Commit Graph

235 Commits

Author SHA1 Message Date
cypherpunk cf3b7d49cd fixed FindAPIWriteLocation, findOrdinalWriteLocation, FindDLLByWriteLocation, FindAPIByWriteLocation tow rok with scylla 2014-01-21 21:33:22 +01:00
cypherpunk a1ee5dacc0 fixed AddNewDLL, AddNewAPI to work with scylla 2014-01-21 01:22:56 +01:00
cypherpunk e93e35b36f fixed EstimatedSize() to work with scylla 2014-01-20 17:29:24 +01:00
cypherpunk 29d9d8ec5f fixed EnumAddedData to work with scylla 2014-01-19 23:41:07 +01:00
cypherpunk 22cc4da708 fixed getAddedDLLCount, getAddedAPICount to work with scylla 2014-01-19 00:05:36 +01:00
mr.exodia 4bda97ecba - updated codeblocks project
- update scylla_wrapper_x64
- AStyle formatting
- TCHAR->WCHAR (somehow didn't compile here), also explicit lstrcatW/lstrcpyW
2014-01-16 21:16:03 +01:00
cypherpunk b29e53cd16 commented all functions that are either obsolete or need change since scylla integration. see scylla_integration.txt 2014-01-16 14:48:00 +01:00
cypherpunk 095950b16d added Importer::DeleteAPI export for deleting an API out of the parsed/read IAT, x64 still needs to be updated 2014-01-16 01:41:59 +01:00
deepzero 23b1e56949 fix compiling of resources without MFC headers 2014-01-15 22:33:15 +01:00
deepzero 19859f87a4 added inclusion guard for definitions.h 2014-01-15 22:32:33 +01:00
deepzero e80e2db7df fix brackets with #defines 2014-01-15 22:32:16 +01:00
cypherpunk d732ec290e the callback for invalid imports is now working again 2014-01-15 22:00:34 +01:00
deepzero 89472363f0 fix: dont write trash to file, when ReadFile() fails 2014-01-15 11:59:42 +01:00
deepzero f3ba7d14a7 cosmetics 2014-01-15 11:36:38 +01:00
deepzero e22d5b1131 replaced some RtlMemMove opartions by proper casts (far from all) 2014-01-15 11:36:22 +01:00
deepzero 2677e3f1cd replaces some (far from all) RtlMemMove by RtlMemCopy, some more memory init. fixes 2014-01-15 11:34:46 +01:00
deepzero 75ea5b7f51 various improvements and bugfixes to initialization of memory
- far, far, far from complete.
2014-01-15 11:32:00 +01:00
deepzero 88fcd342ce update gitignore for msvc debug builds 2014-01-15 08:57:53 +01:00
deepzero b4bdd28c24 fix memcmp madness 2014-01-15 08:53:16 +01:00
deepzero 96d3677054 fix invalid winapi comparison: BOOL should not be compared to TRUE 2014-01-15 08:52:01 +01:00
deepzero 38082ded2e fix potential use of uninitialized variable 2014-01-15 08:51:25 +01:00
deepzero 8a6f73bf40 fix various signedness issues 2014-01-15 08:51:10 +01:00
deepzero de4d2705ab fix return NULL instead of false 2014-01-15 08:50:28 +01:00
deepzero 8932b34738 fix use of potentially uninitialized handles 2014-01-15 08:49:53 +01:00
deepzero 40698229f0 fix wchar_t array too large 2014-01-15 08:49:14 +01:00
deepzero 1f1e3ad8f1 fix msvc compiler error 2014-01-15 08:48:26 +01:00
cypherpunk d04759b242 fixed AutoFixIATExW, now it can dump again 2014-01-15 00:20:52 +01:00
cypherpunk d5d24e5c05 fixed AutoSearchIATEx, now it can dump again 2014-01-15 00:09:27 +01:00
cypherpunk 21ba78ee13 forgot obsolete parameter in C++ SDK header 2014-01-15 00:05:52 +01:00
mr.exodia 402a80bffb - fixed x64 (scylla)
- fixed x64 debug configuration
2014-01-14 19:51:35 +01:00
cypherpunk cfb052280e fixed ExportIAT to work for FileMapping with Scylla 2014-01-14 18:00:11 +01:00
cypherpunk 2c1639d6cc custom section name support 2014-01-13 00:17:04 +01:00
cypherpunk 86abf46dbe fix for ExportIATEx 2014-01-12 23:01:38 +01:00
cypherpunk d0a5b10884 forgot sth with: removed obsolete parameter imageBase 2014-01-12 22:05:54 +01:00
cypherpunk 3085c44b31 updated C++ SDK 2014-01-12 20:01:21 +01:00
cypherpunk 65d4cff823 removed obsolete parameter imageBase 2014-01-12 20:00:51 +01:00
cypherpunk ba4754b215 fix for ExportIAT(..) functionality 2014-01-12 17:23:32 +01:00
cypherpunk 86ed5042aa updated to use scylla:
ImporterExportIAT
- broken, scylla_wrapper needs to be updated to support export to VA

ImporterExportIATEx
ImporterExportIATExW
2014-01-12 17:05:40 +01:00
cypherpunk c74ac34963 refactored functions to use scylla:
ImporterAutoSearchIAT(DWORD ProcessId
ImporterAutoSearchIATW(DWORD ProcessId
ImporterAutoSearchIATEx(DWORD ProcessId

- these now have process ID as first param, not handle

ImporterAutoFixIATEx
ImporterAutoFixIATExW
ImporterAutoFixIAT
ImporterAutoFixIATW
- first param now DWORD pid
- params imagebase, searchSize, searchStep now obsolete
2014-01-12 16:24:45 +01:00
cypherpunk 52aade33ba updated definitions for scylla 2014-01-12 16:23:14 +01:00
cypherpunk b937b325a6 updated scylla_wrapper lib so TE actually links 2014-01-12 14:34:30 +01:00
cypherpunk 0d498c4939 updated distorm lib to v3, x64 is still missing ! 2014-01-12 14:33:18 +01:00
cypherpunk cca6728a2d updated gitignore to the GitHub standard for C++/VS 2014-01-12 14:32:16 +01:00
cypherpunk 52378f910f started work on scylla integration 2014-01-12 00:36:31 +01:00
mr.exodia 9dca34e3b8 fixed two bugs with dynamically imported winapi functions 2013-12-25 15:10:38 +01:00
mr.exodia 3cd9d2da3e updated definitions 2013-12-23 13:16:01 +01:00
cypherpunk eebf60323a you can now set UE_SECTIONNAME doestn just return false. lazy RL guys ^^ 2013-12-18 15:53:28 +01:00
cypherpunk d251983720 added UE_BASEOFCODE / UE_BASEOFDATA to Dumper::GetPE32 / Dumper::SetPE32 functions 2013-12-18 15:03:25 +01:00
cypherpunk e7714c7c27 - disabled exception handling for "Debug" which caused it not to build
- Runtime changed to /MTD
2013-12-18 14:14:45 +01:00
cypherpunk 9cd244db3e - fixed mainly const char* vs char*
- not copy paste, kept return datatypes typedef free (ULONG_PTR vs long long etc)
- some WIN64 defines added (not tested but copied from TitanScript)

changed classes (const char* vs char*):
- DumperA, DumperW, DumperX
- DebuggerA, DebuggerW, DebuggerX
- ImporterA, ImporterW, ImporterX
- RealignerA, RealignerW, RealignerX
- RelocaterA, RelocaterW, RelocaterX
- Tracer
- ExporterA, ExporterW, ExporterX
- LibrarianA, LibrarianW, LibrarianX
- TLSA, TLSW, TLSX
- StaticA, StaticW, StaticX
- RemoteA, RemoteW, RemoteX

not changed but might need changes:
- Threader, Resourcer, Hooks, Process, Handler, Extension, Engine, Translate

doesnt need changes:
- Hider
2013-12-09 12:04:01 +01:00