||
}
|
||||
}*/
|
||||
}
|
||||
y++;
|
||||
}
|
||||
|
|
@ -15733,18 +15733,27 @@ __declspec(dllexport) bool __stdcall SetHardwareBreakPointEx(HANDLE hActiveThrea
|
|||
|
||||
if(bpxSize == UE_HARDWARE_SIZE_2)
|
||||
{
|
||||
if(bpxAddress % 2 != 0)
|
||||
if((bpxAddress % 2) != 0)
|
||||
{
|
||||
return(false);
|
||||
}
|
||||
}
|
||||
else if(bpxSize == UE_HARDWARE_SIZE_4)
|
||||
{
|
||||
if(bpxAddress % 4 != 0)
|
||||
if((bpxAddress % 4) != 0)
|
||||
{
|
||||
return(false);
|
||||
}
|
||||
}
|
||||
#if defined(_WIN64)
|
||||
else if(bpxSize == UE_HARDWARE_SIZE_8)
|
||||
{
|
||||
if((bpxAddress % 8) != 0)
|
||||
{
|
||||
return(false);
|
||||
}
|
||||
}
|
||||
#endif
|
||||
|
||||
if(IndexOfRegister == NULL)
|
||||
{
|
||||
|
|
@ -15810,6 +15819,11 @@ __declspec(dllexport) bool __stdcall SetHardwareBreakPointEx(HANDLE hActiveThrea
|
|||
HardwareBPX = HardwareBPX | (1 << 19);
|
||||
HardwareBPX = HardwareBPX | (1 << 18);
|
||||
}
|
||||
else if(bpxSize == UE_HARDWARE_SIZE_8)
|
||||
{
|
||||
HardwareBPX = HardwareBPX | (1 << 19);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 18);
|
||||
}
|
||||
HardwareBPX = HardwareBPX | (1 << 10);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 11);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 12);
|
||||
|
|
@ -15861,6 +15875,11 @@ __declspec(dllexport) bool __stdcall SetHardwareBreakPointEx(HANDLE hActiveThrea
|
|||
HardwareBPX = HardwareBPX | (1 << 23);
|
||||
HardwareBPX = HardwareBPX | (1 << 22);
|
||||
}
|
||||
else if(bpxSize == UE_HARDWARE_SIZE_8)
|
||||
{
|
||||
HardwareBPX = HardwareBPX | (1 << 23);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 22);
|
||||
}
|
||||
HardwareBPX = HardwareBPX | (1 << 10);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 11);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 12);
|
||||
|
|
@ -15912,6 +15931,11 @@ __declspec(dllexport) bool __stdcall SetHardwareBreakPointEx(HANDLE hActiveThrea
|
|||
HardwareBPX = HardwareBPX | (1 << 27);
|
||||
HardwareBPX = HardwareBPX | (1 << 26);
|
||||
}
|
||||
else if(bpxSize == UE_HARDWARE_SIZE_8)
|
||||
{
|
||||
HardwareBPX = HardwareBPX | (1 << 27);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 26);
|
||||
}
|
||||
HardwareBPX = HardwareBPX | (1 << 10);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 11);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 12);
|
||||
|
|
@ -15963,6 +15987,11 @@ __declspec(dllexport) bool __stdcall SetHardwareBreakPointEx(HANDLE hActiveThrea
|
|||
HardwareBPX = HardwareBPX | (1 << 31);
|
||||
HardwareBPX = HardwareBPX | (1 << 30);
|
||||
}
|
||||
else if(bpxSize == UE_HARDWARE_SIZE_8)
|
||||
{
|
||||
HardwareBPX = HardwareBPX | (1 << 31);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 30);
|
||||
}
|
||||
HardwareBPX = HardwareBPX | (1 << 10);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 11);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 12);
|
||||
|
|
@ -15988,18 +16017,28 @@ __declspec(dllexport) bool __stdcall SetHardwareBreakPoint(ULONG_PTR bpxAddress,
|
|||
|
||||
if(bpxSize == UE_HARDWARE_SIZE_2)
|
||||
{
|
||||
if(bpxAddress % 2 != 0)
|
||||
if((bpxAddress % 2) != 0)
|
||||
{
|
||||
return(false);
|
||||
}
|
||||
}
|
||||
else if(bpxSize == UE_HARDWARE_SIZE_4)
|
||||
{
|
||||
if(bpxAddress % 4 != 0)
|
||||
if((bpxAddress % 4) != 0)
|
||||
{
|
||||
return(false);
|
||||
}
|
||||
}
|
||||
#if defined(_WIN64)
|
||||
else if(bpxSize == UE_HARDWARE_SIZE_8)
|
||||
{
|
||||
if((bpxAddress % 8) != 0)
|
||||
{
|
||||
return(false);
|
||||
}
|
||||
}
|
||||
#endif
|
||||
|
||||
|
||||
if(IndexOfRegister == NULL)
|
||||
{
|
||||
|
|
@ -16064,6 +16103,11 @@ __declspec(dllexport) bool __stdcall SetHardwareBreakPoint(ULONG_PTR bpxAddress,
|
|||
HardwareBPX = HardwareBPX | (1 << 19);
|
||||
HardwareBPX = HardwareBPX | (1 << 18);
|
||||
}
|
||||
else if(bpxSize == UE_HARDWARE_SIZE_8)
|
||||
{
|
||||
HardwareBPX = HardwareBPX | (1 << 19);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 18);
|
||||
}
|
||||
HardwareBPX = HardwareBPX | (1 << 10);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 11);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 12);
|
||||
|
|
@ -16115,6 +16159,11 @@ __declspec(dllexport) bool __stdcall SetHardwareBreakPoint(ULONG_PTR bpxAddress,
|
|||
HardwareBPX = HardwareBPX | (1 << 23);
|
||||
HardwareBPX = HardwareBPX | (1 << 22);
|
||||
}
|
||||
else if(bpxSize == UE_HARDWARE_SIZE_8)
|
||||
{
|
||||
HardwareBPX = HardwareBPX | (1 << 23);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 22);
|
||||
}
|
||||
HardwareBPX = HardwareBPX | (1 << 10);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 11);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 12);
|
||||
|
|
@ -16166,6 +16215,11 @@ __declspec(dllexport) bool __stdcall SetHardwareBreakPoint(ULONG_PTR bpxAddress,
|
|||
HardwareBPX = HardwareBPX | (1 << 27);
|
||||
HardwareBPX = HardwareBPX | (1 << 26);
|
||||
}
|
||||
else if(bpxSize == UE_HARDWARE_SIZE_8)
|
||||
{
|
||||
HardwareBPX = HardwareBPX | (1 << 27);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 26);
|
||||
}
|
||||
HardwareBPX = HardwareBPX | (1 << 10);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 11);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 12);
|
||||
|
|
@ -16217,6 +16271,11 @@ __declspec(dllexport) bool __stdcall SetHardwareBreakPoint(ULONG_PTR bpxAddress,
|
|||
HardwareBPX = HardwareBPX | (1 << 31);
|
||||
HardwareBPX = HardwareBPX | (1 << 30);
|
||||
}
|
||||
else if(bpxSize == UE_HARDWARE_SIZE_8)
|
||||
{
|
||||
HardwareBPX = HardwareBPX | (1 << 31);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 30);
|
||||
}
|
||||
HardwareBPX = HardwareBPX | (1 << 10);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 11);
|
||||
HardwareBPX = HardwareBPX &~ (1 << 12);
|
||||
|
|
|
|||
|
|
@ -0,0 +1,932 @@
|
|||
#ifndef TITANENGINE
|
||||
#define TITANENGINE
|
||||
|
||||
#if _MSC_VER > 1000
|
||||
#pragma once
|
||||
#endif
|
||||
|
||||
#include <windows.h>
|
||||
|
||||
#pragma pack(push, 1)
|
||||
|
||||
// Global.Constant.Structure.Declaration:
|
||||
// Engine.External:
|
||||
#define UE_ACCESS_READ 0
|
||||
#define UE_ACCESS_WRITE 1
|
||||
#define UE_ACCESS_ALL 2
|
||||
|
||||
#define UE_HIDE_BASIC 1
|
||||
|
||||
#define UE_PLUGIN_CALL_REASON_PREDEBUG 1
|
||||
#define UE_PLUGIN_CALL_REASON_EXCEPTION 2
|
||||
#define UE_PLUGIN_CALL_REASON_POSTDEBUG 3
|
||||
|
||||
#define TEE_HOOK_NRM_JUMP 1
|
||||
#define TEE_HOOK_NRM_CALL 3
|
||||
#define TEE_HOOK_IAT 5
|
||||
|
||||
#define UE_ENGINE_ALOW_MODULE_LOADING 1
|
||||
#define UE_ENGINE_AUTOFIX_FORWARDERS 2
|
||||
#define UE_ENGINE_PASS_ALL_EXCEPTIONS 3
|
||||
#define UE_ENGINE_NO_CONSOLE_WINDOW 4
|
||||
#define UE_ENGINE_BACKUP_FOR_CRITICAL_FUNCTIONS 5
|
||||
#define UE_ENGINE_CALL_PLUGIN_CALLBACK 6
|
||||
#define UE_ENGINE_RESET_CUSTOM_HANDLER 7
|
||||
#define UE_ENGINE_CALL_PLUGIN_DEBUG_CALLBACK 8
|
||||
|
||||
#define UE_OPTION_REMOVEALL 1
|
||||
#define UE_OPTION_DISABLEALL 2
|
||||
#define UE_OPTION_REMOVEALLDISABLED 3
|
||||
#define UE_OPTION_REMOVEALLENABLED 4
|
||||
|
||||
#define UE_STATIC_DECRYPTOR_XOR 1
|
||||
#define UE_STATIC_DECRYPTOR_SUB 2
|
||||
#define UE_STATIC_DECRYPTOR_ADD 3
|
||||
|
||||
#define UE_STATIC_DECRYPTOR_FOREWARD 1
|
||||
#define UE_STATIC_DECRYPTOR_BACKWARD 2
|
||||
|
||||
#define UE_STATIC_KEY_SIZE_1 1
|
||||
#define UE_STATIC_KEY_SIZE_2 2
|
||||
#define UE_STATIC_KEY_SIZE_4 4
|
||||
#define UE_STATIC_KEY_SIZE_8 8
|
||||
|
||||
#define UE_STATIC_APLIB 1
|
||||
#define UE_STATIC_APLIB_DEPACK 2
|
||||
#define UE_STATIC_LZMA 3
|
||||
|
||||
#define UE_STATIC_HASH_MD5 1
|
||||
#define UE_STATIC_HASH_SHA1 2
|
||||
#define UE_STATIC_HASH_CRC32 3
|
||||
|
||||
#define UE_RESOURCE_LANGUAGE_ANY -1
|
||||
|
||||
#define UE_PE_OFFSET 0
|
||||
#define UE_IMAGEBASE 1
|
||||
#define UE_OEP 2
|
||||
#define UE_SIZEOFIMAGE 3
|
||||
#define UE_SIZEOFHEADERS 4
|
||||
#define UE_SIZEOFOPTIONALHEADER 5
|
||||
#define UE_SECTIONALIGNMENT 6
|
||||
#define UE_IMPORTTABLEADDRESS 7
|
||||
#define UE_IMPORTTABLESIZE 8
|
||||
#define UE_RESOURCETABLEADDRESS 9
|
||||
#define UE_RESOURCETABLESIZE 10
|
||||
#define UE_EXPORTTABLEADDRESS 11
|
||||
#define UE_EXPORTTABLESIZE 12
|
||||
#define UE_TLSTABLEADDRESS 13
|
||||
#define UE_TLSTABLESIZE 14
|
||||
#define UE_RELOCATIONTABLEADDRESS 15
|
||||
#define UE_RELOCATIONTABLESIZE 16
|
||||
#define UE_TIMEDATESTAMP 17
|
||||
#define UE_SECTIONNUMBER 18
|
||||
#define UE_CHECKSUM 19
|
||||
#define UE_SUBSYSTEM 20
|
||||
#define UE_CHARACTERISTICS 21
|
||||
#define UE_NUMBEROFRVAANDSIZES 22
|
||||
#define UE_SECTIONNAME 23
|
||||
#define UE_SECTIONVIRTUALOFFSET 24
|
||||
#define UE_SECTIONVIRTUALSIZE 25
|
||||
#define UE_SECTIONRAWOFFSET 26
|
||||
#define UE_SECTIONRAWSIZE 27
|
||||
#define UE_SECTIONFLAGS 28
|
||||
|
||||
#define UE_CH_BREAKPOINT 1
|
||||
#define UE_CH_SINGLESTEP 2
|
||||
#define UE_CH_ACCESSVIOLATION 3
|
||||
#define UE_CH_ILLEGALINSTRUCTION 4
|
||||
#define UE_CH_NONCONTINUABLEEXCEPTION 5
|
||||
#define UE_CH_ARRAYBOUNDSEXCEPTION 6
|
||||
#define UE_CH_FLOATDENORMALOPERAND 7
|
||||
#define UE_CH_FLOATDEVIDEBYZERO 8
|
||||
#define UE_CH_INTEGERDEVIDEBYZERO 9
|
||||
#define UE_CH_INTEGEROVERFLOW 10
|
||||
#define UE_CH_PRIVILEGEDINSTRUCTION 11
|
||||
#define UE_CH_PAGEGUARD 12
|
||||
#define UE_CH_EVERYTHINGELSE 13
|
||||
#define UE_CH_CREATETHREAD 14
|
||||
#define UE_CH_EXITTHREAD 15
|
||||
#define UE_CH_CREATEPROCESS 16
|
||||
#define UE_CH_EXITPROCESS 17
|
||||
#define UE_CH_LOADDLL 18
|
||||
#define UE_CH_UNLOADDLL 19
|
||||
#define UE_CH_OUTPUTDEBUGSTRING 20
|
||||
#define UE_CH_AFTEREXCEPTIONPROCESSING 21
|
||||
#define UE_CH_ALLEVENTS 22
|
||||
#define UE_CH_SYSTEMBREAKPOINT 23
|
||||
#define UE_CH_UNHANDLEDEXCEPTION 24
|
||||
#define UE_CH_AFTERUNHANDLEDEXCEPTION 25
|
||||
|
||||
#define UE_OPTION_HANDLER_RETURN_HANDLECOUNT 1
|
||||
#define UE_OPTION_HANDLER_RETURN_ACCESS 2
|
||||
#define UE_OPTION_HANDLER_RETURN_FLAGS 3
|
||||
#define UE_OPTION_HANDLER_RETURN_TYPENAME 4
|
||||
|
||||
#define UE_BREAKPOINT_INT3 1
|
||||
#define UE_BREAKPOINT_LONG_INT3 2
|
||||
#define UE_BREAKPOINT_UD2 3
|
||||
|
||||
#define UE_BPXREMOVED 0
|
||||
#define UE_BPXACTIVE 1
|
||||
#define UE_BPXINACTIVE 2
|
||||
|
||||
#define UE_BREAKPOINT 0
|
||||
#define UE_SINGLESHOOT 1
|
||||
#define UE_HARDWARE 2
|
||||
#define UE_MEMORY 3
|
||||
#define UE_MEMORY_READ 4
|
||||
#define UE_MEMORY_WRITE 5
|
||||
#define UE_BREAKPOINT_TYPE_INT3 0x10000000
|
||||
#define UE_BREAKPOINT_TYPE_LONG_INT3 0x20000000
|
||||
#define UE_BREAKPOINT_TYPE_UD2 0x30000000
|
||||
|
||||
#define UE_HARDWARE_EXECUTE 4
|
||||
#define UE_HARDWARE_WRITE 5
|
||||
#define UE_HARDWARE_READWRITE 6
|
||||
|
||||
#define UE_HARDWARE_SIZE_1 7
|
||||
#define UE_HARDWARE_SIZE_2 8
|
||||
#define UE_HARDWARE_SIZE_4 9
|
||||
#define UE_HARDWARE_SIZE_8 10
|
||||
|
||||
#define UE_ON_LIB_LOAD 1
|
||||
#define UE_ON_LIB_UNLOAD 2
|
||||
#define UE_ON_LIB_ALL 3
|
||||
|
||||
#define UE_APISTART 0
|
||||
#define UE_APIEND 1
|
||||
|
||||
#define UE_PLATFORM_x86 1
|
||||
#define UE_PLATFORM_x64 2
|
||||
#define UE_PLATFORM_ALL 3
|
||||
|
||||
#define UE_FUNCTION_STDCALL 1
|
||||
#define UE_FUNCTION_CCALL 2
|
||||
#define UE_FUNCTION_FASTCALL 3
|
||||
#define UE_FUNCTION_STDCALL_RET 4
|
||||
#define UE_FUNCTION_CCALL_RET 5
|
||||
#define UE_FUNCTION_FASTCALL_RET 6
|
||||
#define UE_FUNCTION_STDCALL_CALL 7
|
||||
#define UE_FUNCTION_CCALL_CALL 8
|
||||
#define UE_FUNCTION_FASTCALL_CALL 9
|
||||
#define UE_PARAMETER_BYTE 0
|
||||
#define UE_PARAMETER_WORD 1
|
||||
#define UE_PARAMETER_DWORD 2
|
||||
#define UE_PARAMETER_QWORD 3
|
||||
#define UE_PARAMETER_PTR_BYTE 4
|
||||
#define UE_PARAMETER_PTR_WORD 5
|
||||
#define UE_PARAMETER_PTR_DWORD 6
|
||||
#define UE_PARAMETER_PTR_QWORD 7
|
||||
#define UE_PARAMETER_STRING 8
|
||||
#define UE_PARAMETER_UNICODE 9
|
||||
|
||||
#define UE_CMP_NOCONDITION 0
|
||||
#define UE_CMP_EQUAL 1
|
||||
#define UE_CMP_NOTEQUAL 2
|
||||
#define UE_CMP_GREATER 3
|
||||
#define UE_CMP_GREATEROREQUAL 4
|
||||
#define UE_CMP_LOWER 5
|
||||
#define UE_CMP_LOWEROREQUAL 6
|
||||
#define UE_CMP_REG_EQUAL 7
|
||||
#define UE_CMP_REG_NOTEQUAL 8
|
||||
#define UE_CMP_REG_GREATER 9
|
||||
#define UE_CMP_REG_GREATEROREQUAL 10
|
||||
#define UE_CMP_REG_LOWER 11
|
||||
#define UE_CMP_REG_LOWEROREQUAL 12
|
||||
#define UE_CMP_ALWAYSFALSE 13
|
||||
|
||||
#define UE_EAX 1
|
||||
#define UE_EBX 2
|
||||
#define UE_ECX 3
|
||||
#define UE_EDX 4
|
||||
#define UE_EDI 5
|
||||
#define UE_ESI 6
|
||||
#define UE_EBP 7
|
||||
#define UE_ESP 8
|
||||
#define UE_EIP 9
|
||||
#define UE_EFLAGS 10
|
||||
#define UE_DR0 11
|
||||
#define UE_DR1 12
|
||||
#define UE_DR2 13
|
||||
#define UE_DR3 14
|
||||
#define UE_DR6 15
|
||||
#define UE_DR7 16
|
||||
#define UE_RAX 17
|
||||
#define UE_RBX 18
|
||||
#define UE_RCX 19
|
||||
#define UE_RDX 20
|
||||
#define UE_RDI 21
|
||||
#define UE_RSI 22
|
||||
#define UE_RBP 23
|
||||
#define UE_RSP 24
|
||||
#define UE_RIP 25
|
||||
#define UE_RFLAGS 26
|
||||
#define UE_R8 27
|
||||
#define UE_R9 28
|
||||
#define UE_R10 29
|
||||
#define UE_R11 30
|
||||
#define UE_R12 31
|
||||
#define UE_R13 32
|
||||
#define UE_R14 33
|
||||
#define UE_R15 34
|
||||
#define UE_CIP 35
|
||||
#define UE_CSP 36
|
||||
#ifdef _WIN64
|
||||
#define UE_CFLAGS UE_RFLAGS
|
||||
#else
|
||||
#define UE_CFLAGS UE_EFLAGS
|
||||
#endif
|
||||
#define UE_SEG_GS 37
|
||||
#define UE_SEG_FS 38
|
||||
#define UE_SEG_ES 39
|
||||
#define UE_SEG_DS 40
|
||||
#define UE_SEG_CS 41
|
||||
#define UE_SEG_SS 42
|
||||
|
||||
typedef struct
|
||||
{
|
||||
DWORD PE32Offset;
|
||||
DWORD ImageBase;
|
||||
DWORD OriginalEntryPoint;
|
||||
DWORD NtSizeOfImage;
|
||||
DWORD NtSizeOfHeaders;
|
||||
WORD SizeOfOptionalHeaders;
|
||||
DWORD FileAlignment;
|
||||
DWORD SectionAligment;
|
||||
DWORD ImportTableAddress;
|
||||
DWORD ImportTableSize;
|
||||
DWORD ResourceTableAddress;
|
||||
DWORD ResourceTableSize;
|
||||
DWORD ExportTableAddress;
|
||||
DWORD ExportTableSize;
|
||||
DWORD TLSTableAddress;
|
||||
DWORD TLSTableSize;
|
||||
DWORD RelocationTableAddress;
|
||||
DWORD RelocationTableSize;
|
||||
DWORD TimeDateStamp;
|
||||
WORD SectionNumber;
|
||||
DWORD CheckSum;
|
||||
WORD SubSystem;
|
||||
WORD Characteristics;
|
||||
DWORD NumberOfRvaAndSizes;
|
||||
} PE32Struct, *PPE32Struct;
|
||||
|
||||
typedef struct
|
||||
{
|
||||
DWORD PE64Offset;
|
||||
DWORD64 ImageBase;
|
||||
DWORD OriginalEntryPoint;
|
||||
DWORD NtSizeOfImage;
|
||||
DWORD NtSizeOfHeaders;
|
||||
WORD SizeOfOptionalHeaders;
|
||||
DWORD FileAlignment;
|
||||
DWORD SectionAligment;
|
||||
DWORD ImportTableAddress;
|
||||
DWORD ImportTableSize;
|
||||
DWORD ResourceTableAddress;
|
||||
DWORD ResourceTableSize;
|
||||
DWORD ExportTableAddress;
|
||||
DWORD ExportTableSize;
|
||||
DWORD TLSTableAddress;
|
||||
DWORD TLSTableSize;
|
||||
DWORD RelocationTableAddress;
|
||||
DWORD RelocationTableSize;
|
||||
DWORD TimeDateStamp;
|
||||
WORD SectionNumber;
|
||||
DWORD CheckSum;
|
||||
WORD SubSystem;
|
||||
WORD Characteristics;
|
||||
DWORD NumberOfRvaAndSizes;
|
||||
} PE64Struct, *PPE64Struct;
|
||||
|
||||
typedef struct
|
||||
{
|
||||
bool NewDll;
|
||||
int NumberOfImports;
|
||||
ULONG_PTR ImageBase;
|
||||
ULONG_PTR BaseImportThunk;
|
||||
ULONG_PTR ImportThunk;
|
||||
char* APIName;
|
||||
char* DLLName;
|
||||
} ImportEnumData, *PImportEnumData;
|
||||
|
||||
typedef struct
|
||||
{
|
||||
HANDLE hThread;
|
||||
DWORD dwThreadId;
|
||||
void* ThreadStartAddress;
|
||||
void* ThreadLocalBase;
|
||||
} THREAD_ITEM_DATA, *PTHREAD_ITEM_DATA;
|
||||
|
||||
typedef struct
|
||||
{
|
||||
HANDLE hFile;
|
||||
void* BaseOfDll;
|
||||
HANDLE hFileMapping;
|
||||
void* hFileMappingView;
|
||||
char szLibraryPath[MAX_PATH];
|
||||
char szLibraryName[MAX_PATH];
|
||||
} LIBRARY_ITEM_DATA, *PLIBRARY_ITEM_DATA;
|
||||
|
||||
typedef struct
|
||||
{
|
||||
HANDLE hFile;
|
||||
void* BaseOfDll;
|
||||
HANDLE hFileMapping;
|
||||
void* hFileMappingView;
|
||||
wchar_t szLibraryPath[MAX_PATH];
|
||||
wchar_t szLibraryName[MAX_PATH];
|
||||
} LIBRARY_ITEM_DATAW, *PLIBRARY_ITEM_DATAW;
|
||||
|
||||
typedef struct
|
||||
{
|
||||
HANDLE hProcess;
|
||||
DWORD dwProcessId;
|
||||
HANDLE hThread;
|
||||
DWORD dwThreadId;
|
||||
HANDLE hFile;
|
||||
void* BaseOfImage;
|
||||
void* ThreadStartAddress;
|
||||
void* ThreadLocalBase;
|
||||
} PROCESS_ITEM_DATA, *PPROCESS_ITEM_DATA;
|
||||
|
||||
typedef struct
|
||||
{
|
||||
ULONG ProcessId;
|
||||
HANDLE hHandle;
|
||||
} HandlerArray, *PHandlerArray;
|
||||
|
||||
typedef struct
|
||||
{
|
||||
char PluginName[64];
|
||||
DWORD PluginMajorVersion;
|
||||
DWORD PluginMinorVersion;
|
||||
HMODULE PluginBaseAddress;
|
||||
void* TitanDebuggingCallBack;
|
||||
void* TitanRegisterPlugin;
|
||||
void* TitanReleasePlugin;
|
||||
void* TitanResetPlugin;
|
||||
bool PluginDisabled;
|
||||
} PluginInformation, *PPluginInformation;
|
||||
|
||||
#define TEE_MAXIMUM_HOOK_SIZE 14
|
||||
#define TEE_MAXIMUM_HOOK_RELOCS 7
|
||||
#if defined(_WIN64)
|
||||
#define TEE_MAXIMUM_HOOK_INSERT_SIZE 14
|
||||
#else
|
||||
#define TEE_MAXIMUM_HOOK_INSERT_SIZE 5
|
||||
#endif
|
||||
|
||||
typedef struct HOOK_ENTRY
|
||||
{
|
||||
bool IATHook;
|
||||
BYTE HookType;
|
||||
DWORD HookSize;
|
||||
void* HookAddress;
|
||||
void* RedirectionAddress;
|
||||
BYTE HookBytes[TEE_MAXIMUM_HOOK_SIZE];
|
||||
BYTE OriginalBytes[TEE_MAXIMUM_HOOK_SIZE];
|
||||
void* IATHookModuleBase;
|
||||
DWORD IATHookNameHash;
|
||||
bool HookIsEnabled;
|
||||
bool HookIsRemote;
|
||||
void* PatchedEntry;
|
||||
DWORD RelocationInfo[TEE_MAXIMUM_HOOK_RELOCS];
|
||||
int RelocationCount;
|
||||
} HOOK_ENTRY, *PHOOK_ENTRY;
|
||||
|
||||
#define UE_DEPTH_SURFACE 0
|
||||
#define UE_DEPTH_DEEP 1
|
||||
|
||||
#define UE_UNPACKER_CONDITION_SEARCH_FROM_EP 1
|
||||
|
||||
#define UE_UNPACKER_CONDITION_LOADLIBRARY 1
|
||||
#define UE_UNPACKER_CONDITION_GETPROCADDRESS 2
|
||||
#define UE_UNPACKER_CONDITION_ENTRYPOINTBREAK 3
|
||||
#define UE_UNPACKER_CONDITION_RELOCSNAPSHOT1 4
|
||||
#define UE_UNPACKER_CONDITION_RELOCSNAPSHOT2 5
|
||||
|
||||
#define UE_FIELD_OK 0
|
||||
#define UE_FIELD_BROKEN_NON_FIXABLE 1
|
||||
#define UE_FIELD_BROKEN_NON_CRITICAL 2
|
||||
#define UE_FIELD_BROKEN_FIXABLE_FOR_STATIC_USE 3
|
||||
#define UE_FIELD_BROKEN_BUT_CAN_BE_EMULATED 4
|
||||
#define UE_FILED_FIXABLE_NON_CRITICAL 5
|
||||
#define UE_FILED_FIXABLE_CRITICAL 6
|
||||
#define UE_FIELD_NOT_PRESET 7
|
||||
#define UE_FIELD_NOT_PRESET_WARNING 8
|
||||
|
||||
#define UE_RESULT_FILE_OK 10
|
||||
#define UE_RESULT_FILE_INVALID_BUT_FIXABLE 11
|
||||
#define UE_RESULT_FILE_INVALID_AND_NON_FIXABLE 12
|
||||
#define UE_RESULT_FILE_INVALID_FORMAT 13
|
||||
|
||||
typedef struct
|
||||
{
|
||||
BYTE OveralEvaluation;
|
||||
bool EvaluationTerminatedByException;
|
||||
bool FileIs64Bit;
|
||||
bool FileIsDLL;
|
||||
bool FileIsConsole;
|
||||
bool MissingDependencies;
|
||||
bool MissingDeclaredAPIs;
|
||||
BYTE SignatureMZ;
|
||||
BYTE SignaturePE;
|
||||
BYTE EntryPoint;
|
||||
BYTE ImageBase;
|
||||
BYTE SizeOfImage;
|
||||
BYTE FileAlignment;
|
||||
BYTE SectionAlignment;
|
||||
BYTE ExportTable;
|
||||
BYTE RelocationTable;
|
||||
BYTE ImportTable;
|
||||
BYTE ImportTableSection;
|
||||
BYTE ImportTableData;
|
||||
BYTE IATTable;
|
||||
BYTE TLSTable;
|
||||
BYTE LoadConfigTable;
|
||||
BYTE BoundImportTable;
|
||||
BYTE COMHeaderTable;
|
||||
BYTE ResourceTable;
|
||||
BYTE ResourceData;
|
||||
BYTE SectionTable;
|
||||
} FILE_STATUS_INFO, *PFILE_STATUS_INFO;
|
||||
|
||||
typedef struct
|
||||
{
|
||||
BYTE OveralEvaluation;
|
||||
bool FixingTerminatedByException;
|
||||
bool FileFixPerformed;
|
||||
bool StrippedRelocation;
|
||||
bool DontFixRelocations;
|
||||
DWORD OriginalRelocationTableAddress;
|
||||
DWORD OriginalRelocationTableSize;
|
||||
bool StrippedExports;
|
||||
bool DontFixExports;
|
||||
DWORD OriginalExportTableAddress;
|
||||
DWORD OriginalExportTableSize;
|
||||
bool StrippedResources;
|
||||
bool DontFixResources;
|
||||
DWORD OriginalResourceTableAddress;
|
||||
DWORD OriginalResourceTableSize;
|
||||
bool StrippedTLS;
|
||||
bool DontFixTLS;
|
||||
DWORD OriginalTLSTableAddress;
|
||||
DWORD OriginalTLSTableSize;
|
||||
bool StrippedLoadConfig;
|
||||
bool DontFixLoadConfig;
|
||||
DWORD OriginalLoadConfigTableAddress;
|
||||
DWORD OriginalLoadConfigTableSize;
|
||||
bool StrippedBoundImports;
|
||||
bool DontFixBoundImports;
|
||||
DWORD OriginalBoundImportTableAddress;
|
||||
DWORD OriginalBoundImportTableSize;
|
||||
bool StrippedIAT;
|
||||
bool DontFixIAT;
|
||||
DWORD OriginalImportAddressTableAddress;
|
||||
DWORD OriginalImportAddressTableSize;
|
||||
bool StrippedCOM;
|
||||
bool DontFixCOM;
|
||||
DWORD OriginalCOMTableAddress;
|
||||
DWORD OriginalCOMTableSize;
|
||||
} FILE_FIX_INFO, *PFILE_FIX_INFO;
|
||||
|
||||
#ifdef __cplusplus
|
||||
extern "C"
|
||||
{
|
||||
#endif
|
||||
|
||||
// Global.Function.Declaration:
|
||||
// TitanEngine.Dumper.functions:
|
||||
__declspec(dllexport) bool __stdcall DumpProcess(HANDLE hProcess, LPVOID ImageBase, char* szDumpFileName, ULONG_PTR EntryPoint);
|
||||
__declspec(dllexport) bool __stdcall DumpProcessW(HANDLE hProcess, LPVOID ImageBase, wchar_t* szDumpFileName, ULONG_PTR EntryPoint);
|
||||
__declspec(dllexport) bool __stdcall DumpProcessEx(DWORD ProcessId, LPVOID ImageBase, char* szDumpFileName, ULONG_PTR EntryPoint);
|
||||
__declspec(dllexport) bool __stdcall DumpProcessExW(DWORD ProcessId, LPVOID ImageBase, wchar_t* szDumpFileName, ULONG_PTR EntryPoint);
|
||||
__declspec(dllexport) bool __stdcall DumpMemory(HANDLE hProcess, LPVOID MemoryStart, ULONG_PTR MemorySize, char* szDumpFileName);
|
||||
__declspec(dllexport) bool __stdcall DumpMemoryW(HANDLE hProcess, LPVOID MemoryStart, ULONG_PTR MemorySize, wchar_t* szDumpFileName);
|
||||
__declspec(dllexport) bool __stdcall DumpMemoryEx(DWORD ProcessId, LPVOID MemoryStart, ULONG_PTR MemorySize, char* szDumpFileName);
|
||||
__declspec(dllexport) bool __stdcall DumpMemoryExW(DWORD ProcessId, LPVOID MemoryStart, ULONG_PTR MemorySize, wchar_t* szDumpFileName);
|
||||
__declspec(dllexport) bool __stdcall DumpRegions(HANDLE hProcess, char* szDumpFolder, bool DumpAboveImageBaseOnly);
|
||||
__declspec(dllexport) bool __stdcall DumpRegionsW(HANDLE hProcess, wchar_t* szDumpFolder, bool DumpAboveImageBaseOnly);
|
||||
__declspec(dllexport) bool __stdcall DumpRegionsEx(DWORD ProcessId, char* szDumpFolder, bool DumpAboveImageBaseOnly);
|
||||
__declspec(dllexport) bool __stdcall DumpRegionsExW(DWORD ProcessId, wchar_t* szDumpFolder, bool DumpAboveImageBaseOnly);
|
||||
__declspec(dllexport) bool __stdcall DumpModule(HANDLE hProcess, LPVOID ModuleBase, char* szDumpFileName);
|
||||
__declspec(dllexport) bool __stdcall DumpModuleW(HANDLE hProcess, LPVOID ModuleBase, wchar_t* szDumpFileName);
|
||||
__declspec(dllexport) bool __stdcall DumpModuleEx(DWORD ProcessId, LPVOID ModuleBase, char* szDumpFileName);
|
||||
__declspec(dllexport) bool __stdcall DumpModuleExW(DWORD ProcessId, LPVOID ModuleBase, wchar_t* szDumpFileName);
|
||||
__declspec(dllexport) bool __stdcall PastePEHeader(HANDLE hProcess, LPVOID ImageBase, char* szDebuggedFileName);
|
||||
__declspec(dllexport) bool __stdcall PastePEHeaderW(HANDLE hProcess, LPVOID ImageBase, wchar_t* szDebuggedFileName);
|
||||
__declspec(dllexport) bool __stdcall ExtractSection(char* szFileName, char* szDumpFileName, DWORD SectionNumber);
|
||||
__declspec(dllexport) bool __stdcall ExtractSectionW(wchar_t* szFileName, wchar_t* szDumpFileName, DWORD SectionNumber);
|
||||
__declspec(dllexport) bool __stdcall ResortFileSections(char* szFileName);
|
||||
__declspec(dllexport) bool __stdcall ResortFileSectionsW(wchar_t* szFileName);
|
||||
__declspec(dllexport) bool __stdcall FindOverlay(char* szFileName, LPDWORD OverlayStart, LPDWORD OverlaySize);
|
||||
__declspec(dllexport) bool __stdcall FindOverlayW(wchar_t* szFileName, LPDWORD OverlayStart, LPDWORD OverlaySize);
|
||||
__declspec(dllexport) bool __stdcall ExtractOverlay(char* szFileName, char* szExtactedFileName);
|
||||
__declspec(dllexport) bool __stdcall ExtractOverlayW(wchar_t* szFileName, wchar_t* szExtactedFileName);
|
||||
__declspec(dllexport) bool __stdcall AddOverlay(char* szFileName, char* szOverlayFileName);
|
||||
__declspec(dllexport) bool __stdcall AddOverlayW(wchar_t* szFileName, wchar_t* szOverlayFileName);
|
||||
__declspec(dllexport) bool __stdcall CopyOverlay(char* szInFileName, char* szOutFileName);
|
||||
__declspec(dllexport) bool __stdcall CopyOverlayW(wchar_t* szInFileName, wchar_t* szOutFileName);
|
||||
__declspec(dllexport) bool __stdcall RemoveOverlay(char* szFileName);
|
||||
__declspec(dllexport) bool __stdcall RemoveOverlayW(wchar_t* szFileName);
|
||||
__declspec(dllexport) bool __stdcall MakeAllSectionsRWE(char* szFileName);
|
||||
__declspec(dllexport) bool __stdcall MakeAllSectionsRWEW(wchar_t* szFileName);
|
||||
__declspec(dllexport) long __stdcall AddNewSectionEx(char* szFileName, char* szSectionName, DWORD SectionSize, DWORD SectionAttributes, LPVOID SectionContent, DWORD ContentSize);
|
||||
__declspec(dllexport) long __stdcall AddNewSectionExW(wchar_t* szFileName, char* szSectionName, DWORD SectionSize, DWORD SectionAttributes, LPVOID SectionContent, DWORD ContentSize);
|
||||
__declspec(dllexport) long __stdcall AddNewSection(char* szFileName, char* szSectionName, DWORD SectionSize);
|
||||
__declspec(dllexport) long __stdcall AddNewSectionW(wchar_t* szFileName, char* szSectionName, DWORD SectionSize);
|
||||
__declspec(dllexport) bool __stdcall ResizeLastSection(char* szFileName, DWORD NumberOfExpandBytes, bool AlignResizeData);
|
||||
__declspec(dllexport) bool __stdcall ResizeLastSectionW(wchar_t* szFileName, DWORD NumberOfExpandBytes, bool AlignResizeData);
|
||||
__declspec(dllexport) void __stdcall SetSharedOverlay(char* szFileName);
|
||||
__declspec(dllexport) void __stdcall SetSharedOverlayW(wchar_t* szFileName);
|
||||
__declspec(dllexport) char* __stdcall GetSharedOverlay();
|
||||
__declspec(dllexport) wchar_t* __stdcall GetSharedOverlayW();
|
||||
__declspec(dllexport) bool __stdcall DeleteLastSection(char* szFileName);
|
||||
__declspec(dllexport) bool __stdcall DeleteLastSectionW(wchar_t* szFileName);
|
||||
__declspec(dllexport) bool __stdcall DeleteLastSectionEx(char* szFileName, DWORD NumberOfSections);
|
||||
__declspec(dllexport) bool __stdcall DeleteLastSectionExW(wchar_t* szFileName, DWORD NumberOfSections);
|
||||
__declspec(dllexport) long long __stdcall GetPE32DataFromMappedFile(ULONG_PTR FileMapVA, DWORD WhichSection, DWORD WhichData);
|
||||
__declspec(dllexport) long long __stdcall GetPE32Data(char* szFileName, DWORD WhichSection, DWORD WhichData);
|
||||
__declspec(dllexport) long long __stdcall GetPE32DataW(wchar_t* szFileName, DWORD WhichSection, DWORD WhichData);
|
||||
__declspec(dllexport) bool __stdcall GetPE32DataFromMappedFileEx(ULONG_PTR FileMapVA, LPVOID DataStorage);
|
||||
__declspec(dllexport) bool __stdcall GetPE32DataEx(char* szFileName, LPVOID DataStorage);
|
||||
__declspec(dllexport) bool __stdcall GetPE32DataExW(wchar_t* szFileName, LPVOID DataStorage);
|
||||
__declspec(dllexport) bool __stdcall SetPE32DataForMappedFile(ULONG_PTR FileMapVA, DWORD WhichSection, DWORD WhichData, ULONG_PTR NewDataValue);
|
||||
__declspec(dllexport) bool __stdcall SetPE32Data(char* szFileName, DWORD WhichSection, DWORD WhichData, ULONG_PTR NewDataValue);
|
||||
__declspec(dllexport) bool __stdcall SetPE32DataW(wchar_t* szFileName, DWORD WhichSection, DWORD WhichData, ULONG_PTR NewDataValue);
|
||||
__declspec(dllexport) bool __stdcall SetPE32DataForMappedFileEx(ULONG_PTR FileMapVA, LPVOID DataStorage);
|
||||
__declspec(dllexport) bool __stdcall SetPE32DataEx(char* szFileName, LPVOID DataStorage);
|
||||
__declspec(dllexport) long __stdcall GetPE32SectionNumberFromVA(ULONG_PTR FileMapVA, ULONG_PTR AddressToConvert);
|
||||
__declspec(dllexport) long long __stdcall ConvertVAtoFileOffset(ULONG_PTR FileMapVA, ULONG_PTR AddressToConvert, bool ReturnType);
|
||||
__declspec(dllexport) long long __stdcall ConvertVAtoFileOffsetEx(ULONG_PTR FileMapVA, DWORD FileSize, ULONG_PTR ImageBase, ULONG_PTR AddressToConvert, bool AddressIsRVA, bool ReturnType);
|
||||
__declspec(dllexport) long long __stdcall ConvertFileOffsetToVA(ULONG_PTR FileMapVA, ULONG_PTR AddressToConvert, bool ReturnType);
|
||||
__declspec(dllexport) long long __stdcall ConvertFileOffsetToVAEx(ULONG_PTR FileMapVA, DWORD FileSize, ULONG_PTR ImageBase, ULONG_PTR AddressToConvert, bool ReturnType);
|
||||
// TitanEngine.Realigner.functions:
|
||||
__declspec(dllexport) bool __stdcall FixHeaderCheckSum(char* szFileName);
|
||||
__declspec(dllexport) bool __stdcall FixHeaderCheckSumW(wchar_t* szFileName);
|
||||
__declspec(dllexport) long __stdcall RealignPE(ULONG_PTR FileMapVA, DWORD FileSize, DWORD RealingMode);
|
||||
__declspec(dllexport) long __stdcall RealignPEEx(char* szFileName, DWORD RealingFileSize, DWORD ForcedFileAlignment);
|
||||
__declspec(dllexport) long __stdcall RealignPEExW(wchar_t* szFileName, DWORD RealingFileSize, DWORD ForcedFileAlignment);
|
||||
__declspec(dllexport) bool __stdcall WipeSection(char* szFileName, int WipeSectionNumber, bool RemovePhysically);
|
||||
__declspec(dllexport) bool __stdcall WipeSectionW(wchar_t* szFileName, int WipeSectionNumber, bool RemovePhysically);
|
||||
__declspec(dllexport) bool __stdcall IsPE32FileValidEx(char* szFileName, DWORD CheckDepth, LPVOID FileStatusInfo);
|
||||
__declspec(dllexport) bool __stdcall IsPE32FileValidExW(wchar_t* szFileName, DWORD CheckDepth, LPVOID FileStatusInfo);
|
||||
__declspec(dllexport) bool __stdcall FixBrokenPE32FileEx(char* szFileName, LPVOID FileStatusInfo, LPVOID FileFixInfo);
|
||||
__declspec(dllexport) bool __stdcall FixBrokenPE32FileExW(wchar_t* szFileName, LPVOID FileStatusInfo, LPVOID FileFixInfo);
|
||||
__declspec(dllexport) bool __stdcall IsFileDLL(char* szFileName, ULONG_PTR FileMapVA);
|
||||
__declspec(dllexport) bool __stdcall IsFileDLLW(wchar_t* szFileName, ULONG_PTR FileMapVA);
|
||||
// TitanEngine.Hider.functions:
|
||||
__declspec(dllexport) void* __stdcall GetPEBLocation(HANDLE hProcess);
|
||||
__declspec(dllexport) bool __stdcall HideDebugger(HANDLE hProcess, DWORD PatchAPILevel);
|
||||
__declspec(dllexport) bool __stdcall UnHideDebugger(HANDLE hProcess, DWORD PatchAPILevel);
|
||||
// TitanEngine.Relocater.functions:
|
||||
__declspec(dllexport) void __stdcall RelocaterCleanup();
|
||||
__declspec(dllexport) void __stdcall RelocaterInit(DWORD MemorySize, ULONG_PTR OldImageBase, ULONG_PTR NewImageBase);
|
||||
__declspec(dllexport) void __stdcall RelocaterAddNewRelocation(HANDLE hProcess, ULONG_PTR RelocateAddress, DWORD RelocateState);
|
||||
__declspec(dllexport) long __stdcall RelocaterEstimatedSize();
|
||||
__declspec(dllexport) bool __stdcall RelocaterExportRelocation(ULONG_PTR StorePlace, DWORD StorePlaceRVA, ULONG_PTR FileMapVA);
|
||||
__declspec(dllexport) bool __stdcall RelocaterExportRelocationEx(char* szFileName, char* szSectionName);
|
||||
__declspec(dllexport) bool __stdcall RelocaterExportRelocationExW(wchar_t* szFileName, char* szSectionName);
|
||||
__declspec(dllexport) bool __stdcall RelocaterGrabRelocationTable(HANDLE hProcess, ULONG_PTR MemoryStart, DWORD MemorySize);
|
||||
__declspec(dllexport) bool __stdcall RelocaterGrabRelocationTableEx(HANDLE hProcess, ULONG_PTR MemoryStart, ULONG_PTR MemorySize, DWORD NtSizeOfImage);
|
||||
__declspec(dllexport) bool __stdcall RelocaterMakeSnapshot(HANDLE hProcess, char* szSaveFileName, LPVOID MemoryStart, ULONG_PTR MemorySize);
|
||||
__declspec(dllexport) bool __stdcall RelocaterMakeSnapshotW(HANDLE hProcess, wchar_t* szSaveFileName, LPVOID MemoryStart, ULONG_PTR MemorySize);
|
||||
__declspec(dllexport) bool __stdcall RelocaterCompareTwoSnapshots(HANDLE hProcess, ULONG_PTR LoadedImageBase, ULONG_PTR NtSizeOfImage, char* szDumpFile1, char* szDumpFile2, ULONG_PTR MemStart);
|
||||
__declspec(dllexport) bool __stdcall RelocaterCompareTwoSnapshotsW(HANDLE hProcess, ULONG_PTR LoadedImageBase, ULONG_PTR NtSizeOfImage, wchar_t* szDumpFile1, wchar_t* szDumpFile2, ULONG_PTR MemStart);
|
||||
__declspec(dllexport) bool __stdcall RelocaterChangeFileBase(char* szFileName, ULONG_PTR NewImageBase);
|
||||
__declspec(dllexport) bool __stdcall RelocaterChangeFileBaseW(wchar_t* szFileName, ULONG_PTR NewImageBase);
|
||||
__declspec(dllexport) bool __stdcall RelocaterRelocateMemoryBlock(ULONG_PTR FileMapVA, ULONG_PTR MemoryLocation, void* RelocateMemory, DWORD RelocateMemorySize, ULONG_PTR CurrentLoadedBase, ULONG_PTR RelocateBase);
|
||||
__declspec(dllexport) bool __stdcall RelocaterWipeRelocationTable(char* szFileName);
|
||||
__declspec(dllexport) bool __stdcall RelocaterWipeRelocationTableW(wchar_t* szFileName);
|
||||
// TitanEngine.Resourcer.functions:
|
||||
__declspec(dllexport) long long __stdcall ResourcerLoadFileForResourceUse(char* szFileName);
|
||||
__declspec(dllexport) long long __stdcall ResourcerLoadFileForResourceUseW(wchar_t* szFileName);
|
||||
__declspec(dllexport) bool __stdcall ResourcerFreeLoadedFile(LPVOID LoadedFileBase);
|
||||
__declspec(dllexport) bool __stdcall ResourcerExtractResourceFromFileEx(ULONG_PTR FileMapVA, char* szResourceType, char* szResourceName, char* szExtractedFileName);
|
||||
__declspec(dllexport) bool __stdcall ResourcerExtractResourceFromFile(char* szFileName, char* szResourceType, char* szResourceName, char* szExtractedFileName);
|
||||
__declspec(dllexport) bool __stdcall ResourcerExtractResourceFromFileW(wchar_t* szFileName, char* szResourceType, char* szResourceName, char* szExtractedFileName);
|
||||
__declspec(dllexport) bool __stdcall ResourcerFindResource(char* szFileName, char* szResourceType, DWORD ResourceType, char* szResourceName, DWORD ResourceName, DWORD ResourceLanguage, PULONG_PTR pResourceData, LPDWORD pResourceSize);
|
||||
__declspec(dllexport) bool __stdcall ResourcerFindResourceW(wchar_t* szFileName, wchar_t* szResourceType, DWORD ResourceType, wchar_t* szResourceName, DWORD ResourceName, DWORD ResourceLanguage, PULONG_PTR pResourceData, LPDWORD pResourceSize);
|
||||
__declspec(dllexport) bool __stdcall ResourcerFindResourceEx(ULONG_PTR FileMapVA, DWORD FileSize, wchar_t* szResourceType, DWORD ResourceType, wchar_t* szResourceName, DWORD ResourceName, DWORD ResourceLanguage, PULONG_PTR pResourceData, LPDWORD pResourceSize);
|
||||
__declspec(dllexport) void __stdcall ResourcerEnumerateResource(char* szFileName, void* CallBack);
|
||||
__declspec(dllexport) void __stdcall ResourcerEnumerateResourceW(wchar_t* szFileName, void* CallBack);
|
||||
__declspec(dllexport) void __stdcall ResourcerEnumerateResourceEx(ULONG_PTR FileMapVA, DWORD FileSize, void* CallBack);
|
||||
// TitanEngine.Threader.functions:
|
||||
__declspec(dllexport) bool __stdcall ThreaderImportRunningThreadData(DWORD ProcessId);
|
||||
__declspec(dllexport) void* __stdcall ThreaderGetThreadInfo(HANDLE hThread, DWORD ThreadId);
|
||||
__declspec(dllexport) void __stdcall ThreaderEnumThreadInfo(void* EnumCallBack);
|
||||
__declspec(dllexport) bool __stdcall ThreaderPauseThread(HANDLE hThread);
|
||||
__declspec(dllexport) bool __stdcall ThreaderResumeThread(HANDLE hThread);
|
||||
__declspec(dllexport) bool __stdcall ThreaderTerminateThread(HANDLE hThread, DWORD ThreadExitCode);
|
||||
__declspec(dllexport) bool __stdcall ThreaderPauseAllThreads(bool LeaveMainRunning);
|
||||
__declspec(dllexport) bool __stdcall ThreaderResumeAllThreads(bool LeaveMainPaused);
|
||||
__declspec(dllexport) bool __stdcall ThreaderPauseProcess();
|
||||
__declspec(dllexport) bool __stdcall ThreaderResumeProcess();
|
||||
__declspec(dllexport) long long __stdcall ThreaderCreateRemoteThread(ULONG_PTR ThreadStartAddress, bool AutoCloseTheHandle, LPVOID ThreadPassParameter, LPDWORD ThreadId);
|
||||
__declspec(dllexport) bool __stdcall ThreaderInjectAndExecuteCode(LPVOID InjectCode, DWORD StartDelta, DWORD InjectSize);
|
||||
__declspec(dllexport) long long __stdcall ThreaderCreateRemoteThreadEx(HANDLE hProcess, ULONG_PTR ThreadStartAddress, bool AutoCloseTheHandle, LPVOID ThreadPassParameter, LPDWORD ThreadId);
|
||||
__declspec(dllexport) bool __stdcall ThreaderInjectAndExecuteCodeEx(HANDLE hProcess, LPVOID InjectCode, DWORD StartDelta, DWORD InjectSize);
|
||||
__declspec(dllexport) void __stdcall ThreaderSetCallBackForNextExitThreadEvent(LPVOID exitThreadCallBack);
|
||||
__declspec(dllexport) bool __stdcall ThreaderIsThreadStillRunning(HANDLE hThread);
|
||||
__declspec(dllexport) bool __stdcall ThreaderIsThreadActive(HANDLE hThread);
|
||||
__declspec(dllexport) bool __stdcall ThreaderIsAnyThreadActive();
|
||||
__declspec(dllexport) bool __stdcall ThreaderExecuteOnlyInjectedThreads();
|
||||
__declspec(dllexport) long long __stdcall ThreaderGetOpenHandleForThread(DWORD ThreadId);
|
||||
__declspec(dllexport) void* __stdcall ThreaderGetThreadData();
|
||||
__declspec(dllexport) bool __stdcall ThreaderIsExceptionInMainThread();
|
||||
// TitanEngine.Debugger.functions:
|
||||
__declspec(dllexport) void* __stdcall StaticDisassembleEx(ULONG_PTR DisassmStart, LPVOID DisassmAddress);
|
||||
__declspec(dllexport) void* __stdcall StaticDisassemble(LPVOID DisassmAddress);
|
||||
__declspec(dllexport) void* __stdcall DisassembleEx(HANDLE hProcess, LPVOID DisassmAddress);
|
||||
__declspec(dllexport) void* __stdcall Disassemble(LPVOID DisassmAddress);
|
||||
__declspec(dllexport) long __stdcall StaticLengthDisassemble(LPVOID DisassmAddress);
|
||||
__declspec(dllexport) long __stdcall LengthDisassembleEx(HANDLE hProcess, LPVOID DisassmAddress);
|
||||
__declspec(dllexport) long __stdcall LengthDisassemble(LPVOID DisassmAddress);
|
||||
__declspec(dllexport) void* __stdcall InitDebug(char* szFileName, char* szCommandLine, char* szCurrentFolder);
|
||||
__declspec(dllexport) void* __stdcall InitDebugW(wchar_t* szFileName, wchar_t* szCommandLine, wchar_t* szCurrentFolder);
|
||||
__declspec(dllexport) void* __stdcall InitDebugEx(char* szFileName, char* szCommandLine, char* szCurrentFolder, LPVOID EntryCallBack);
|
||||
__declspec(dllexport) void* __stdcall InitDebugExW(wchar_t* szFileName, wchar_t* szCommandLine, wchar_t* szCurrentFolder, LPVOID EntryCallBack);
|
||||
__declspec(dllexport) void* __stdcall InitDLLDebug(char* szFileName, bool ReserveModuleBase, char* szCommandLine, char* szCurrentFolder, LPVOID EntryCallBack);
|
||||
__declspec(dllexport) void* __stdcall InitDLLDebugW(wchar_t* szFileName, bool ReserveModuleBase, wchar_t* szCommandLine, wchar_t* szCurrentFolder, LPVOID EntryCallBack);
|
||||
__declspec(dllexport) bool __stdcall StopDebug();
|
||||
__declspec(dllexport) void __stdcall SetBPXOptions(long DefaultBreakPointType);
|
||||
__declspec(dllexport) bool __stdcall IsBPXEnabled(ULONG_PTR bpxAddress);
|
||||
__declspec(dllexport) bool __stdcall EnableBPX(ULONG_PTR bpxAddress);
|
||||
__declspec(dllexport) bool __stdcall DisableBPX(ULONG_PTR bpxAddress);
|
||||
__declspec(dllexport) bool __stdcall SetBPX(ULONG_PTR bpxAddress, DWORD bpxType, LPVOID bpxCallBack);
|
||||
__declspec(dllexport) bool __stdcall SetBPXEx(ULONG_PTR bpxAddress, DWORD bpxType, DWORD NumberOfExecution, DWORD CmpRegister, DWORD CmpCondition, ULONG_PTR CmpValue, LPVOID bpxCallBack, LPVOID bpxCompareCallBack, LPVOID bpxRemoveCallBack);
|
||||
__declspec(dllexport) bool __stdcall DeleteBPX(ULONG_PTR bpxAddress);
|
||||
__declspec(dllexport) bool __stdcall SafeDeleteBPX(ULONG_PTR bpxAddress);
|
||||
__declspec(dllexport) bool __stdcall SetAPIBreakPoint(char* szDLLName, char* szAPIName, DWORD bpxType, DWORD bpxPlace, LPVOID bpxCallBack);
|
||||
__declspec(dllexport) bool __stdcall DeleteAPIBreakPoint(char* szDLLName, char* szAPIName, DWORD bpxPlace);
|
||||
__declspec(dllexport) bool __stdcall SafeDeleteAPIBreakPoint(char* szDLLName, char* szAPIName, DWORD bpxPlace);
|
||||
__declspec(dllexport) bool __stdcall SetMemoryBPX(ULONG_PTR MemoryStart, DWORD SizeOfMemory, LPVOID bpxCallBack);
|
||||
__declspec(dllexport) bool __stdcall SetMemoryBPXEx(ULONG_PTR MemoryStart, DWORD SizeOfMemory, DWORD BreakPointType, bool RestoreOnHit, LPVOID bpxCallBack);
|
||||
__declspec(dllexport) bool __stdcall RemoveMemoryBPX(ULONG_PTR MemoryStart, DWORD SizeOfMemory);
|
||||
__declspec(dllexport) bool __stdcall GetContextFPUDataEx(HANDLE hActiveThread, void* FPUSaveArea);
|
||||
__declspec(dllexport) long long __stdcall GetContextDataEx(HANDLE hActiveThread, DWORD IndexOfRegister);
|
||||
__declspec(dllexport) long long __stdcall GetContextData(DWORD IndexOfRegister);
|
||||
__declspec(dllexport) bool __stdcall SetContextFPUDataEx(HANDLE hActiveThread, void* FPUSaveArea);
|
||||
__declspec(dllexport) bool __stdcall SetContextDataEx(HANDLE hActiveThread, DWORD IndexOfRegister, ULONG_PTR NewRegisterValue);
|
||||
__declspec(dllexport) bool __stdcall SetContextData(DWORD IndexOfRegister, ULONG_PTR NewRegisterValue);
|
||||
__declspec(dllexport) void __stdcall ClearExceptionNumber();
|
||||
__declspec(dllexport) long __stdcall CurrentExceptionNumber();
|
||||
__declspec(dllexport) bool __stdcall MatchPatternEx(HANDLE hProcess, void* MemoryToCheck, int SizeOfMemoryToCheck, void* PatternToMatch, int SizeOfPatternToMatch, PBYTE WildCard);
|
||||
__declspec(dllexport) bool __stdcall MatchPattern(void* MemoryToCheck, int SizeOfMemoryToCheck, void* PatternToMatch, int SizeOfPatternToMatch, PBYTE WildCard);
|
||||
__declspec(dllexport) long long __stdcall FindEx(HANDLE hProcess, LPVOID MemoryStart, DWORD MemorySize, LPVOID SearchPattern, DWORD PatternSize, LPBYTE WildCard);
|
||||
__declspec(dllexport) long long __stdcall Find(LPVOID MemoryStart, DWORD MemorySize, LPVOID SearchPattern, DWORD PatternSize, LPBYTE WildCard);
|
||||
__declspec(dllexport) bool __stdcall FillEx(HANDLE hProcess, LPVOID MemoryStart, DWORD MemorySize, PBYTE FillByte);
|
||||
__declspec(dllexport) bool __stdcall Fill(LPVOID MemoryStart, DWORD MemorySize, PBYTE FillByte);
|
||||
__declspec(dllexport) bool __stdcall PatchEx(HANDLE hProcess, LPVOID MemoryStart, DWORD MemorySize, LPVOID ReplacePattern, DWORD ReplaceSize, bool AppendNOP, bool PrependNOP);
|
||||
__declspec(dllexport) bool __stdcall Patch(LPVOID MemoryStart, DWORD MemorySize, LPVOID ReplacePattern, DWORD ReplaceSize, bool AppendNOP, bool PrependNOP);
|
||||
__declspec(dllexport) bool __stdcall ReplaceEx(HANDLE hProcess, LPVOID MemoryStart, DWORD MemorySize, LPVOID SearchPattern, DWORD PatternSize, DWORD NumberOfRepetitions, LPVOID ReplacePattern, DWORD ReplaceSize, PBYTE WildCard);
|
||||
__declspec(dllexport) bool __stdcall Replace(LPVOID MemoryStart, DWORD MemorySize, LPVOID SearchPattern, DWORD PatternSize, DWORD NumberOfRepetitions, LPVOID ReplacePattern, DWORD ReplaceSize, PBYTE WildCard);
|
||||
__declspec(dllexport) void* __stdcall GetDebugData();
|
||||
__declspec(dllexport) void* __stdcall GetTerminationData();
|
||||
__declspec(dllexport) long __stdcall GetExitCode();
|
||||
__declspec(dllexport) long long __stdcall GetDebuggedDLLBaseAddress();
|
||||
__declspec(dllexport) unsigned long long __stdcall GetDebuggedFileBaseAddress();
|
||||
__declspec(dllexport) bool __stdcall GetRemoteString(HANDLE hProcess, LPVOID StringAddress, LPVOID StringStorage, int MaximumStringSize);
|
||||
__declspec(dllexport) long long __stdcall GetFunctionParameter(HANDLE hProcess, DWORD FunctionType, DWORD ParameterNumber, DWORD ParameterType);
|
||||
__declspec(dllexport) long long __stdcall GetJumpDestinationEx(HANDLE hProcess, ULONG_PTR InstructionAddress, bool JustJumps);
|
||||
__declspec(dllexport) long long __stdcall GetJumpDestination(HANDLE hProcess, ULONG_PTR InstructionAddress);
|
||||
__declspec(dllexport) bool __stdcall IsJumpGoingToExecuteEx(HANDLE hProcess, HANDLE hThread, ULONG_PTR InstructionAddress, ULONG_PTR RegFlags);
|
||||
__declspec(dllexport) bool __stdcall IsJumpGoingToExecute();
|
||||
__declspec(dllexport) void __stdcall SetCustomHandler(DWORD ExceptionId, LPVOID CallBack);
|
||||
__declspec(dllexport) void __stdcall ForceClose();
|
||||
__declspec(dllexport) void __stdcall StepInto(LPVOID traceCallBack);
|
||||
__declspec(dllexport) void __stdcall StepOver(LPVOID traceCallBack);
|
||||
__declspec(dllexport) void __stdcall SingleStep(DWORD StepCount, LPVOID StepCallBack);
|
||||
__declspec(dllexport) bool __stdcall GetUnusedHardwareBreakPointRegister(LPDWORD RegisterIndex);
|
||||
__declspec(dllexport) bool __stdcall SetHardwareBreakPointEx(HANDLE hActiveThread, ULONG_PTR bpxAddress, DWORD IndexOfRegister, DWORD bpxType, DWORD bpxSize, LPVOID bpxCallBack, LPDWORD IndexOfSelectedRegister);
|
||||
__declspec(dllexport) bool __stdcall SetHardwareBreakPoint(ULONG_PTR bpxAddress, DWORD IndexOfRegister, DWORD bpxType, DWORD bpxSize, LPVOID bpxCallBack);
|
||||
__declspec(dllexport) bool __stdcall DeleteHardwareBreakPoint(DWORD IndexOfRegister);
|
||||
__declspec(dllexport) bool __stdcall RemoveAllBreakPoints(DWORD RemoveOption);
|
||||
__declspec(dllexport) void* __stdcall GetProcessInformation();
|
||||
__declspec(dllexport) void* __stdcall GetStartupInformation();
|
||||
__declspec(dllexport) void __stdcall DebugLoop();
|
||||
__declspec(dllexport) void __stdcall SetDebugLoopTimeOut(DWORD TimeOut);
|
||||
__declspec(dllexport) void __stdcall SetNextDbgContinueStatus(DWORD SetDbgCode);
|
||||
__declspec(dllexport) bool __stdcall AttachDebugger(DWORD ProcessId, bool KillOnExit, LPVOID DebugInfo, LPVOID CallBack);
|
||||
__declspec(dllexport) bool __stdcall DetachDebugger(DWORD ProcessId);
|
||||
__declspec(dllexport) bool __stdcall DetachDebuggerEx(DWORD ProcessId);
|
||||
__declspec(dllexport) void __stdcall DebugLoopEx(DWORD TimeOut);
|
||||
__declspec(dllexport) void __stdcall AutoDebugEx(char* szFileName, bool ReserveModuleBase, char* szCommandLine, char* szCurrentFolder, DWORD TimeOut, LPVOID EntryCallBack);
|
||||
__declspec(dllexport) void __stdcall AutoDebugExW(wchar_t* szFileName, bool ReserveModuleBase, wchar_t* szCommandLine, wchar_t* szCurrentFolder, DWORD TimeOut, LPVOID EntryCallBack);
|
||||
__declspec(dllexport) bool __stdcall IsFileBeingDebugged();
|
||||
__declspec(dllexport) void __stdcall SetErrorModel(bool DisplayErrorMessages);
|
||||
// TitanEngine.FindOEP.functions:
|
||||
__declspec(dllexport) void __stdcall FindOEPInit();
|
||||
__declspec(dllexport) bool __stdcall FindOEPGenerically(char* szFileName, LPVOID TraceInitCallBack, LPVOID CallBack);
|
||||
__declspec(dllexport) bool __stdcall FindOEPGenericallyW(wchar_t* szFileName, LPVOID TraceInitCallBack, LPVOID CallBack);
|
||||
// TitanEngine.Importer.functions:
|
||||
__declspec(dllexport) void __stdcall ImporterCleanup();
|
||||
__declspec(dllexport) void __stdcall ImporterSetImageBase(ULONG_PTR ImageBase);
|
||||
__declspec(dllexport) void __stdcall ImporterSetUnknownDelta(ULONG_PTR DeltaAddress);
|
||||
__declspec(dllexport) long long __stdcall ImporterGetCurrentDelta();
|
||||
__declspec(dllexport) void __stdcall ImporterInit(DWORD MemorySize, ULONG_PTR ImageBase);
|
||||
__declspec(dllexport) void __stdcall ImporterAddNewDll(char* szDLLName, ULONG_PTR FirstThunk);
|
||||
__declspec(dllexport) void __stdcall ImporterAddNewAPI(char* szAPIName, ULONG_PTR ThunkValue);
|
||||
__declspec(dllexport) void __stdcall ImporterAddNewOrdinalAPI(ULONG_PTR OrdinalNumber, ULONG_PTR ThunkValue);
|
||||
__declspec(dllexport) long __stdcall ImporterGetAddedDllCount();
|
||||
__declspec(dllexport) long __stdcall ImporterGetAddedAPICount();
|
||||
__declspec(dllexport) void* __stdcall ImporterGetLastAddedDLLName();
|
||||
__declspec(dllexport) void __stdcall ImporterMoveIAT();
|
||||
__declspec(dllexport) bool __stdcall ImporterExportIAT(ULONG_PTR StorePlace, ULONG_PTR FileMapVA);
|
||||
__declspec(dllexport) long __stdcall ImporterEstimatedSize();
|
||||
__declspec(dllexport) bool __stdcall ImporterExportIATEx(char* szExportFileName, char* szSectionName);
|
||||
__declspec(dllexport) bool __stdcall ImporterExportIATExW(wchar_t* szExportFileName, char* szSectionName);
|
||||
__declspec(dllexport) long long __stdcall ImporterFindAPIWriteLocation(char* szAPIName);
|
||||
__declspec(dllexport) long long __stdcall ImporterFindOrdinalAPIWriteLocation(ULONG_PTR OrdinalNumber);
|
||||
__declspec(dllexport) long long __stdcall ImporterFindAPIByWriteLocation(ULONG_PTR APIWriteLocation);
|
||||
__declspec(dllexport) long long __stdcall ImporterFindDLLByWriteLocation(ULONG_PTR APIWriteLocation);
|
||||
__declspec(dllexport) void* __stdcall ImporterGetDLLName(ULONG_PTR APIAddress);
|
||||
__declspec(dllexport) void* __stdcall ImporterGetAPIName(ULONG_PTR APIAddress);
|
||||
__declspec(dllexport) long long __stdcall ImporterGetAPIOrdinalNumber(ULONG_PTR APIAddress);
|
||||
__declspec(dllexport) void* __stdcall ImporterGetAPINameEx(ULONG_PTR APIAddress, ULONG_PTR DLLBasesList);
|
||||
__declspec(dllexport) long long __stdcall ImporterGetRemoteAPIAddress(HANDLE hProcess, ULONG_PTR APIAddress);
|
||||
__declspec(dllexport) long long __stdcall ImporterGetRemoteAPIAddressEx(char* szDLLName, char* szAPIName);
|
||||
__declspec(dllexport) long long __stdcall ImporterGetLocalAPIAddress(HANDLE hProcess, ULONG_PTR APIAddress);
|
||||
__declspec(dllexport) void* __stdcall ImporterGetDLLNameFromDebugee(HANDLE hProcess, ULONG_PTR APIAddress);
|
||||
__declspec(dllexport) void* __stdcall ImporterGetAPINameFromDebugee(HANDLE hProcess, ULONG_PTR APIAddress);
|
||||
__declspec(dllexport) long long __stdcall ImporterGetAPIOrdinalNumberFromDebugee(HANDLE hProcess, ULONG_PTR APIAddress);
|
||||
__declspec(dllexport) long __stdcall ImporterGetDLLIndexEx(ULONG_PTR APIAddress, ULONG_PTR DLLBasesList);
|
||||
__declspec(dllexport) long __stdcall ImporterGetDLLIndex(HANDLE hProcess, ULONG_PTR APIAddress, ULONG_PTR DLLBasesList);
|
||||
__declspec(dllexport) long long __stdcall ImporterGetRemoteDLLBase(HANDLE hProcess, HMODULE LocalModuleBase);
|
||||
__declspec(dllexport) bool __stdcall ImporterRelocateWriteLocation(ULONG_PTR AddValue);
|
||||
__declspec(dllexport) bool __stdcall ImporterIsForwardedAPI(HANDLE hProcess, ULONG_PTR APIAddress);
|
||||
__declspec(dllexport) void* __stdcall ImporterGetForwardedAPIName(HANDLE hProcess, ULONG_PTR APIAddress);
|
||||
__declspec(dllexport) void* __stdcall ImporterGetForwardedDLLName(HANDLE hProcess, ULONG_PTR APIAddress);
|
||||
__declspec(dllexport) long __stdcall ImporterGetForwardedDLLIndex(HANDLE hProcess, ULONG_PTR APIAddress, ULONG_PTR DLLBasesList);
|
||||
__declspec(dllexport) long long __stdcall ImporterGetForwardedAPIOrdinalNumber(HANDLE hProcess, ULONG_PTR APIAddress);
|
||||
__declspec(dllexport) long long __stdcall ImporterGetNearestAPIAddress(HANDLE hProcess, ULONG_PTR APIAddress);
|
||||
__declspec(dllexport) void* __stdcall ImporterGetNearestAPIName(HANDLE hProcess, ULONG_PTR APIAddress);
|
||||
__declspec(dllexport) bool __stdcall ImporterCopyOriginalIAT(char* szOriginalFile, char* szDumpFile);
|
||||
__declspec(dllexport) bool __stdcall ImporterCopyOriginalIATW(wchar_t* szOriginalFile, wchar_t* szDumpFile);
|
||||
__declspec(dllexport) bool __stdcall ImporterLoadImportTable(char* szFileName);
|
||||
__declspec(dllexport) bool __stdcall ImporterLoadImportTableW(wchar_t* szFileName);
|
||||
__declspec(dllexport) bool __stdcall ImporterMoveOriginalIAT(char* szOriginalFile, char* szDumpFile, char* szSectionName);
|
||||
__declspec(dllexport) bool __stdcall ImporterMoveOriginalIATW(wchar_t* szOriginalFile, wchar_t* szDumpFile, char* szSectionName);
|
||||
__declspec(dllexport) void __stdcall ImporterAutoSearchIAT(HANDLE hProcess, char* szFileName, ULONG_PTR ImageBase, ULONG_PTR SearchStart, DWORD SearchSize, LPVOID pIATStart, LPVOID pIATSize);
|
||||
__declspec(dllexport) void __stdcall ImporterAutoSearchIATW(HANDLE hProcess, wchar_t* szFileName, ULONG_PTR ImageBase, ULONG_PTR SearchStart, DWORD SearchSize, LPVOID pIATStart, LPVOID pIATSize);
|
||||
__declspec(dllexport) void __stdcall ImporterAutoSearchIATEx(HANDLE hProcess, ULONG_PTR ImageBase, ULONG_PTR SearchStart, DWORD SearchSize, LPVOID pIATStart, LPVOID pIATSize);
|
||||
__declspec(dllexport) void __stdcall ImporterEnumAddedData(LPVOID EnumCallBack);
|
||||
__declspec(dllexport) long __stdcall ImporterAutoFixIATEx(HANDLE hProcess, char* szDumpedFile, char* szSectionName, bool DumpRunningProcess, bool RealignFile, ULONG_PTR EntryPointAddress, ULONG_PTR ImageBase, ULONG_PTR SearchStart, DWORD SearchSize, DWORD SearchStep, bool TryAutoFix, bool FixEliminations, LPVOID UnknownPointerFixCallback);
|
||||
__declspec(dllexport) long __stdcall ImporterAutoFixIATExW(HANDLE hProcess, wchar_t* szDumpedFile, char* szSectionName, bool DumpRunningProcess, bool RealignFile, ULONG_PTR EntryPointAddress, ULONG_PTR ImageBase, ULONG_PTR SearchStart, DWORD SearchSize, DWORD SearchStep, bool TryAutoFix, bool FixEliminations, LPVOID UnknownPointerFixCallback);
|
||||
__declspec(dllexport) long __stdcall ImporterAutoFixIAT(HANDLE hProcess, char* szDumpedFile, ULONG_PTR ImageBase, ULONG_PTR SearchStart, DWORD SearchSize, DWORD SearchStep);
|
||||
__declspec(dllexport) long __stdcall ImporterAutoFixIATW(HANDLE hProcess, wchar_t* szDumpedFile, ULONG_PTR ImageBase, ULONG_PTR SearchStart, DWORD SearchSize, DWORD SearchStep);
|
||||
// Global.Engine.Hook.functions:
|
||||
__declspec(dllexport) bool __stdcall HooksSafeTransitionEx(LPVOID HookAddressArray, int NumberOfHooks, bool TransitionStart);
|
||||
__declspec(dllexport) bool __stdcall HooksSafeTransition(LPVOID HookAddress, bool TransitionStart);
|
||||
__declspec(dllexport) bool __stdcall HooksIsAddressRedirected(LPVOID HookAddress);
|
||||
__declspec(dllexport) void* __stdcall HooksGetTrampolineAddress(LPVOID HookAddress);
|
||||
__declspec(dllexport) void* __stdcall HooksGetHookEntryDetails(LPVOID HookAddress);
|
||||
__declspec(dllexport) bool __stdcall HooksInsertNewRedirection(LPVOID HookAddress, LPVOID RedirectTo, int HookType);
|
||||
__declspec(dllexport) bool __stdcall HooksInsertNewIATRedirectionEx(ULONG_PTR FileMapVA, ULONG_PTR LoadedModuleBase, char* szHookFunction, LPVOID RedirectTo);
|
||||
__declspec(dllexport) bool __stdcall HooksInsertNewIATRedirection(char* szModuleName, char* szHookFunction, LPVOID RedirectTo);
|
||||
__declspec(dllexport) bool __stdcall HooksRemoveRedirection(LPVOID HookAddress, bool RemoveAll);
|
||||
__declspec(dllexport) bool __stdcall HooksRemoveRedirectionsForModule(HMODULE ModuleBase);
|
||||
__declspec(dllexport) bool __stdcall HooksRemoveIATRedirection(char* szModuleName, char* szHookFunction, bool RemoveAll);
|
||||
__declspec(dllexport) bool __stdcall HooksDisableRedirection(LPVOID HookAddress, bool DisableAll);
|
||||
__declspec(dllexport) bool __stdcall HooksDisableRedirectionsForModule(HMODULE ModuleBase);
|
||||
__declspec(dllexport) bool __stdcall HooksDisableIATRedirection(char* szModuleName, char* szHookFunction, bool DisableAll);
|
||||
__declspec(dllexport) bool __stdcall HooksEnableRedirection(LPVOID HookAddress, bool EnableAll);
|
||||
__declspec(dllexport) bool __stdcall HooksEnableRedirectionsForModule(HMODULE ModuleBase);
|
||||
__declspec(dllexport) bool __stdcall HooksEnableIATRedirection(char* szModuleName, char* szHookFunction, bool EnableAll);
|
||||
__declspec(dllexport) void __stdcall HooksScanModuleMemory(HMODULE ModuleBase, LPVOID CallBack);
|
||||
__declspec(dllexport) void __stdcall HooksScanEntireProcessMemory(LPVOID CallBack);
|
||||
__declspec(dllexport) void __stdcall HooksScanEntireProcessMemoryEx();
|
||||
// TitanEngine.Tracer.functions:
|
||||
__declspec(dllexport) void __stdcall TracerInit();
|
||||
__declspec(dllexport) long long __stdcall TracerLevel1(HANDLE hProcess, ULONG_PTR AddressToTrace);
|
||||
__declspec(dllexport) long long __stdcall HashTracerLevel1(HANDLE hProcess, ULONG_PTR AddressToTrace, DWORD InputNumberOfInstructions);
|
||||
__declspec(dllexport) long __stdcall TracerDetectRedirection(HANDLE hProcess, ULONG_PTR AddressToTrace);
|
||||
__declspec(dllexport) long long __stdcall TracerFixKnownRedirection(HANDLE hProcess, ULONG_PTR AddressToTrace, DWORD RedirectionId);
|
||||
__declspec(dllexport) long __stdcall TracerFixRedirectionViaImpRecPlugin(HANDLE hProcess, char* szPluginName, ULONG_PTR AddressToTrace);
|
||||
// TitanEngine.Exporter.functions:
|
||||
__declspec(dllexport) void __stdcall ExporterCleanup();
|
||||
__declspec(dllexport) void __stdcall ExporterSetImageBase(ULONG_PTR ImageBase);
|
||||
__declspec(dllexport) void __stdcall ExporterInit(DWORD MemorySize, ULONG_PTR ImageBase, DWORD ExportOrdinalBase, char* szExportModuleName);
|
||||
__declspec(dllexport) bool __stdcall ExporterAddNewExport(char* szExportName, DWORD ExportRelativeAddress);
|
||||
__declspec(dllexport) bool __stdcall ExporterAddNewOrdinalExport(DWORD OrdinalNumber, DWORD ExportRelativeAddress);
|
||||
__declspec(dllexport) long __stdcall ExporterGetAddedExportCount();
|
||||
__declspec(dllexport) long __stdcall ExporterEstimatedSize();
|
||||
__declspec(dllexport) bool __stdcall ExporterBuildExportTable(ULONG_PTR StorePlace, ULONG_PTR FileMapVA);
|
||||
__declspec(dllexport) bool __stdcall ExporterBuildExportTableEx(char* szExportFileName, char* szSectionName);
|
||||
__declspec(dllexport) bool __stdcall ExporterBuildExportTableExW(wchar_t* szExportFileName, char* szSectionName);
|
||||
__declspec(dllexport) bool __stdcall ExporterLoadExportTable(char* szFileName);
|
||||
__declspec(dllexport) bool __stdcall ExporterLoadExportTableW(wchar_t* szFileName);
|
||||
// TitanEngine.Librarian.functions:
|
||||
__declspec(dllexport) bool __stdcall LibrarianSetBreakPoint(char* szLibraryName, DWORD bpxType, bool SingleShoot, LPVOID bpxCallBack);
|
||||
__declspec(dllexport) bool __stdcall LibrarianRemoveBreakPoint(char* szLibraryName, DWORD bpxType);
|
||||
__declspec(dllexport) void* __stdcall LibrarianGetLibraryInfo(char* szLibraryName);
|
||||
__declspec(dllexport) void* __stdcall LibrarianGetLibraryInfoW(wchar_t* szLibraryName);
|
||||
__declspec(dllexport) void* __stdcall LibrarianGetLibraryInfoEx(void* BaseOfDll);
|
||||
__declspec(dllexport) void* __stdcall LibrarianGetLibraryInfoExW(void* BaseOfDll);
|
||||
__declspec(dllexport) void __stdcall LibrarianEnumLibraryInfo(void* EnumCallBack);
|
||||
__declspec(dllexport) void __stdcall LibrarianEnumLibraryInfoW(void* EnumCallBack);
|
||||
// TitanEngine.Process.functions:
|
||||
__declspec(dllexport) long __stdcall GetActiveProcessId(char* szImageName);
|
||||
__declspec(dllexport) long __stdcall GetActiveProcessIdW(wchar_t* szImageName);
|
||||
__declspec(dllexport) void __stdcall EnumProcessesWithLibrary(char* szLibraryName, void* EnumFunction);
|
||||
// TitanEngine.TLSFixer.functions:
|
||||
__declspec(dllexport) bool __stdcall TLSBreakOnCallBack(LPVOID ArrayOfCallBacks, DWORD NumberOfCallBacks, LPVOID bpxCallBack);
|
||||
__declspec(dllexport) bool __stdcall TLSGrabCallBackData(char* szFileName, LPVOID ArrayOfCallBacks, LPDWORD NumberOfCallBacks);
|
||||
__declspec(dllexport) bool __stdcall TLSGrabCallBackDataW(wchar_t* szFileName, LPVOID ArrayOfCallBacks, LPDWORD NumberOfCallBacks);
|
||||
__declspec(dllexport) bool __stdcall TLSBreakOnCallBackEx(char* szFileName, LPVOID bpxCallBack);
|
||||
__declspec(dllexport) bool __stdcall TLSBreakOnCallBackExW(wchar_t* szFileName, LPVOID bpxCallBack);
|
||||
__declspec(dllexport) bool __stdcall TLSRemoveCallback(char* szFileName);
|
||||
__declspec(dllexport) bool __stdcall TLSRemoveCallbackW(wchar_t* szFileName);
|
||||
__declspec(dllexport) bool __stdcall TLSRemoveTable(char* szFileName);
|
||||
__declspec(dllexport) bool __stdcall TLSRemoveTableW(wchar_t* szFileName);
|
||||
__declspec(dllexport) bool __stdcall TLSBackupData(char* szFileName);
|
||||
__declspec(dllexport) bool __stdcall TLSBackupDataW(wchar_t* szFileName);
|
||||
__declspec(dllexport) bool __stdcall TLSRestoreData();
|
||||
__declspec(dllexport) bool __stdcall TLSBuildNewTable(ULONG_PTR FileMapVA, ULONG_PTR StorePlace, ULONG_PTR StorePlaceRVA, LPVOID ArrayOfCallBacks, DWORD NumberOfCallBacks);
|
||||
__declspec(dllexport) bool __stdcall TLSBuildNewTableEx(char* szFileName, char* szSectionName, LPVOID ArrayOfCallBacks, DWORD NumberOfCallBacks);
|
||||
__declspec(dllexport) bool __stdcall TLSBuildNewTableExW(wchar_t* szFileName, char* szSectionName, LPVOID ArrayOfCallBacks, DWORD NumberOfCallBacks);
|
||||
// TitanEngine.TranslateName.functions:
|
||||
__declspec(dllexport) void* __stdcall TranslateNativeName(char* szNativeName);
|
||||
__declspec(dllexport) void* __stdcall TranslateNativeNameW(wchar_t* szNativeName);
|
||||
// TitanEngine.Handler.functions:
|
||||
__declspec(dllexport) long __stdcall HandlerGetActiveHandleCount(DWORD ProcessId);
|
||||
__declspec(dllexport) bool __stdcall HandlerIsHandleOpen(DWORD ProcessId, HANDLE hHandle);
|
||||
__declspec(dllexport) void* __stdcall HandlerGetHandleName(HANDLE hProcess, DWORD ProcessId, HANDLE hHandle, bool TranslateName);
|
||||
__declspec(dllexport) void* __stdcall HandlerGetHandleNameW(HANDLE hProcess, DWORD ProcessId, HANDLE hHandle, bool TranslateName);
|
||||
__declspec(dllexport) long __stdcall HandlerEnumerateOpenHandles(DWORD ProcessId, LPVOID HandleBuffer, DWORD MaxHandleCount);
|
||||
__declspec(dllexport) long long __stdcall HandlerGetHandleDetails(HANDLE hProcess, DWORD ProcessId, HANDLE hHandle, DWORD InformationReturn);
|
||||
__declspec(dllexport) bool __stdcall HandlerCloseRemoteHandle(HANDLE hProcess, HANDLE hHandle);
|
||||
__declspec(dllexport) long __stdcall HandlerEnumerateLockHandles(char* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated, LPVOID HandleDataBuffer, DWORD MaxHandleCount);
|
||||
__declspec(dllexport) long __stdcall HandlerEnumerateLockHandlesW(wchar_t* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated, LPVOID HandleDataBuffer, DWORD MaxHandleCount);
|
||||
__declspec(dllexport) bool __stdcall HandlerCloseAllLockHandles(char* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated);
|
||||
__declspec(dllexport) bool __stdcall HandlerCloseAllLockHandlesW(wchar_t* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated);
|
||||
__declspec(dllexport) bool __stdcall HandlerIsFileLocked(char* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated);
|
||||
__declspec(dllexport) bool __stdcall HandlerIsFileLockedW(wchar_t* szFileOrFolderName, bool NameIsFolder, bool NameIsTranslated);
|
||||
// TitanEngine.Handler[Mutex].functions:
|
||||
__declspec(dllexport) long __stdcall HandlerEnumerateOpenMutexes(HANDLE hProcess, DWORD ProcessId, LPVOID HandleBuffer, DWORD MaxHandleCount);
|
||||
__declspec(dllexport) long long __stdcall HandlerGetOpenMutexHandle(HANDLE hProcess, DWORD ProcessId, char* szMutexString);
|
||||
__declspec(dllexport) long long __stdcall HandlerGetOpenMutexHandleW(HANDLE hProcess, DWORD ProcessId, wchar_t* szMutexString);
|
||||
__declspec(dllexport) long __stdcall HandlerGetProcessIdWhichCreatedMutex(char* szMutexString);
|
||||
__declspec(dllexport) long __stdcall HandlerGetProcessIdWhichCreatedMutexW(wchar_t* szMutexString);
|
||||
// TitanEngine.Injector.functions:
|
||||
__declspec(dllexport) bool __stdcall RemoteLoadLibrary(HANDLE hProcess, char* szLibraryFile, bool WaitForThreadExit);
|
||||
__declspec(dllexport) bool __stdcall RemoteLoadLibraryW(HANDLE hProcess, wchar_t* szLibraryFile, bool WaitForThreadExit);
|
||||
__declspec(dllexport) bool __stdcall RemoteFreeLibrary(HANDLE hProcess, HMODULE hModule, char* szLibraryFile, bool WaitForThreadExit);
|
||||
__declspec(dllexport) bool __stdcall RemoteFreeLibraryW(HANDLE hProcess, HMODULE hModule, wchar_t* szLibraryFile, bool WaitForThreadExit);
|
||||
__declspec(dllexport) bool __stdcall RemoteExitProcess(HANDLE hProcess, DWORD ExitCode);
|
||||
// TitanEngine.StaticUnpacker.functions:
|
||||
__declspec(dllexport) bool __stdcall StaticFileLoad(char* szFileName, DWORD DesiredAccess, bool SimulateLoad, LPHANDLE FileHandle, LPDWORD LoadedSize, LPHANDLE FileMap, PULONG_PTR FileMapVA);
|
||||
__declspec(dllexport) bool __stdcall StaticFileLoadW(wchar_t* szFileName, DWORD DesiredAccess, bool SimulateLoad, LPHANDLE FileHandle, LPDWORD LoadedSize, LPHANDLE FileMap, PULONG_PTR FileMapVA);
|
||||
__declspec(dllexport) bool __stdcall StaticFileUnload(char* szFileName, bool CommitChanges, HANDLE FileHandle, DWORD LoadedSize, HANDLE FileMap, ULONG_PTR FileMapVA);
|
||||
__declspec(dllexport) bool __stdcall StaticFileUnloadW(wchar_t* szFileName, bool CommitChanges, HANDLE FileHandle, DWORD LoadedSize, HANDLE FileMap, ULONG_PTR FileMapVA);
|
||||
__declspec(dllexport) bool __stdcall StaticFileOpen(char* szFileName, DWORD DesiredAccess, LPHANDLE FileHandle, LPDWORD FileSizeLow, LPDWORD FileSizeHigh);
|
||||
__declspec(dllexport) bool __stdcall StaticFileOpenW(wchar_t* szFileName, DWORD DesiredAccess, LPHANDLE FileHandle, LPDWORD FileSizeLow, LPDWORD FileSizeHigh);
|
||||
__declspec(dllexport) bool __stdcall StaticFileGetContent(HANDLE FileHandle, DWORD FilePositionLow, LPDWORD FilePositionHigh, void* Buffer, DWORD Size);
|
||||
__declspec(dllexport) void __stdcall StaticFileClose(HANDLE FileHandle);
|
||||
__declspec(dllexport) void __stdcall StaticMemoryDecrypt(LPVOID MemoryStart, DWORD MemorySize, DWORD DecryptionType, DWORD DecryptionKeySize, ULONG_PTR DecryptionKey);
|
||||
__declspec(dllexport) void __stdcall StaticMemoryDecryptEx(LPVOID MemoryStart, DWORD MemorySize, DWORD DecryptionKeySize, void* DecryptionCallBack);
|
||||
__declspec(dllexport) void __stdcall StaticMemoryDecryptSpecial(LPVOID MemoryStart, DWORD MemorySize, DWORD DecryptionKeySize, DWORD SpecDecryptionType, void* DecryptionCallBack);
|
||||
__declspec(dllexport) void __stdcall StaticSectionDecrypt(ULONG_PTR FileMapVA, DWORD SectionNumber, bool SimulateLoad, DWORD DecryptionType, DWORD DecryptionKeySize, ULONG_PTR DecryptionKey);
|
||||
__declspec(dllexport) bool __stdcall StaticMemoryDecompress(void* Source, DWORD SourceSize, void* Destination, DWORD DestinationSize, int Algorithm);
|
||||
__declspec(dllexport) bool __stdcall StaticRawMemoryCopy(HANDLE hFile, ULONG_PTR FileMapVA, ULONG_PTR VitualAddressToCopy, DWORD Size, bool AddressIsRVA, char* szDumpFileName);
|
||||
__declspec(dllexport) bool __stdcall StaticRawMemoryCopyW(HANDLE hFile, ULONG_PTR FileMapVA, ULONG_PTR VitualAddressToCopy, DWORD Size, bool AddressIsRVA, wchar_t* szDumpFileName);
|
||||
__declspec(dllexport) bool __stdcall StaticRawMemoryCopyEx(HANDLE hFile, DWORD RawAddressToCopy, DWORD Size, char* szDumpFileName);
|
||||
__declspec(dllexport) bool __stdcall StaticRawMemoryCopyExW(HANDLE hFile, DWORD RawAddressToCopy, DWORD Size, wchar_t* szDumpFileName);
|
||||
__declspec(dllexport) bool __stdcall StaticRawMemoryCopyEx64(HANDLE hFile, DWORD64 RawAddressToCopy, DWORD64 Size, char* szDumpFileName);
|
||||
__declspec(dllexport) bool __stdcall StaticRawMemoryCopyEx64W(HANDLE hFile, DWORD64 RawAddressToCopy, DWORD64 Size, wchar_t* szDumpFileName);
|
||||
__declspec(dllexport) bool __stdcall StaticHashMemory(void* MemoryToHash, DWORD SizeOfMemory, void* HashDigest, bool OutputString, int Algorithm);
|
||||
__declspec(dllexport) bool __stdcall StaticHashFileW(wchar_t* szFileName, char* HashDigest, bool OutputString, int Algorithm);
|
||||
__declspec(dllexport) bool __stdcall StaticHashFile(char* szFileName, char* HashDigest, bool OutputString, int Algorithm);
|
||||
// TitanEngine.Engine.functions:
|
||||
__declspec(dllexport) void __stdcall EngineUnpackerInitialize(char* szFileName, char* szUnpackedFileName, bool DoLogData, bool DoRealignFile, bool DoMoveOverlay, void* EntryCallBack);
|
||||
__declspec(dllexport) void __stdcall EngineUnpackerInitializeW(wchar_t* szFileName, wchar_t* szUnpackedFileName, bool DoLogData, bool DoRealignFile, bool DoMoveOverlay, void* EntryCallBack);
|
||||
__declspec(dllexport) bool __stdcall EngineUnpackerSetBreakCondition(void* SearchStart, DWORD SearchSize, void* SearchPattern, DWORD PatternSize, DWORD PatternDelta, ULONG_PTR BreakType, bool SingleBreak, DWORD Parameter1, DWORD Parameter2);
|
||||
__declspec(dllexport) void __stdcall EngineUnpackerSetEntryPointAddress(ULONG_PTR UnpackedEntryPointAddress);
|
||||
__declspec(dllexport) void __stdcall EngineUnpackerFinalizeUnpacking();
|
||||
// TitanEngine.Engine.functions:
|
||||
__declspec(dllexport) void __stdcall SetEngineVariable(DWORD VariableId, bool VariableSet);
|
||||
__declspec(dllexport) bool __stdcall EngineCreateMissingDependencies(char* szFileName, char* szOutputFolder, bool LogCreatedFiles);
|
||||
__declspec(dllexport) bool __stdcall EngineCreateMissingDependenciesW(wchar_t* szFileName, wchar_t* szOutputFolder, bool LogCreatedFiles);
|
||||
__declspec(dllexport) bool __stdcall EngineFakeMissingDependencies(HANDLE hProcess);
|
||||
__declspec(dllexport) bool __stdcall EngineDeleteCreatedDependencies();
|
||||
__declspec(dllexport) bool __stdcall EngineCreateUnpackerWindow(char* WindowUnpackerTitle, char* WindowUnpackerLongTitle, char* WindowUnpackerName, char* WindowUnpackerAuthor, void* StartUnpackingCallBack);
|
||||
__declspec(dllexport) void __stdcall EngineAddUnpackerWindowLogMessage(char* szLogMessage);
|
||||
// Global.Engine.Extension.Functions:
|
||||
__declspec(dllexport) bool __stdcall ExtensionManagerIsPluginLoaded(char* szPluginName);
|
||||
__declspec(dllexport) bool __stdcall ExtensionManagerIsPluginEnabled(char* szPluginName);
|
||||
__declspec(dllexport) bool __stdcall ExtensionManagerDisableAllPlugins();
|
||||
__declspec(dllexport) bool __stdcall ExtensionManagerDisablePlugin(char* szPluginName);
|
||||
__declspec(dllexport) bool __stdcall ExtensionManagerEnableAllPlugins();
|
||||
__declspec(dllexport) bool __stdcall ExtensionManagerEnablePlugin(char* szPluginName);
|
||||
__declspec(dllexport) bool __stdcall ExtensionManagerUnloadAllPlugins();
|
||||
__declspec(dllexport) bool __stdcall ExtensionManagerUnloadPlugin(char* szPluginName);
|
||||
__declspec(dllexport) void* __stdcall ExtensionManagerGetPluginInfo(char* szPluginName);
|
||||
|
||||
#ifdef __cplusplus
|
||||
}
|
||||
#endif
|
||||
|
||||
#pragma pack(pop)
|
||||
|
||||
#endif /*TITANENGINE*/
|
||||
|
|
@ -39,9 +39,9 @@
|
|||
|
||||
#define UE_OPTION_IMPORTER_REALIGN_LOCAL_APIADDRESS 0
|
||||
#define UE_OPTION_IMPORTER_REALIGN_APIADDRESS 1
|
||||
#define UE_OPTION_IMPORTER_RETURN_APINAME 2
|
||||
#define UE_OPTION_IMPORTER_RETURN_APINAME 2 //no kernelbase
|
||||
#define UE_OPTION_IMPORTER_RETURN_APIADDRESS 3
|
||||
#define UE_OPTION_IMPORTER_RETURN_DLLNAME 4
|
||||
#define UE_OPTION_IMPORTER_RETURN_DLLNAME 4 //no kernelbase
|
||||
#define UE_OPTION_IMPORTER_RETURN_DLLINDEX 5
|
||||
#define UE_OPTION_IMPORTER_RETURN_DLLBASE 6
|
||||
#define UE_OPTION_IMPORTER_RETURN_FORWARDER_DLLNAME 7
|
||||
|
|
@ -404,6 +404,7 @@ typedef struct{
|
|||
#define UE_HARDWARE_SIZE_1 7
|
||||
#define UE_HARDWARE_SIZE_2 8
|
||||
#define UE_HARDWARE_SIZE_4 9
|
||||
#define UE_HARDWARE_SIZE_8 10
|
||||
|
||||
#define UE_APISTART 0
|
||||
#define UE_APIEND 1
|
||||
|
|
|
|||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Loading…
Reference in New Issue