Commit Graph

33 Commits

Author SHA1 Message Date
Mr. eXoDia 3c8b51aa52 added UE_CH_DEBUGEVENT custom handler, removed UE_CH_ALLEVENTS (since it's not usable anyway) 2014-04-22 19:32:58 +02:00
Mr. eXoDia bc2240d1c1 added export 'TitanOpenProcess' 2014-04-16 19:11:12 +02:00
Mr. eXoDia 98f71dbad6 - fixed EngineSetDebugPrivilege
- added function EngineOpenProcess (with debug privilege option)
- added UE_ENGINE_SET_DEBUG_PRIVILEGE
- added debug privileges before CreateProcess and DebugActiveProcess
- remove debug privilege from the child process
- dumper/handler/importer/process now use EngineOpenProcess
2014-04-16 17:14:20 +02:00
Mr. eXoDia ddf87c22c0 - replaced all 'long long' with 'ULONG_PTR'
- fixed various bugs in TitanEngine.Debugger.Context (invalid OpenThread access flags)
- added SDK to the project (for easy editing)
2014-04-04 14:53:18 +02:00
NtQuery 2ebf55ebba fixed sdk 2014-03-16 16:51:45 +01:00
NtQuery 17d8b6e09e extended thread info 2014-03-16 16:47:08 +01:00
Mr. eXoDia 3047edc22b - added function EngineCheckStructAlignment (resolved issue #33) 2014-03-14 21:43:01 +01:00
Mr. eXoDia fc51e0d144 - added StepOut function 2014-03-12 14:49:36 +01:00
Mr. eXoDia 3675215bf3 - added a debug callback reason for plugins -> UE_PLUGIN_CALL_REASON_UNHANDLEDEXCEPTION
- now plugins are actually registered
- fixed OUTPUT_DEBUG_STRING_EVENT (DBGCode should be set before the callback, so plugins & custom handlers can change it)
2014-03-11 16:14:49 +01:00
Mr. eXoDia 085e6ae7a9 - added function ImporterGetDLLNameFromDebugeeW
- fixed function ImporterGetDLLNameFromDebugee
- added function EngineGetModuleBaseRemote
- added function EngineGetAPIAddressRemote
- added function EngineGetAPIAddressLocal
- fixed a potential bug in SetAPIBreakPoint & DeleteAPIBreakPoint
- fixed ImpoerterGetDLLName (this function is used on the local process)
- fixed function ImporterGetDLLNameW & ImporterGetDLLName
- moved fixed functions up
2014-03-11 15:25:17 +01:00
Mr. eXoDia 5e5dac1186 - fixed the function EngineGetProcAddressRemote (now supports any number of modules)
- added the function EngineGetModuleBaseRemote
- added export ImporterGetDLLNameW
- fixed export ImporterGetDLLName
2014-03-11 14:53:11 +01:00
NtQuery a742815814 UNICODE-FIX new ImporterGetRemoteDLLBaseExW 2014-03-11 12:33:06 +01:00
Mr. eXoDia 93a8582044 - some new idea, see issue #23
- updated c++ header
2014-03-09 23:10:42 +01:00
NtQuery a51f2455ba updated some header and def files 2014-03-09 22:18:21 +01:00
mr.exodia bc7906460c - formatting lol
- rewrote TitanEngine.Threader to use a vector (decreased memory footprint)
- Removed function ThreadGetThreadData
2014-03-05 17:49:27 +01:00
mr.exodia e265f498d0 - removed some useless defines
- added GetPEBLocation64 to the SDK files
- GetPEBLocation is also defined on x64, but does nothing there
- moved a function to Global.Engine.Hider
2014-03-04 21:31:04 +01:00
mr.exodia 92451cfe42 - removed SetBPXEx (condentional breakpoints are removed now)
- no more static breakpoint list
- huge refactoring
- bugs fixed in TitanEngine.Breakpoints
2014-03-04 21:07:07 +01:00
mr.exodia 2ae7e9e541 - added RipEvent callback
- removed debug message
2014-02-08 20:44:07 +01:00
mr.exodia 07291f2710 fixed a spelling mistake (thanks to hors) 2014-01-27 17:24:52 +01:00
mr.exodia 11543652c5 resolved issue #6 2014-01-26 13:36:01 +01:00
cypherpunk 419f9a3c4b cleanup TE remnants obsoleted by scylla integration 2014-01-21 23:21:38 +01:00
cypherpunk 095950b16d added Importer::DeleteAPI export for deleting an API out of the parsed/read IAT, x64 still needs to be updated 2014-01-16 01:41:59 +01:00
cypherpunk cfb052280e fixed ExportIAT to work for FileMapping with Scylla 2014-01-14 18:00:11 +01:00
cypherpunk 2c1639d6cc custom section name support 2014-01-13 00:17:04 +01:00
cypherpunk 86abf46dbe fix for ExportIATEx 2014-01-12 23:01:38 +01:00
cypherpunk d0a5b10884 forgot sth with: removed obsolete parameter imageBase 2014-01-12 22:05:54 +01:00
cypherpunk 65d4cff823 removed obsolete parameter imageBase 2014-01-12 20:00:51 +01:00
cypherpunk d251983720 added UE_BASEOFCODE / UE_BASEOFDATA to Dumper::GetPE32 / Dumper::SetPE32 functions 2013-12-18 15:03:25 +01:00
cypherpunk d2da5448a6 readded UE_VANOTFOUND
used e.g. in TitanScript as return type from TE
2013-12-09 12:03:06 +01:00
mr.exodia 0a2d5747b6 - updated readme (basically it says: LUA, Python and MASM are not tested with these updates)
- re-added UE_HIDE_PEBONLY (thanks to cypherpunk for the report)
2013-10-13 23:39:06 +02:00
mr.exodia 3e262f2ef1 - fixed c++ headers (thanks to cypher)
- removed kernelbase.dll ignore
2013-10-13 18:23:46 +02:00
mr.exodia 14a3692b11 - fixed first/second chance exceptions 2013-10-12 17:42:00 +02:00
mr.exodia 8761d815c2 - multiple calling conventions supported
- moved stuff to the SDK directory
2013-10-12 01:05:46 +02:00