Mr. eXoDia
fc51e0d144
- added StepOut function
2014-03-12 14:49:36 +01:00
Mr. eXoDia
085e6ae7a9
- added function ImporterGetDLLNameFromDebugeeW
...
- fixed function ImporterGetDLLNameFromDebugee
- added function EngineGetModuleBaseRemote
- added function EngineGetAPIAddressRemote
- added function EngineGetAPIAddressLocal
- fixed a potential bug in SetAPIBreakPoint & DeleteAPIBreakPoint
- fixed ImpoerterGetDLLName (this function is used on the local process)
- fixed function ImporterGetDLLNameW & ImporterGetDLLName
- moved fixed functions up
2014-03-11 15:25:17 +01:00
Mr. eXoDia
5e5dac1186
- fixed the function EngineGetProcAddressRemote (now supports any number of modules)
...
- added the function EngineGetModuleBaseRemote
- added export ImporterGetDLLNameW
- fixed export ImporterGetDLLName
2014-03-11 14:53:11 +01:00
NtQuery
a742815814
UNICODE-FIX new ImporterGetRemoteDLLBaseExW
2014-03-11 12:33:06 +01:00
Mr. eXoDia
93a8582044
- some new idea, see issue #23
...
- updated c++ header
2014-03-09 23:10:42 +01:00
NtQuery
1f4b6de250
fixed EnumProcessModules problems, improved dumper, added new function ReadProcessMemoryEnforce
2014-03-09 22:03:45 +01:00
NtQuery
35c3c618b1
added Teb32 and Teb64 functions
2014-03-06 20:17:14 +01:00
mr.exodia
bc7906460c
- formatting lol
...
- rewrote TitanEngine.Threader to use a vector (decreased memory footprint)
- Removed function ThreadGetThreadData
2014-03-05 17:49:27 +01:00
mr.exodia
e265f498d0
- removed some useless defines
...
- added GetPEBLocation64 to the SDK files
- GetPEBLocation is also defined on x64, but does nothing there
- moved a function to Global.Engine.Hider
2014-03-04 21:31:04 +01:00
mr.exodia
92451cfe42
- removed SetBPXEx (condentional breakpoints are removed now)
...
- no more static breakpoint list
- huge refactoring
- bugs fixed in TitanEngine.Breakpoints
2014-03-04 21:07:07 +01:00
G36KV
8efc8a4b5b
better hidedebugger code, new exported function GetPEBLocation64
2014-03-04 18:58:59 +01:00
mr.exodia
2b850c3032
- done moving stuff
2014-03-03 22:53:16 +01:00
mr.exodia
381252384f
- more separations
2014-03-03 20:20:55 +01:00
mr.exodia
11543652c5
resolved issue #6
2014-01-26 13:36:01 +01:00
deepzero
6039d3a133
added inclusion guard for definitions.h
2014-01-22 20:48:25 +01:00
cypherpunk
419f9a3c4b
cleanup TE remnants obsoleted by scylla integration
2014-01-21 23:21:38 +01:00
cypherpunk
095950b16d
added Importer::DeleteAPI export for deleting an API out of the parsed/read IAT, x64 still needs to be updated
2014-01-16 01:41:59 +01:00
cypherpunk
cfb052280e
fixed ExportIAT to work for FileMapping with Scylla
2014-01-14 18:00:11 +01:00
cypherpunk
2c1639d6cc
custom section name support
2014-01-13 00:17:04 +01:00
cypherpunk
86abf46dbe
fix for ExportIATEx
2014-01-12 23:01:38 +01:00
cypherpunk
d0a5b10884
forgot sth with: removed obsolete parameter imageBase
2014-01-12 22:05:54 +01:00
cypherpunk
65d4cff823
removed obsolete parameter imageBase
2014-01-12 20:00:51 +01:00
cypherpunk
c74ac34963
refactored functions to use scylla:
...
ImporterAutoSearchIAT(DWORD ProcessId
ImporterAutoSearchIATW(DWORD ProcessId
ImporterAutoSearchIATEx(DWORD ProcessId
- these now have process ID as first param, not handle
ImporterAutoFixIATEx
ImporterAutoFixIATExW
ImporterAutoFixIAT
ImporterAutoFixIATW
- first param now DWORD pid
- params imagebase, searchSize, searchStep now obsolete
2014-01-12 16:24:45 +01:00
cypherpunk
52378f910f
started work on scylla integration
2014-01-12 00:36:31 +01:00
mr.exodia
8761d815c2
- multiple calling conventions supported
...
- moved stuff to the SDK directory
2013-10-12 01:05:46 +02:00
mr.exodia
89558df3db
- fixed bugs with VirtualProtectEx (incorrect protection was restored)
2013-08-26 15:15:40 +02:00
mr.exodia
425107b86e
- changed calling convention
...
- added lib2a.bat (for MingW static library file)
2013-08-26 01:23:50 +02:00
mr.exodia
c217fc31b6
first commit
2013-08-25 17:13:57 +02:00