mr.exodia
315f79982b
- changed build directories
...
- fixed memory breakpoints (execute+read tested&working)
- removed dllmain.cpp as it was not used
2014-01-26 15:10:24 +01:00
mr.exodia
2d7313ed4c
- fixed some warnings with SIZE_T conversions
...
- renamed scylla_wrapper header file
2014-01-26 13:44:39 +01:00
mr.exodia
11543652c5
resolved issue #6
2014-01-26 13:36:01 +01:00
mr.exodia
2115f37e4c
- resolved some conflicts
2014-01-26 13:20:29 +01:00
mr.exodia
7f300831c1
Merge remote-tracking branch 'BitBucket/dp0bugfix'
...
Conflicts:
.gitignore
TitanEngine/TitanEngine.cpp
2014-01-26 13:17:52 +01:00
deepzero
da3e48cb38
fix compiling of resources without MFC headers
2014-01-22 20:48:33 +01:00
deepzero
6039d3a133
added inclusion guard for definitions.h
2014-01-22 20:48:25 +01:00
deepzero
595146f31f
fix brackets with #defines
2014-01-22 20:48:13 +01:00
deepzero
592ef9cec7
fix: dont write trash to file, when ReadFile() fails
2014-01-22 20:48:03 +01:00
deepzero
019b628400
cosmetics
2014-01-22 20:47:48 +01:00
deepzero
79e1457a93
replaced some RtlMemMove opartions by proper casts (far from all)
2014-01-22 20:47:30 +01:00
deepzero
55e28c9735
replaces some (far from all) RtlMemMove by RtlMemCopy, some more memory init. fixes
2014-01-22 20:47:11 +01:00
deepzero
0d8bd2a1f0
various improvements and bugfixes to initialization of memory
...
- far, far, far from complete.
2014-01-22 20:46:50 +01:00
deepzero
840f05f852
fix memcmp madness
2014-01-22 20:19:06 +01:00
deepzero
8b2a75fefc
fix invalid winapi comparison: BOOL should not be compared to TRUE
2014-01-22 20:18:58 +01:00
deepzero
f6d584ab99
fix potential use of uninitialized variable
2014-01-22 20:09:34 +01:00
deepzero
7f919fbeb0
fix various signedness issues by deepzero
2014-01-22 20:05:12 +01:00
deepzero
6aa395b57b
fix return NULL instead of false
2014-01-22 19:56:26 +01:00
deepzero
138c2fc16a
fix use of potentially uninitialized handles
2014-01-22 19:56:17 +01:00
deepzero
04fc4edbbf
fix wchar_t array too large
2014-01-22 19:56:07 +01:00
deepzero
2b40864813
fix msvc compiler error
2014-01-22 19:55:10 +01:00
cypherpunk
419f9a3c4b
cleanup TE remnants obsoleted by scylla integration
2014-01-21 23:21:38 +01:00
cypherpunk
cf3b7d49cd
fixed FindAPIWriteLocation, findOrdinalWriteLocation, FindDLLByWriteLocation, FindAPIByWriteLocation tow rok with scylla
2014-01-21 21:33:22 +01:00
cypherpunk
a1ee5dacc0
fixed AddNewDLL, AddNewAPI to work with scylla
2014-01-21 01:22:56 +01:00
cypherpunk
e93e35b36f
fixed EstimatedSize() to work with scylla
2014-01-20 17:29:24 +01:00
cypherpunk
29d9d8ec5f
fixed EnumAddedData to work with scylla
2014-01-19 23:41:07 +01:00
cypherpunk
22cc4da708
fixed getAddedDLLCount, getAddedAPICount to work with scylla
2014-01-19 00:05:36 +01:00
mr.exodia
4bda97ecba
- updated codeblocks project
...
- update scylla_wrapper_x64
- AStyle formatting
- TCHAR->WCHAR (somehow didn't compile here), also explicit lstrcatW/lstrcpyW
2014-01-16 21:16:03 +01:00
cypherpunk
b29e53cd16
commented all functions that are either obsolete or need change since scylla integration. see scylla_integration.txt
2014-01-16 14:48:00 +01:00
cypherpunk
095950b16d
added Importer::DeleteAPI export for deleting an API out of the parsed/read IAT, x64 still needs to be updated
2014-01-16 01:41:59 +01:00
deepzero
23b1e56949
fix compiling of resources without MFC headers
2014-01-15 22:33:15 +01:00
deepzero
19859f87a4
added inclusion guard for definitions.h
2014-01-15 22:32:33 +01:00
deepzero
e80e2db7df
fix brackets with #defines
2014-01-15 22:32:16 +01:00
cypherpunk
d732ec290e
the callback for invalid imports is now working again
2014-01-15 22:00:34 +01:00
deepzero
89472363f0
fix: dont write trash to file, when ReadFile() fails
2014-01-15 11:59:42 +01:00
deepzero
f3ba7d14a7
cosmetics
2014-01-15 11:36:38 +01:00
deepzero
e22d5b1131
replaced some RtlMemMove opartions by proper casts (far from all)
2014-01-15 11:36:22 +01:00
deepzero
2677e3f1cd
replaces some (far from all) RtlMemMove by RtlMemCopy, some more memory init. fixes
2014-01-15 11:34:46 +01:00
deepzero
75ea5b7f51
various improvements and bugfixes to initialization of memory
...
- far, far, far from complete.
2014-01-15 11:32:00 +01:00
deepzero
b4bdd28c24
fix memcmp madness
2014-01-15 08:53:16 +01:00
deepzero
96d3677054
fix invalid winapi comparison: BOOL should not be compared to TRUE
2014-01-15 08:52:01 +01:00
deepzero
38082ded2e
fix potential use of uninitialized variable
2014-01-15 08:51:25 +01:00
deepzero
8a6f73bf40
fix various signedness issues
2014-01-15 08:51:10 +01:00
deepzero
de4d2705ab
fix return NULL instead of false
2014-01-15 08:50:28 +01:00
deepzero
8932b34738
fix use of potentially uninitialized handles
2014-01-15 08:49:53 +01:00
deepzero
40698229f0
fix wchar_t array too large
2014-01-15 08:49:14 +01:00
deepzero
1f1e3ad8f1
fix msvc compiler error
2014-01-15 08:48:26 +01:00
cypherpunk
d04759b242
fixed AutoFixIATExW, now it can dump again
2014-01-15 00:20:52 +01:00
cypherpunk
d5d24e5c05
fixed AutoSearchIATEx, now it can dump again
2014-01-15 00:09:27 +01:00
mr.exodia
402a80bffb
- fixed x64 (scylla)
...
- fixed x64 debug configuration
2014-01-14 19:51:35 +01:00
cypherpunk
cfb052280e
fixed ExportIAT to work for FileMapping with Scylla
2014-01-14 18:00:11 +01:00
cypherpunk
2c1639d6cc
custom section name support
2014-01-13 00:17:04 +01:00
cypherpunk
86abf46dbe
fix for ExportIATEx
2014-01-12 23:01:38 +01:00
cypherpunk
d0a5b10884
forgot sth with: removed obsolete parameter imageBase
2014-01-12 22:05:54 +01:00
cypherpunk
65d4cff823
removed obsolete parameter imageBase
2014-01-12 20:00:51 +01:00
cypherpunk
ba4754b215
fix for ExportIAT(..) functionality
2014-01-12 17:23:32 +01:00
cypherpunk
86ed5042aa
updated to use scylla:
...
ImporterExportIAT
- broken, scylla_wrapper needs to be updated to support export to VA
ImporterExportIATEx
ImporterExportIATExW
2014-01-12 17:05:40 +01:00
cypherpunk
c74ac34963
refactored functions to use scylla:
...
ImporterAutoSearchIAT(DWORD ProcessId
ImporterAutoSearchIATW(DWORD ProcessId
ImporterAutoSearchIATEx(DWORD ProcessId
- these now have process ID as first param, not handle
ImporterAutoFixIATEx
ImporterAutoFixIATExW
ImporterAutoFixIAT
ImporterAutoFixIATW
- first param now DWORD pid
- params imagebase, searchSize, searchStep now obsolete
2014-01-12 16:24:45 +01:00
cypherpunk
52aade33ba
updated definitions for scylla
2014-01-12 16:23:14 +01:00
cypherpunk
b937b325a6
updated scylla_wrapper lib so TE actually links
2014-01-12 14:34:30 +01:00
cypherpunk
0d498c4939
updated distorm lib to v3, x64 is still missing !
2014-01-12 14:33:18 +01:00
cypherpunk
52378f910f
started work on scylla integration
2014-01-12 00:36:31 +01:00
mr.exodia
9dca34e3b8
fixed two bugs with dynamically imported winapi functions
2013-12-25 15:10:38 +01:00
cypherpunk
eebf60323a
you can now set UE_SECTIONNAME doestn just return false. lazy RL guys ^^
2013-12-18 15:53:28 +01:00
cypherpunk
d251983720
added UE_BASEOFCODE / UE_BASEOFDATA to Dumper::GetPE32 / Dumper::SetPE32 functions
2013-12-18 15:03:25 +01:00
cypherpunk
e7714c7c27
- disabled exception handling for "Debug" which caused it not to build
...
- Runtime changed to /MTD
2013-12-18 14:14:45 +01:00
mr.exodia
d585941ba9
- fixed a small SDK bug (with UE_MEMORY_EXECUTE)
...
- fixed a bug with MEMORY_EXECUTE (which was excluded as memory breakpoint type)
- slightly bigger buffer, to avoid undefined output when you directly use the returned char pointer as string
2013-12-02 20:47:38 +01:00
cypherpunk
592f618a9c
fixes issue #7
...
RemoveMemoryBPX bug
2013-11-30 01:26:15 +01:00
cypherpunk
8ec098dcf1
now really: fixed Dumper::GetPE32Data(char*, DWORD, UE_SECTIONNAME) returning bad ptr
2013-11-25 00:53:52 +01:00
cypherpunk
60c1e2643e
fixed Dumper::GetPE32Data(char*, DWORD, UE_SECTIONNAME) returning bad ptr
2013-11-24 16:20:22 +01:00
mr.exodia
fffbdfac89
fixed a bug with type-specific memory breakpoint that were removed even if their type was not triggered
2013-11-19 22:07:51 +01:00
mr.exodia
36eb6d9bc1
- fixed hardware breakpoints (DR7 has to be set first on x64)
...
- completely rewrote the hardware breakpoints engine
- optimize for speed
2013-11-18 20:44:22 +01:00
mr.exodia
ed35dd37a2
fixed a little bug in IsJumpGoingToExecute
2013-10-23 21:49:11 +02:00
mr.exodia
0a2d5747b6
- updated readme (basically it says: LUA, Python and MASM are not tested with these updates)
...
- re-added UE_HIDE_PEBONLY (thanks to cypherpunk for the report)
2013-10-13 23:39:06 +02:00
mr.exodia
996003476d
- resolved issue #2
...
- resolved issue #3
- added a lot of comments inside the DebugLoop function
2013-10-13 21:06:20 +02:00
mr.exodia
6039a0ee83
added some check
2013-10-13 19:46:54 +02:00
mr.exodia
cedd219980
resolved issue #1
2013-10-13 19:37:30 +02:00
mr.exodia
3e262f2ef1
- fixed c++ headers (thanks to cypher)
...
- removed kernelbase.dll ignore
2013-10-13 18:23:46 +02:00
mr.exodia
fd1ebea613
- various fixes (DMichael)
2013-10-13 14:52:41 +02:00
mr.exodia
ca9774cc5a
general code fixes (found by DMichael)
2013-10-12 21:27:58 +02:00
mr.exodia
14a3692b11
- fixed first/second chance exceptions
2013-10-12 17:42:00 +02:00
mr.exodia
8b1a465059
- updated visual studio project
2013-10-12 01:06:50 +02:00
mr.exodia
8761d815c2
- multiple calling conventions supported
...
- moved stuff to the SDK directory
2013-10-12 01:05:46 +02:00
mr.exodia
e55d6f75cc
- updated readme
...
- fixed 'TypeName' bug (cypher)
2013-10-11 15:20:13 +02:00
mr.exodia
bfa7ce00cd
- fixed DumpProcessExW (fix provided by Aguila at Tuts4you)
...
- updated TitanEngine.h (this should be used from within your projects)
- some formatting
2013-10-11 14:31:20 +02:00
mr.exodia
a01ade8de2
- fixed many bug with memory breakpoints
...
- added memory breakpoint on execute
- moved binary output directories
- updated codeblocks project
- fixed memory breakpoint reset
2013-08-26 21:53:40 +02:00
mr.exodia
89558df3db
- fixed bugs with VirtualProtectEx (incorrect protection was restored)
2013-08-26 15:15:40 +02:00
mr.exodia
f39b2a5d6b
- changed hardware breakpoint callback
2013-08-26 03:35:12 +02:00
mr.exodia
74b1bb7963
- fixed bug in SetBPX, where the found breakpoint type wasn't checked
2013-08-26 02:56:59 +02:00
mr.exodia
425107b86e
- changed calling convention
...
- added lib2a.bat (for MingW static library file)
2013-08-26 01:23:50 +02:00
mr.exodia
818ac8a7b1
- added UE_HARDWARE_SIZE_8 (for x64)
...
- fixed bug in EngineGlobalAPIHandler
- added TitanEngine.h
2013-08-26 00:31:54 +02:00
mr.exodia
c217fc31b6
first commit
2013-08-25 17:13:57 +02:00