deepzero
592ef9cec7
fix: dont write trash to file, when ReadFile() fails
2014-01-22 20:48:03 +01:00
deepzero
019b628400
cosmetics
2014-01-22 20:47:48 +01:00
deepzero
79e1457a93
replaced some RtlMemMove opartions by proper casts (far from all)
2014-01-22 20:47:30 +01:00
deepzero
55e28c9735
replaces some (far from all) RtlMemMove by RtlMemCopy, some more memory init. fixes
2014-01-22 20:47:11 +01:00
deepzero
0d8bd2a1f0
various improvements and bugfixes to initialization of memory
...
- far, far, far from complete.
2014-01-22 20:46:50 +01:00
deepzero
840f05f852
fix memcmp madness
2014-01-22 20:19:06 +01:00
deepzero
8b2a75fefc
fix invalid winapi comparison: BOOL should not be compared to TRUE
2014-01-22 20:18:58 +01:00
deepzero
f6d584ab99
fix potential use of uninitialized variable
2014-01-22 20:09:34 +01:00
deepzero
7f919fbeb0
fix various signedness issues by deepzero
2014-01-22 20:05:12 +01:00
deepzero
6aa395b57b
fix return NULL instead of false
2014-01-22 19:56:26 +01:00
deepzero
138c2fc16a
fix use of potentially uninitialized handles
2014-01-22 19:56:17 +01:00
deepzero
04fc4edbbf
fix wchar_t array too large
2014-01-22 19:56:07 +01:00
deepzero
2b40864813
fix msvc compiler error
2014-01-22 19:55:10 +01:00
cypherpunk
419f9a3c4b
cleanup TE remnants obsoleted by scylla integration
2014-01-21 23:21:38 +01:00
cypherpunk
cf3b7d49cd
fixed FindAPIWriteLocation, findOrdinalWriteLocation, FindDLLByWriteLocation, FindAPIByWriteLocation tow rok with scylla
2014-01-21 21:33:22 +01:00
cypherpunk
a1ee5dacc0
fixed AddNewDLL, AddNewAPI to work with scylla
2014-01-21 01:22:56 +01:00
cypherpunk
e93e35b36f
fixed EstimatedSize() to work with scylla
2014-01-20 17:29:24 +01:00
cypherpunk
29d9d8ec5f
fixed EnumAddedData to work with scylla
2014-01-19 23:41:07 +01:00
cypherpunk
22cc4da708
fixed getAddedDLLCount, getAddedAPICount to work with scylla
2014-01-19 00:05:36 +01:00
mr.exodia
4bda97ecba
- updated codeblocks project
...
- update scylla_wrapper_x64
- AStyle formatting
- TCHAR->WCHAR (somehow didn't compile here), also explicit lstrcatW/lstrcpyW
2014-01-16 21:16:03 +01:00
cypherpunk
b29e53cd16
commented all functions that are either obsolete or need change since scylla integration. see scylla_integration.txt
2014-01-16 14:48:00 +01:00
cypherpunk
095950b16d
added Importer::DeleteAPI export for deleting an API out of the parsed/read IAT, x64 still needs to be updated
2014-01-16 01:41:59 +01:00
cypherpunk
d732ec290e
the callback for invalid imports is now working again
2014-01-15 22:00:34 +01:00
cypherpunk
d04759b242
fixed AutoFixIATExW, now it can dump again
2014-01-15 00:20:52 +01:00
cypherpunk
d5d24e5c05
fixed AutoSearchIATEx, now it can dump again
2014-01-15 00:09:27 +01:00
cypherpunk
21ba78ee13
forgot obsolete parameter in C++ SDK header
2014-01-15 00:05:52 +01:00
mr.exodia
402a80bffb
- fixed x64 (scylla)
...
- fixed x64 debug configuration
2014-01-14 19:51:35 +01:00
cypherpunk
cfb052280e
fixed ExportIAT to work for FileMapping with Scylla
2014-01-14 18:00:11 +01:00
cypherpunk
2c1639d6cc
custom section name support
2014-01-13 00:17:04 +01:00
cypherpunk
86abf46dbe
fix for ExportIATEx
2014-01-12 23:01:38 +01:00
cypherpunk
d0a5b10884
forgot sth with: removed obsolete parameter imageBase
2014-01-12 22:05:54 +01:00
cypherpunk
3085c44b31
updated C++ SDK
2014-01-12 20:01:21 +01:00
cypherpunk
65d4cff823
removed obsolete parameter imageBase
2014-01-12 20:00:51 +01:00
cypherpunk
ba4754b215
fix for ExportIAT(..) functionality
2014-01-12 17:23:32 +01:00
cypherpunk
86ed5042aa
updated to use scylla:
...
ImporterExportIAT
- broken, scylla_wrapper needs to be updated to support export to VA
ImporterExportIATEx
ImporterExportIATExW
2014-01-12 17:05:40 +01:00
cypherpunk
c74ac34963
refactored functions to use scylla:
...
ImporterAutoSearchIAT(DWORD ProcessId
ImporterAutoSearchIATW(DWORD ProcessId
ImporterAutoSearchIATEx(DWORD ProcessId
- these now have process ID as first param, not handle
ImporterAutoFixIATEx
ImporterAutoFixIATExW
ImporterAutoFixIAT
ImporterAutoFixIATW
- first param now DWORD pid
- params imagebase, searchSize, searchStep now obsolete
2014-01-12 16:24:45 +01:00
cypherpunk
52aade33ba
updated definitions for scylla
2014-01-12 16:23:14 +01:00
cypherpunk
b937b325a6
updated scylla_wrapper lib so TE actually links
2014-01-12 14:34:30 +01:00
cypherpunk
0d498c4939
updated distorm lib to v3, x64 is still missing !
2014-01-12 14:33:18 +01:00
cypherpunk
cca6728a2d
updated gitignore to the GitHub standard for C++/VS
2014-01-12 14:32:16 +01:00
cypherpunk
52378f910f
started work on scylla integration
2014-01-12 00:36:31 +01:00
mr.exodia
9dca34e3b8
fixed two bugs with dynamically imported winapi functions
2013-12-25 15:10:38 +01:00
mr.exodia
3cd9d2da3e
updated definitions
2013-12-23 13:16:01 +01:00
cypherpunk
eebf60323a
you can now set UE_SECTIONNAME doestn just return false. lazy RL guys ^^
2013-12-18 15:53:28 +01:00
cypherpunk
d251983720
added UE_BASEOFCODE / UE_BASEOFDATA to Dumper::GetPE32 / Dumper::SetPE32 functions
2013-12-18 15:03:25 +01:00
cypherpunk
e7714c7c27
- disabled exception handling for "Debug" which caused it not to build
...
- Runtime changed to /MTD
2013-12-18 14:14:45 +01:00
cypherpunk
9cd244db3e
- fixed mainly const char* vs char*
...
- not copy paste, kept return datatypes typedef free (ULONG_PTR vs long long etc)
- some WIN64 defines added (not tested but copied from TitanScript)
changed classes (const char* vs char*):
- DumperA, DumperW, DumperX
- DebuggerA, DebuggerW, DebuggerX
- ImporterA, ImporterW, ImporterX
- RealignerA, RealignerW, RealignerX
- RelocaterA, RelocaterW, RelocaterX
- Tracer
- ExporterA, ExporterW, ExporterX
- LibrarianA, LibrarianW, LibrarianX
- TLSA, TLSW, TLSX
- StaticA, StaticW, StaticX
- RemoteA, RemoteW, RemoteX
not changed but might need changes:
- Threader, Resourcer, Hooks, Process, Handler, Extension, Engine, Translate
doesnt need changes:
- Hider
2013-12-09 12:04:01 +01:00
cypherpunk
d2da5448a6
readded UE_VANOTFOUND
...
used e.g. in TitanScript as return type from TE
2013-12-09 12:03:06 +01:00
mr.exodia
d585941ba9
- fixed a small SDK bug (with UE_MEMORY_EXECUTE)
...
- fixed a bug with MEMORY_EXECUTE (which was excluded as memory breakpoint type)
- slightly bigger buffer, to avoid undefined output when you directly use the returned char pointer as string
2013-12-02 20:47:38 +01:00
cypherpunk
592f618a9c
fixes issue #7
...
RemoveMemoryBPX bug
2013-11-30 01:26:15 +01:00