Commit Graph

1099 Commits

Author SHA1 Message Date
momo5502
80c8b88d23 Optimize instruction summary 2025-08-18 19:29:25 +02:00
momo5502
1db2c97165 Fix help 2025-08-18 19:16:56 +02:00
momo5502
c71c204583 Print instruction summary 2025-08-18 19:16:56 +02:00
momo5502
5a3d05c64c Fix compilation 2025-08-18 19:16:43 +02:00
momo5502
8e984b8b29 Keep GDTR readable for now 2025-08-18 19:07:12 +02:00
momo5502
2cef0a5511 Make sure GDTR is page aligned 2025-08-18 19:01:09 +02:00
momo5502
81ef6ed71a Fix gdtr loading for unicorn 2025-08-18 19:01:09 +02:00
momo5502
f432af419b Small fix 2025-08-18 19:01:09 +02:00
momo5502
c75f30fdfb Optimize instruction bytes 2025-08-18 19:01:09 +02:00
momo5502
10cd7868ac Support SGDT hooking 2025-08-18 18:24:46 +02:00
momo5502
acf28467c5 Small fix 2025-08-18 18:24:45 +02:00
momo5502
0e92b04ef9 Log overlapping object access 2025-08-17 18:07:51 +02:00
momo5502
9ca18dd141 Fix linter warning 2025-08-17 07:52:45 +02:00
momo5502
584b770def Store previous IP per thread 2025-08-17 07:32:26 +02:00
momo5502
b2eef2bf46 Align processor counts 2025-08-17 07:31:37 +02:00
momo5502
9c29f26647 Small fixes 2025-08-17 07:26:11 +02:00
momo5502
eb3a685f67 Fix initial memory protection 2025-08-16 17:55:51 +02:00
momo5502
7d6648ade0 Extend clang-format column limit to 140 2025-08-16 14:55:07 +02:00
momo5502
f3de9697d6 Prevent fallthrough to foreign transition if ignored 2025-08-16 14:27:11 +02:00
momo5502
ee2835d658 Enable instruction details 2025-08-16 13:48:52 +02:00
momo5502
bb79b45f13 Set library path 2025-08-16 12:40:16 +02:00
momo5502
397db6decc Fix print 2025-08-16 11:53:44 +02:00
momo5502
3b72ae9709 Add capstone disassembler 2025-08-16 11:53:40 +02:00
momo5502
f12fd47d1d Log transitions to foreign code 2025-08-15 15:30:08 +02:00
momo5502
127ed1b552 Log rdtsc 2025-08-15 12:54:36 +02:00
momo5502
bfb874662f Cache access in concise mode 2025-08-14 19:15:27 +02:00
momo5502
ee679dcd0a Log ldr access 2025-08-14 18:38:11 +02:00
momo5502
73000c8d22 Log foreign memory access 2025-08-14 17:03:39 +02:00
momo5502
e10df224a7 Log accessed size 2025-08-13 20:58:48 +02:00
momo5502
3189e6f701 Log more interesting things if outside any mapped module 2025-08-13 19:50:04 +02:00
momo5502
982d02b674 Log invocations outside of any module 2025-08-13 19:09:44 +02:00
momo5502
a33e252e40 Kill WinVerifyTrust 2025-08-13 19:06:18 +02:00
momo5502
f9cee1837c Print compare input 2025-08-10 12:43:35 +02:00
momo5502
94687d73fe Small fixes 2025-08-10 11:18:05 +02:00
momo5502
5fbf065937 Handle debug strings via callback 2025-08-10 10:03:12 +02:00
momo5502
74bff93580 Print on unknown exception 2025-08-10 08:40:29 +02:00
momo5502
b980ff6277 Fix crash is module is nullptr 2025-08-10 08:37:02 +02:00
momo5502
806aa8b61b Print module name 2025-08-09 21:56:25 +02:00
momo5502
93ff52c2ec Fix ordinals 2025-08-09 21:36:40 +02:00
momo5502
9e45d2a333 Fix warning 2025-08-09 21:00:10 +02:00
momo5502
b3bdfc9d6b Support hooking/unhooking within hooks for icicle 2025-08-09 20:45:05 +02:00
momo5502
3b9320fd62 Better import access tracking 2025-08-09 18:02:37 +02:00
momo5502
2abe1737f3 Fix android compilation 2025-08-09 17:42:33 +02:00
momo5502
292fc6ce67 Fix compilation 2025-08-09 17:38:20 +02:00
momo5502
eb07148bfd Support hook deletion during hook deletion 2025-08-09 17:23:58 +02:00
momo5502
386f5b1cbc Add missing types 2025-08-09 17:20:22 +02:00
momo5502
eb6d352a81 Track import access 2025-08-09 17:07:33 +02:00
momo5502
09ad463027 Support environment analysis 2025-08-09 14:06:06 +02:00
CarlTSpeak
051cef2212 fix: handle VirtualAlloc invalid size and flags 2025-08-08 14:52:03 +01:00
CarlTSpeak
0aea1f5385 I just learned how clang-format works. Fail. 2025-08-08 11:22:56 +01:00