Commit Graph

167 Commits

Author SHA1 Message Date
momo5502
289eb2cbb0 Print counts in decimal 2025-09-06 11:12:51 +02:00
momo5502
037f078302 Revert SGDT hooking support
It's useless
2025-08-24 13:49:56 +02:00
momo5502
aa1a49ad6f Get rid of static variables 2025-08-24 09:33:16 +02:00
Maurice Heumann
37310a308b Fix Node.js analyzer 2025-08-24 08:43:23 +02:00
momo5502
7605309317 Fix cache for overlapping access 2025-08-20 16:13:48 +02:00
momo5502
80c8b88d23 Optimize instruction summary 2025-08-18 19:29:25 +02:00
momo5502
1db2c97165 Fix help 2025-08-18 19:16:56 +02:00
momo5502
c71c204583 Print instruction summary 2025-08-18 19:16:56 +02:00
momo5502
f432af419b Small fix 2025-08-18 19:01:09 +02:00
momo5502
c75f30fdfb Optimize instruction bytes 2025-08-18 19:01:09 +02:00
momo5502
10cd7868ac Support SGDT hooking 2025-08-18 18:24:46 +02:00
momo5502
acf28467c5 Small fix 2025-08-18 18:24:45 +02:00
momo5502
0e92b04ef9 Log overlapping object access 2025-08-17 18:07:51 +02:00
momo5502
9ca18dd141 Fix linter warning 2025-08-17 07:52:45 +02:00
momo5502
584b770def Store previous IP per thread 2025-08-17 07:32:26 +02:00
momo5502
9c29f26647 Small fixes 2025-08-17 07:26:11 +02:00
momo5502
7d6648ade0 Extend clang-format column limit to 140 2025-08-16 14:55:07 +02:00
momo5502
f3de9697d6 Prevent fallthrough to foreign transition if ignored 2025-08-16 14:27:11 +02:00
momo5502
ee2835d658 Enable instruction details 2025-08-16 13:48:52 +02:00
momo5502
397db6decc Fix print 2025-08-16 11:53:44 +02:00
momo5502
3b72ae9709 Add capstone disassembler 2025-08-16 11:53:40 +02:00
momo5502
f12fd47d1d Log transitions to foreign code 2025-08-15 15:30:08 +02:00
momo5502
127ed1b552 Log rdtsc 2025-08-15 12:54:36 +02:00
momo5502
bfb874662f Cache access in concise mode 2025-08-14 19:15:27 +02:00
momo5502
ee679dcd0a Log ldr access 2025-08-14 18:38:11 +02:00
momo5502
73000c8d22 Log foreign memory access 2025-08-14 17:03:39 +02:00
momo5502
e10df224a7 Log accessed size 2025-08-13 20:58:48 +02:00
momo5502
3189e6f701 Log more interesting things if outside any mapped module 2025-08-13 19:50:04 +02:00
momo5502
982d02b674 Log invocations outside of any module 2025-08-13 19:09:44 +02:00
momo5502
a33e252e40 Kill WinVerifyTrust 2025-08-13 19:06:18 +02:00
momo5502
f9cee1837c Print compare input 2025-08-10 12:43:35 +02:00
momo5502
94687d73fe Small fixes 2025-08-10 11:18:05 +02:00
momo5502
5fbf065937 Handle debug strings via callback 2025-08-10 10:03:12 +02:00
momo5502
74bff93580 Print on unknown exception 2025-08-10 08:40:29 +02:00
momo5502
b980ff6277 Fix crash is module is nullptr 2025-08-10 08:37:02 +02:00
momo5502
806aa8b61b Print module name 2025-08-09 21:56:25 +02:00
momo5502
3b9320fd62 Better import access tracking 2025-08-09 18:02:37 +02:00
momo5502
eb6d352a81 Track import access 2025-08-09 17:07:33 +02:00
momo5502
09ad463027 Support environment analysis 2025-08-09 14:06:06 +02:00
Maurice Heumann
a1df4d8047 Update reflect_type_info.hpp 2025-08-05 07:24:16 +02:00
Maurice Heumann
73085b16db Update reflect_type_info.hpp 2025-08-05 07:14:54 +02:00
Maurice Heumann
acc5dd9646 Fix compilation 2025-07-17 19:49:16 +02:00
Maurice Heumann
4d4c04eb78 Finish tenet tracer refactoring 2025-07-17 19:42:59 +02:00
Maurice Heumann
6e71e495bc More fixes 2025-07-17 18:55:16 +02:00
Maurice Heumann
3c05c7a607 Small fixes 2025-07-17 18:53:07 +02:00
Maurice Heumann
d09b32eb5e Fix clang tidy warnings 2025-07-17 18:45:18 +02:00
Maurice Heumann
b5e40c3627 Revert line endings 2025-07-17 18:38:26 +02:00
Maurice Heumann
8caf724c95 Fix formatting 2025-07-17 18:30:00 +02:00
maskelihileci
20f96841de Generate an output that the Tenet plugin can read
Generates a Tenet tracer output with the -t parameter.
The original Tenet tracer plugin is outdated, so I made updates to support our emulator. The forked project below works well.

https://github.com/maskelihileci/tenet/tree/master/plugins_sogen-support
2025-07-17 14:36:29 +03:00
momo5502
0794c1038b Display emulation status 2025-07-11 13:43:21 +02:00