Commit Graph

80 Commits

Author SHA1 Message Date
deepzero 79e1457a93 replaced some RtlMemMove opartions by proper casts (far from all) 2014-01-22 20:47:30 +01:00
deepzero 55e28c9735 replaces some (far from all) RtlMemMove by RtlMemCopy, some more memory init. fixes 2014-01-22 20:47:11 +01:00
deepzero 0d8bd2a1f0 various improvements and bugfixes to initialization of memory
- far, far, far from complete.
2014-01-22 20:46:50 +01:00
deepzero 840f05f852 fix memcmp madness 2014-01-22 20:19:06 +01:00
deepzero 8b2a75fefc fix invalid winapi comparison: BOOL should not be compared to TRUE 2014-01-22 20:18:58 +01:00
deepzero f6d584ab99 fix potential use of uninitialized variable 2014-01-22 20:09:34 +01:00
deepzero 7f919fbeb0 fix various signedness issues by deepzero 2014-01-22 20:05:12 +01:00
deepzero 6aa395b57b fix return NULL instead of false 2014-01-22 19:56:26 +01:00
deepzero 138c2fc16a fix use of potentially uninitialized handles 2014-01-22 19:56:17 +01:00
deepzero 04fc4edbbf fix wchar_t array too large 2014-01-22 19:56:07 +01:00
deepzero 2b40864813 fix msvc compiler error 2014-01-22 19:55:10 +01:00
cypherpunk 419f9a3c4b cleanup TE remnants obsoleted by scylla integration 2014-01-21 23:21:38 +01:00
cypherpunk cf3b7d49cd fixed FindAPIWriteLocation, findOrdinalWriteLocation, FindDLLByWriteLocation, FindAPIByWriteLocation tow rok with scylla 2014-01-21 21:33:22 +01:00
cypherpunk a1ee5dacc0 fixed AddNewDLL, AddNewAPI to work with scylla 2014-01-21 01:22:56 +01:00
cypherpunk e93e35b36f fixed EstimatedSize() to work with scylla 2014-01-20 17:29:24 +01:00
cypherpunk 29d9d8ec5f fixed EnumAddedData to work with scylla 2014-01-19 23:41:07 +01:00
cypherpunk 22cc4da708 fixed getAddedDLLCount, getAddedAPICount to work with scylla 2014-01-19 00:05:36 +01:00
mr.exodia 4bda97ecba - updated codeblocks project
- update scylla_wrapper_x64
- AStyle formatting
- TCHAR->WCHAR (somehow didn't compile here), also explicit lstrcatW/lstrcpyW
2014-01-16 21:16:03 +01:00
cypherpunk b29e53cd16 commented all functions that are either obsolete or need change since scylla integration. see scylla_integration.txt 2014-01-16 14:48:00 +01:00
cypherpunk 095950b16d added Importer::DeleteAPI export for deleting an API out of the parsed/read IAT, x64 still needs to be updated 2014-01-16 01:41:59 +01:00
cypherpunk d732ec290e the callback for invalid imports is now working again 2014-01-15 22:00:34 +01:00
cypherpunk d04759b242 fixed AutoFixIATExW, now it can dump again 2014-01-15 00:20:52 +01:00
cypherpunk d5d24e5c05 fixed AutoSearchIATEx, now it can dump again 2014-01-15 00:09:27 +01:00
cypherpunk 21ba78ee13 forgot obsolete parameter in C++ SDK header 2014-01-15 00:05:52 +01:00
mr.exodia 402a80bffb - fixed x64 (scylla)
- fixed x64 debug configuration
2014-01-14 19:51:35 +01:00
cypherpunk cfb052280e fixed ExportIAT to work for FileMapping with Scylla 2014-01-14 18:00:11 +01:00
cypherpunk 2c1639d6cc custom section name support 2014-01-13 00:17:04 +01:00
cypherpunk 86abf46dbe fix for ExportIATEx 2014-01-12 23:01:38 +01:00
cypherpunk d0a5b10884 forgot sth with: removed obsolete parameter imageBase 2014-01-12 22:05:54 +01:00
cypherpunk 3085c44b31 updated C++ SDK 2014-01-12 20:01:21 +01:00
cypherpunk 65d4cff823 removed obsolete parameter imageBase 2014-01-12 20:00:51 +01:00
cypherpunk ba4754b215 fix for ExportIAT(..) functionality 2014-01-12 17:23:32 +01:00
cypherpunk 86ed5042aa updated to use scylla:
ImporterExportIAT
- broken, scylla_wrapper needs to be updated to support export to VA

ImporterExportIATEx
ImporterExportIATExW
2014-01-12 17:05:40 +01:00
cypherpunk c74ac34963 refactored functions to use scylla:
ImporterAutoSearchIAT(DWORD ProcessId
ImporterAutoSearchIATW(DWORD ProcessId
ImporterAutoSearchIATEx(DWORD ProcessId

- these now have process ID as first param, not handle

ImporterAutoFixIATEx
ImporterAutoFixIATExW
ImporterAutoFixIAT
ImporterAutoFixIATW
- first param now DWORD pid
- params imagebase, searchSize, searchStep now obsolete
2014-01-12 16:24:45 +01:00
cypherpunk 52aade33ba updated definitions for scylla 2014-01-12 16:23:14 +01:00
cypherpunk b937b325a6 updated scylla_wrapper lib so TE actually links 2014-01-12 14:34:30 +01:00
cypherpunk 0d498c4939 updated distorm lib to v3, x64 is still missing ! 2014-01-12 14:33:18 +01:00
cypherpunk cca6728a2d updated gitignore to the GitHub standard for C++/VS 2014-01-12 14:32:16 +01:00
cypherpunk 52378f910f started work on scylla integration 2014-01-12 00:36:31 +01:00
mr.exodia 9dca34e3b8 fixed two bugs with dynamically imported winapi functions 2013-12-25 15:10:38 +01:00
mr.exodia 3cd9d2da3e updated definitions 2013-12-23 13:16:01 +01:00
cypherpunk eebf60323a you can now set UE_SECTIONNAME doestn just return false. lazy RL guys ^^ 2013-12-18 15:53:28 +01:00
cypherpunk d251983720 added UE_BASEOFCODE / UE_BASEOFDATA to Dumper::GetPE32 / Dumper::SetPE32 functions 2013-12-18 15:03:25 +01:00
cypherpunk e7714c7c27 - disabled exception handling for "Debug" which caused it not to build
- Runtime changed to /MTD
2013-12-18 14:14:45 +01:00
cypherpunk 9cd244db3e - fixed mainly const char* vs char*
- not copy paste, kept return datatypes typedef free (ULONG_PTR vs long long etc)
- some WIN64 defines added (not tested but copied from TitanScript)

changed classes (const char* vs char*):
- DumperA, DumperW, DumperX
- DebuggerA, DebuggerW, DebuggerX
- ImporterA, ImporterW, ImporterX
- RealignerA, RealignerW, RealignerX
- RelocaterA, RelocaterW, RelocaterX
- Tracer
- ExporterA, ExporterW, ExporterX
- LibrarianA, LibrarianW, LibrarianX
- TLSA, TLSW, TLSX
- StaticA, StaticW, StaticX
- RemoteA, RemoteW, RemoteX

not changed but might need changes:
- Threader, Resourcer, Hooks, Process, Handler, Extension, Engine, Translate

doesnt need changes:
- Hider
2013-12-09 12:04:01 +01:00
cypherpunk d2da5448a6 readded UE_VANOTFOUND
used e.g. in TitanScript as return type from TE
2013-12-09 12:03:06 +01:00
mr.exodia d585941ba9 - fixed a small SDK bug (with UE_MEMORY_EXECUTE)
- fixed a bug with MEMORY_EXECUTE (which was excluded as memory breakpoint type)
- slightly bigger buffer, to avoid undefined output when you directly use the returned char pointer as string
2013-12-02 20:47:38 +01:00
cypherpunk 592f618a9c fixes issue #7
RemoveMemoryBPX bug
2013-11-30 01:26:15 +01:00
cypherpunk 8ec098dcf1 now really: fixed Dumper::GetPE32Data(char*, DWORD, UE_SECTIONNAME) returning bad ptr 2013-11-25 00:53:52 +01:00
cypherpunk 60c1e2643e fixed Dumper::GetPE32Data(char*, DWORD, UE_SECTIONNAME) returning bad ptr 2013-11-24 16:20:22 +01:00