Commit Graph

342 Commits

Author SHA1 Message Date
Mr. eXoDia fc51e0d144 - added StepOut function 2014-03-12 14:49:36 +01:00
Mr. eXoDia 4230d3c986 ? 2014-03-12 14:40:39 +01:00
Mr. eXoDia 2e37c68d43 fixed Global.Debugger.h 2014-03-12 14:39:12 +01:00
Mr. eXoDia 40bd9878c8 - fixed EngineGetModuleBaseRemote (tested&working)
- fixed EngineGetAPINameRemote (tested&working)
- added EngineGetAPIOrdinalRemote (tested&working)
- fixed ImporterGetAPIName & ImporterGetAPINameFromDebugee
- fixed ImporterGetAPIOrdinalNumber & ImporterGetAPIOrdinalNumberFromDebugee
2014-03-12 12:51:22 +01:00
Mr. eXoDia 6dd96b8384 - added function EngineGetAPINameRemote (untested yet) 2014-03-12 11:37:21 +01:00
deep0 3cb15ef49f removed _try..._catch blocks that prevented a successfull compilation with DynBuf 2014-03-12 10:38:24 +01:00
Mr. eXoDia 61fdb34693 - formatting 2014-03-12 09:54:13 +01:00
Mr. eXoDia cf37f2a9e9 resolved some compiling problems 2014-03-12 09:47:49 +01:00
Mr. eXoDia c5e260d7d7 Merge branch 'dynmem'
Conflicts:
	TitanEngine/TitanEngine.Breakpoints.cpp
	TitanEngine/TitanEngine.Dumper.cpp
	TitanEngine/TitanEngine.Handler.cpp
	TitanEngine/TitanEngine.PE.Overlay.cpp
	TitanEngine/TitanEngine.Static.cpp
	TitanEngine/TitanEngine.vcxproj.filters
2014-03-12 09:41:14 +01:00
Mr. eXoDia d8f86da5ff resolved issue #29 2014-03-12 09:25:00 +01:00
deep0 d94af70dd0 enable c++ exceptions -> warning-free compile 2014-03-12 02:03:21 +01:00
deep0 5d437ad23d performance 2014-03-12 02:02:55 +01:00
deep0 3718dca0f8 reduce hardcoded buffer sizes 2014-03-12 02:02:38 +01:00
deep0 ef8ad17f62 move external includes to stdafx 2014-03-12 02:02:09 +01:00
deep0 48c8a7820a fix buffer overflow 2014-03-12 02:01:01 +01:00
Mr. eXoDia 7b8f6f4656 - more cleaning of the project 2014-03-12 00:28:05 +01:00
Mr. eXoDia 485be8bbf8 - fixed a small bug in the GUI, taskbar entry should now also have an icon
- removed useless icon sizes (256x256, 128x128 and 64x64) -> 15kb icon
- removed HEADER.BPM -> saves ~200kb
- cleaned up the project a little
2014-03-12 00:07:01 +01:00
Mr. eXoDia dd3727a3b3 - optimizations for Release mode (tested&working) 2014-03-11 23:31:42 +01:00
NtQuery ccb750340c Merge branch 'master' of https://bitbucket.org/mrexodia/titanengine-update 2014-03-11 22:45:31 +01:00
NtQuery b476b0cc5b bug fixes, unicode fixes 2014-03-11 22:45:06 +01:00
Mr. eXoDia 781241a85e - removed scylla_wrapperd 2014-03-11 22:43:49 +01:00
Mr. eXoDia 3675215bf3 - added a debug callback reason for plugins -> UE_PLUGIN_CALL_REASON_UNHANDLEDEXCEPTION
- now plugins are actually registered
- fixed OUTPUT_DEBUG_STRING_EVENT (DBGCode should be set before the callback, so plugins & custom handlers can change it)
2014-03-11 16:14:49 +01:00
Mr. eXoDia 8adda5ee1e - better PluginInformation structure (normal callback definitions) 2014-03-11 15:57:17 +01:00
Mr. eXoDia b4ca7616c9 Merge branch 'master' of bitbucket.org:mrexodia/titanengine-update 2014-03-11 15:37:49 +01:00
Mr. eXoDia 708485a5ce - renamed EngineGetAPIAddressRemote & EngineGetAPIAddressLocal
- updated .def file
2014-03-11 15:36:57 +01:00
cypherpunk 2a5ceba10e Merge branch 'master' of bitbucket.org:mrexodia/titanengine-update 2014-03-11 15:33:02 +01:00
Mr. eXoDia 96d726d156 - fixed ImporterGetRemoteDLLBase 2014-03-11 15:32:46 +01:00
cypherpunk 502b50312a missing leading backslash in plugin path caused plugins not being founds 2014-03-11 15:32:34 +01:00
Mr. eXoDia 085e6ae7a9 - added function ImporterGetDLLNameFromDebugeeW
- fixed function ImporterGetDLLNameFromDebugee
- added function EngineGetModuleBaseRemote
- added function EngineGetAPIAddressRemote
- added function EngineGetAPIAddressLocal
- fixed a potential bug in SetAPIBreakPoint & DeleteAPIBreakPoint
- fixed ImpoerterGetDLLName (this function is used on the local process)
- fixed function ImporterGetDLLNameW & ImporterGetDLLName
- moved fixed functions up
2014-03-11 15:25:17 +01:00
Mr. eXoDia 5e5dac1186 - fixed the function EngineGetProcAddressRemote (now supports any number of modules)
- added the function EngineGetModuleBaseRemote
- added export ImporterGetDLLNameW
- fixed export ImporterGetDLLName
2014-03-11 14:53:11 +01:00
NtQuery e60e886cf5 UNICODE-FIX engine improvement 2014-03-11 12:48:16 +01:00
NtQuery a742815814 UNICODE-FIX new ImporterGetRemoteDLLBaseExW 2014-03-11 12:33:06 +01:00
Mr. eXoDia 7d8be98087 - fixed a critical bug in the breakpoint filters
- support for kernel32 -> kernelbase forwarding in SetAPIBreakPoint
2014-03-11 00:50:09 +01:00
mr.exodia f8b46a7a5c - moved GetProcAddressRemote to Global.Engine.Importer
- added various GetProcAddressRemote functions (for easier access)
- Use EngineGetProcAddressRemote in Global.Engine.Hider
- changed MAXIMUM_INSTRUCTION_SIZE to the x86 maximum size
- rewrote SetAPIBreakPoint (untested)
- rewrote DeleteAPIBreakPoint (untested)
2014-03-10 23:37:12 +01:00
NtQuery fd87e8d479 improved ImporterGetRemoteAPIAddressEx 2014-03-10 22:21:21 +01:00
Mr. eXoDia f2d5cec2cc - fixed a bug with plugin loading (plugins were never added to the plugin list) 2014-03-10 21:05:55 +01:00
Mr. eXoDia dcba075a5a renamed NewDebug to Debug 2014-03-10 19:45:13 +01:00
Mr. eXoDia 19dc36d4b0 - NewDebug configuration (temp commit) 2014-03-10 19:37:40 +01:00
Mr. eXoDia 9b21c215c6 - resolved issue #11 2014-03-10 16:47:56 +01:00
Mr. eXoDia 3963d18771 - implemented MemoryWriteSafe
- renamed FilterBreakPoints
- fixed a bug in EnableBPX (now it re-reads the original bytes)
2014-03-10 01:23:05 +01:00
Mr. eXoDia 92eb890c7f - MemoryReadSafe now actually filters breakpoints out of the buffer 2014-03-10 00:42:30 +01:00
Mr. eXoDia 93a8582044 - some new idea, see issue #23
- updated c++ header
2014-03-09 23:10:42 +01:00
Mr. eXoDia a8628215dc - merge conflicts 2014-03-09 22:48:20 +01:00
Mr. eXoDia 97e00e86a4 - resolved issue #22 (dll debugging not working)
- resolved hanging functions in TitanEngine.PE.*
- fixed issues with differences between debug and release builds (caused crashes)
2014-03-09 22:44:13 +01:00
Mr. eXoDia c51b7ac6bb - fixed various project compile/link flags
- using UE_TRAP_FLAG
2014-03-09 22:41:38 +01:00
NtQuery a51f2455ba updated some header and def files 2014-03-09 22:18:21 +01:00
NtQuery 1f4b6de250 fixed EnumProcessModules problems, improved dumper, added new function ReadProcessMemoryEnforce 2014-03-09 22:03:45 +01:00
NtQuery d29b17795c fixed DumpProcessW bugs 2014-03-09 16:59:06 +01:00
NtQuery 829c0e77ba kind of fixed Issue #15 https://bitbucket.org/mrexodia/titanengine-update/issue/15/wrong-assumptoin-about-page-size 2014-03-09 16:18:58 +01:00
Mr. eXoDia 6bdbe09afe - renamed Helper to Global.Helper
- added Global.Helper to the project files
2014-03-08 20:32:11 +01:00
Mr. eXoDia 64bfce97c1 - more fixes for issue #8 2014-03-08 20:22:20 +01:00
Mr. eXoDia 6d23bb68a6 resolved issue #14 2014-03-08 20:12:15 +01:00
Mr. eXoDia b5433a45b1 - resolved issue #8 2014-03-08 20:03:48 +01:00
cypherpunk f0b9f919ee fixed a critical bug that caused Importer::ExportIATEx to crash 2014-03-08 19:53:15 +01:00
Mr. eXoDia 3bfbece7c1 - cleared up issue #13 2014-03-08 19:55:16 +01:00
Mr. eXoDia a322cabe19 resolved issue #10 2014-03-08 19:50:39 +01:00
Mr. eXoDia bc75cfe305 - resolved issue #20 (problems with MapFileAndCheckSumW) 2014-03-08 19:38:27 +01:00
deepzero 68a5a4b7a0 drop VirtualProtect in favor of a DynamicBuffer 2014-03-08 14:47:04 +01:00
deepzero 772c6dbeda drop VirtualAlloc in favor of local variables 2014-03-08 14:44:30 +01:00
deepzero ec558397a7 fix uninitialized pointer 2014-03-08 14:36:54 +01:00
deepzero 7f05518560 add DynBuf dynamic buffer class and IsStrEqual() (unused) 2014-03-08 14:34:19 +01:00
Mr. eXoDia 41c8fa80c3 - fixed a problem with the ExceptionRecord.ExceptionInformation[0] detection for memory breakpoints 2014-03-07 22:07:43 +01:00
deepzero 7bef35b1cf fix two double frees 2014-03-07 18:04:13 +01:00
deepzero 7f1e44bda7 fix some potential underflows (more to come) 2014-03-07 18:03:59 +01:00
deepzero e7deed5ef4 dont directly compare against TRUE 2014-03-07 18:03:25 +01:00
NtQuery a3384e931f fixed various dumper bugs, openprocess bugs 2014-03-07 13:14:46 +01:00
NtQuery 35c3c618b1 added Teb32 and Teb64 functions 2014-03-06 20:17:14 +01:00
mr.exodia 2770c22838 - TitanEngine.Debugger now uses dynamic lists
- TitanEngine.Librarian now uses dynamic lists
2014-03-05 19:57:49 +01:00
mr.exodia bc7906460c - formatting lol
- rewrote TitanEngine.Threader to use a vector (decreased memory footprint)
- Removed function ThreadGetThreadData
2014-03-05 17:49:27 +01:00
cypherpunk 4dfc0351f7 updated Scylla wrapper to 0.9.4 2014-03-05 17:26:31 +01:00
NtQuery 9eb47c282d removed ntdll madness 2014-03-05 14:28:08 +01:00
NtQuery 8984545393 update aPLib v1.1.0 + x64 2014-03-05 11:35:22 +01:00
NtQuery 23b12636c2 hider bugfix 2014-03-05 11:15:54 +01:00
mr.exodia 87e9e7c461 - added x64 API patches 2014-03-05 00:01:24 +01:00
mr.exodia 9502654a71 - heap flags are now hidden 2014-03-04 23:31:16 +01:00
mr.exodia e265f498d0 - removed some useless defines
- added GetPEBLocation64 to the SDK files
- GetPEBLocation is also defined on x64, but does nothing there
- moved a function to Global.Engine.Hider
2014-03-04 21:31:04 +01:00
mr.exodia 92451cfe42 - removed SetBPXEx (condentional breakpoints are removed now)
- no more static breakpoint list
- huge refactoring
- bugs fixed in TitanEngine.Breakpoints
2014-03-04 21:07:07 +01:00
NtQuery ef9ed7ae1f better hidedebugger code, started heap flag 2014-03-04 20:32:26 +01:00
NtQuery 1b3aeeb8bd better hidedebugger code, some fixes 2014-03-04 19:09:39 +01:00
G36KV 8efc8a4b5b better hidedebugger code, new exported function GetPEBLocation64 2014-03-04 18:58:59 +01:00
mr.exodia f65ee470fb - added mutex locker thread
- thread-safe TitanEngine.Debugger.Context
2014-03-04 17:14:32 +01:00
mr.exodia d4265de1e4 - repaired hardware breakpoints again 2014-03-03 23:29:12 +01:00
mr.exodia ab7ea510ec - updated CodeBlocks project 2014-03-03 22:57:04 +01:00
mr.exodia 2b850c3032 - done moving stuff 2014-03-03 22:53:16 +01:00
mr.exodia a781684106 - moved DebugLoop
- moved more breakpoint stuff
- moved more
- moved more
- getting crazy
2014-03-03 21:31:28 +01:00
mr.exodia 4f4f547d30 - more migration 2014-03-03 20:49:22 +01:00
mr.exodia 381252384f - more separations 2014-03-03 20:20:55 +01:00
mr.exodia 7c33b6de54 - moved TitanEngine.Dumper functions 2014-03-03 16:57:40 +01:00
mr.exodia be9eb03cc1 - separated Global.Engine.Hash
- separated EngineInit
2014-03-03 16:51:33 +01:00
mr.exodia f6a155c3d5 - fixed hardware breakpoints (first they used CONTEXT_CONTROL, should be CONTEXT_DEBUG_REGISTERS, thanks to roocoon for reporting!) 2014-02-20 11:20:55 +01:00
mr.exodia 215358f19d more refactoring 2014-02-19 18:00:04 +01:00
mr.exodia a1134258a5 - baby steps in better TitanEngine code 2014-02-19 17:52:38 +01:00
mr.exodia 5f5acc1338 - fixed a definition error (found by cypher_punk) 2014-02-11 17:55:15 +01:00
mr.exodia 2ae7e9e541 - added RipEvent callback
- removed debug message
2014-02-08 20:44:07 +01:00
mr.exodia 355fd1bada fixed a massive bug with exception handling (almost all exceptions were swallowed by the debugger) 2014-02-08 20:35:14 +01:00
mr.exodia ba35c43ddc fixed another anti-debug trick (DBG_RIPEXCEPTION) 2014-02-08 20:20:08 +01:00
mr.exodia 7ef9d9ef63 - fixed a switch statement
- fixed an anti-debug trick using the DBG_PRINTEXCEPTION_C (0x40010006)
2014-02-08 20:10:37 +01:00
mr.exodia 0590511f5d switch statements in DebugLoop function 2014-02-08 19:33:06 +01:00
mr.exodia 07291f2710 fixed a spelling mistake (thanks to hors) 2014-01-27 17:24:52 +01:00
mr.exodia 1c68daa334 resolved issue #12 2014-01-26 15:12:27 +01:00
mr.exodia 315f79982b - changed build directories
- fixed memory breakpoints (execute+read tested&working)
- removed dllmain.cpp as it was not used
2014-01-26 15:10:24 +01:00
mr.exodia 2d7313ed4c - fixed some warnings with SIZE_T conversions
- renamed scylla_wrapper header file
2014-01-26 13:44:39 +01:00
mr.exodia 11543652c5 resolved issue #6 2014-01-26 13:36:01 +01:00
mr.exodia 2115f37e4c - resolved some conflicts 2014-01-26 13:20:29 +01:00
mr.exodia 7f300831c1 Merge remote-tracking branch 'BitBucket/dp0bugfix'
Conflicts:
	.gitignore
	TitanEngine/TitanEngine.cpp
2014-01-26 13:17:52 +01:00
deepzero da3e48cb38 fix compiling of resources without MFC headers 2014-01-22 20:48:33 +01:00
deepzero 6039d3a133 added inclusion guard for definitions.h 2014-01-22 20:48:25 +01:00
deepzero 595146f31f fix brackets with #defines 2014-01-22 20:48:13 +01:00
deepzero 592ef9cec7 fix: dont write trash to file, when ReadFile() fails 2014-01-22 20:48:03 +01:00
deepzero 019b628400 cosmetics 2014-01-22 20:47:48 +01:00
deepzero 79e1457a93 replaced some RtlMemMove opartions by proper casts (far from all) 2014-01-22 20:47:30 +01:00
deepzero 55e28c9735 replaces some (far from all) RtlMemMove by RtlMemCopy, some more memory init. fixes 2014-01-22 20:47:11 +01:00
deepzero 0d8bd2a1f0 various improvements and bugfixes to initialization of memory
- far, far, far from complete.
2014-01-22 20:46:50 +01:00
deepzero 840f05f852 fix memcmp madness 2014-01-22 20:19:06 +01:00
deepzero 8b2a75fefc fix invalid winapi comparison: BOOL should not be compared to TRUE 2014-01-22 20:18:58 +01:00
deepzero f6d584ab99 fix potential use of uninitialized variable 2014-01-22 20:09:34 +01:00
deepzero 7f919fbeb0 fix various signedness issues by deepzero 2014-01-22 20:05:12 +01:00
deepzero 6aa395b57b fix return NULL instead of false 2014-01-22 19:56:26 +01:00
deepzero 138c2fc16a fix use of potentially uninitialized handles 2014-01-22 19:56:17 +01:00
deepzero 04fc4edbbf fix wchar_t array too large 2014-01-22 19:56:07 +01:00
deepzero 2b40864813 fix msvc compiler error 2014-01-22 19:55:10 +01:00
cypherpunk 419f9a3c4b cleanup TE remnants obsoleted by scylla integration 2014-01-21 23:21:38 +01:00
cypherpunk cf3b7d49cd fixed FindAPIWriteLocation, findOrdinalWriteLocation, FindDLLByWriteLocation, FindAPIByWriteLocation tow rok with scylla 2014-01-21 21:33:22 +01:00
cypherpunk a1ee5dacc0 fixed AddNewDLL, AddNewAPI to work with scylla 2014-01-21 01:22:56 +01:00
cypherpunk e93e35b36f fixed EstimatedSize() to work with scylla 2014-01-20 17:29:24 +01:00
cypherpunk 29d9d8ec5f fixed EnumAddedData to work with scylla 2014-01-19 23:41:07 +01:00
cypherpunk 22cc4da708 fixed getAddedDLLCount, getAddedAPICount to work with scylla 2014-01-19 00:05:36 +01:00
mr.exodia 4bda97ecba - updated codeblocks project
- update scylla_wrapper_x64
- AStyle formatting
- TCHAR->WCHAR (somehow didn't compile here), also explicit lstrcatW/lstrcpyW
2014-01-16 21:16:03 +01:00
cypherpunk b29e53cd16 commented all functions that are either obsolete or need change since scylla integration. see scylla_integration.txt 2014-01-16 14:48:00 +01:00
cypherpunk 095950b16d added Importer::DeleteAPI export for deleting an API out of the parsed/read IAT, x64 still needs to be updated 2014-01-16 01:41:59 +01:00
deepzero 23b1e56949 fix compiling of resources without MFC headers 2014-01-15 22:33:15 +01:00
deepzero 19859f87a4 added inclusion guard for definitions.h 2014-01-15 22:32:33 +01:00
deepzero e80e2db7df fix brackets with #defines 2014-01-15 22:32:16 +01:00
cypherpunk d732ec290e the callback for invalid imports is now working again 2014-01-15 22:00:34 +01:00
deepzero 89472363f0 fix: dont write trash to file, when ReadFile() fails 2014-01-15 11:59:42 +01:00
deepzero f3ba7d14a7 cosmetics 2014-01-15 11:36:38 +01:00
deepzero e22d5b1131 replaced some RtlMemMove opartions by proper casts (far from all) 2014-01-15 11:36:22 +01:00
deepzero 2677e3f1cd replaces some (far from all) RtlMemMove by RtlMemCopy, some more memory init. fixes 2014-01-15 11:34:46 +01:00
deepzero 75ea5b7f51 various improvements and bugfixes to initialization of memory
- far, far, far from complete.
2014-01-15 11:32:00 +01:00
deepzero b4bdd28c24 fix memcmp madness 2014-01-15 08:53:16 +01:00
deepzero 96d3677054 fix invalid winapi comparison: BOOL should not be compared to TRUE 2014-01-15 08:52:01 +01:00
deepzero 38082ded2e fix potential use of uninitialized variable 2014-01-15 08:51:25 +01:00
deepzero 8a6f73bf40 fix various signedness issues 2014-01-15 08:51:10 +01:00
deepzero de4d2705ab fix return NULL instead of false 2014-01-15 08:50:28 +01:00
deepzero 8932b34738 fix use of potentially uninitialized handles 2014-01-15 08:49:53 +01:00
deepzero 40698229f0 fix wchar_t array too large 2014-01-15 08:49:14 +01:00
deepzero 1f1e3ad8f1 fix msvc compiler error 2014-01-15 08:48:26 +01:00
cypherpunk d04759b242 fixed AutoFixIATExW, now it can dump again 2014-01-15 00:20:52 +01:00
cypherpunk d5d24e5c05 fixed AutoSearchIATEx, now it can dump again 2014-01-15 00:09:27 +01:00
mr.exodia 402a80bffb - fixed x64 (scylla)
- fixed x64 debug configuration
2014-01-14 19:51:35 +01:00
cypherpunk cfb052280e fixed ExportIAT to work for FileMapping with Scylla 2014-01-14 18:00:11 +01:00
cypherpunk 2c1639d6cc custom section name support 2014-01-13 00:17:04 +01:00
cypherpunk 86abf46dbe fix for ExportIATEx 2014-01-12 23:01:38 +01:00
cypherpunk d0a5b10884 forgot sth with: removed obsolete parameter imageBase 2014-01-12 22:05:54 +01:00
cypherpunk 65d4cff823 removed obsolete parameter imageBase 2014-01-12 20:00:51 +01:00
cypherpunk ba4754b215 fix for ExportIAT(..) functionality 2014-01-12 17:23:32 +01:00
cypherpunk 86ed5042aa updated to use scylla:
ImporterExportIAT
- broken, scylla_wrapper needs to be updated to support export to VA

ImporterExportIATEx
ImporterExportIATExW
2014-01-12 17:05:40 +01:00
cypherpunk c74ac34963 refactored functions to use scylla:
ImporterAutoSearchIAT(DWORD ProcessId
ImporterAutoSearchIATW(DWORD ProcessId
ImporterAutoSearchIATEx(DWORD ProcessId

- these now have process ID as first param, not handle

ImporterAutoFixIATEx
ImporterAutoFixIATExW
ImporterAutoFixIAT
ImporterAutoFixIATW
- first param now DWORD pid
- params imagebase, searchSize, searchStep now obsolete
2014-01-12 16:24:45 +01:00
cypherpunk 52aade33ba updated definitions for scylla 2014-01-12 16:23:14 +01:00
cypherpunk b937b325a6 updated scylla_wrapper lib so TE actually links 2014-01-12 14:34:30 +01:00
cypherpunk 0d498c4939 updated distorm lib to v3, x64 is still missing ! 2014-01-12 14:33:18 +01:00
cypherpunk 52378f910f started work on scylla integration 2014-01-12 00:36:31 +01:00
mr.exodia 9dca34e3b8 fixed two bugs with dynamically imported winapi functions 2013-12-25 15:10:38 +01:00
cypherpunk eebf60323a you can now set UE_SECTIONNAME doestn just return false. lazy RL guys ^^ 2013-12-18 15:53:28 +01:00
cypherpunk d251983720 added UE_BASEOFCODE / UE_BASEOFDATA to Dumper::GetPE32 / Dumper::SetPE32 functions 2013-12-18 15:03:25 +01:00
cypherpunk e7714c7c27 - disabled exception handling for "Debug" which caused it not to build
- Runtime changed to /MTD
2013-12-18 14:14:45 +01:00
mr.exodia d585941ba9 - fixed a small SDK bug (with UE_MEMORY_EXECUTE)
- fixed a bug with MEMORY_EXECUTE (which was excluded as memory breakpoint type)
- slightly bigger buffer, to avoid undefined output when you directly use the returned char pointer as string
2013-12-02 20:47:38 +01:00
cypherpunk 592f618a9c fixes issue #7
RemoveMemoryBPX bug
2013-11-30 01:26:15 +01:00
cypherpunk 8ec098dcf1 now really: fixed Dumper::GetPE32Data(char*, DWORD, UE_SECTIONNAME) returning bad ptr 2013-11-25 00:53:52 +01:00
cypherpunk 60c1e2643e fixed Dumper::GetPE32Data(char*, DWORD, UE_SECTIONNAME) returning bad ptr 2013-11-24 16:20:22 +01:00
mr.exodia fffbdfac89 fixed a bug with type-specific memory breakpoint that were removed even if their type was not triggered 2013-11-19 22:07:51 +01:00
mr.exodia 36eb6d9bc1 - fixed hardware breakpoints (DR7 has to be set first on x64)
- completely rewrote the hardware breakpoints engine
- optimize for speed
2013-11-18 20:44:22 +01:00
mr.exodia ed35dd37a2 fixed a little bug in IsJumpGoingToExecute 2013-10-23 21:49:11 +02:00
mr.exodia 0a2d5747b6 - updated readme (basically it says: LUA, Python and MASM are not tested with these updates)
- re-added UE_HIDE_PEBONLY (thanks to cypherpunk for the report)
2013-10-13 23:39:06 +02:00
mr.exodia 996003476d - resolved issue #2
- resolved issue #3
- added a lot of comments inside the DebugLoop function
2013-10-13 21:06:20 +02:00
mr.exodia 6039a0ee83 added some check 2013-10-13 19:46:54 +02:00
mr.exodia cedd219980 resolved issue #1 2013-10-13 19:37:30 +02:00
mr.exodia 3e262f2ef1 - fixed c++ headers (thanks to cypher)
- removed kernelbase.dll ignore
2013-10-13 18:23:46 +02:00
mr.exodia fd1ebea613 - various fixes (DMichael) 2013-10-13 14:52:41 +02:00
mr.exodia ca9774cc5a general code fixes (found by DMichael) 2013-10-12 21:27:58 +02:00
mr.exodia 14a3692b11 - fixed first/second chance exceptions 2013-10-12 17:42:00 +02:00
mr.exodia 8b1a465059 - updated visual studio project 2013-10-12 01:06:50 +02:00
mr.exodia 8761d815c2 - multiple calling conventions supported
- moved stuff to the SDK directory
2013-10-12 01:05:46 +02:00
mr.exodia e55d6f75cc - updated readme
- fixed 'TypeName' bug (cypher)
2013-10-11 15:20:13 +02:00
mr.exodia bfa7ce00cd - fixed DumpProcessExW (fix provided by Aguila at Tuts4you)
- updated TitanEngine.h (this should be used from within your projects)
- some formatting
2013-10-11 14:31:20 +02:00
mr.exodia a01ade8de2 - fixed many bug with memory breakpoints
- added memory breakpoint on execute
- moved binary output directories
- updated codeblocks project
- fixed memory breakpoint reset
2013-08-26 21:53:40 +02:00
mr.exodia 89558df3db - fixed bugs with VirtualProtectEx (incorrect protection was restored) 2013-08-26 15:15:40 +02:00
mr.exodia f39b2a5d6b - changed hardware breakpoint callback 2013-08-26 03:35:12 +02:00
mr.exodia 74b1bb7963 - fixed bug in SetBPX, where the found breakpoint type wasn't checked 2013-08-26 02:56:59 +02:00
mr.exodia 425107b86e - changed calling convention
- added lib2a.bat (for MingW static library file)
2013-08-26 01:23:50 +02:00
mr.exodia 818ac8a7b1 - added UE_HARDWARE_SIZE_8 (for x64)
- fixed bug in EngineGlobalAPIHandler
- added TitanEngine.h
2013-08-26 00:31:54 +02:00
mr.exodia c217fc31b6 first commit 2013-08-25 17:13:57 +02:00