momo5502
eb07148bfd
Support hook deletion during hook deletion
2025-08-09 17:23:58 +02:00
momo5502
386f5b1cbc
Add missing types
2025-08-09 17:20:22 +02:00
momo5502
eb6d352a81
Track import access
2025-08-09 17:07:33 +02:00
momo5502
09ad463027
Support environment analysis
2025-08-09 14:06:06 +02:00
CarlTSpeak
051cef2212
fix: handle VirtualAlloc invalid size and flags
2025-08-08 14:52:03 +01:00
CarlTSpeak
0aea1f5385
I just learned how clang-format works. Fail.
2025-08-08 11:22:56 +01:00
CarlTSpeak
210ab2930c
Fixed platform portability issues
2025-08-06 11:12:44 +01:00
CarlTSpeak
8b2c170236
Fixed clang exception. Again.
2025-08-06 11:01:42 +01:00
CarlTSpeak
ffea72d48a
Added basic pipe support to NtRead/WriteFile
2025-08-06 10:30:40 +01:00
CarlTSpeak
100638d8ea
Fixed clang-tidy issue
2025-08-05 16:26:13 +01:00
CarlTSpeak
85843ff5c9
Fixed cross-platform: removed MS-specific macro
2025-08-05 15:55:36 +01:00
CarlTSpeak
5f9bfd4694
Added stubs for NtCreateNamedPipeFile NtReleaseWorkerFactoryWorker
2025-08-05 15:44:19 +01:00
CarlTSpeak
cae1cf5c1f
Added stubs for NtCreateNamedPipeFile NtReleaseWorkerFactoryWorker
2025-08-05 15:35:31 +01:00
Maurice Heumann
a1df4d8047
Update reflect_type_info.hpp
2025-08-05 07:24:16 +02:00
Maurice Heumann
73085b16db
Update reflect_type_info.hpp
2025-08-05 07:14:54 +02:00
momo5502
6eb4ef33ff
Handle invalid page protections
...
This fixes #420
2025-07-20 09:34:25 +02:00
momo5502
5e57360dc3
Fix buffer overflow
2025-07-18 07:15:54 +02:00
Maurice Heumann
acc5dd9646
Fix compilation
2025-07-17 19:49:16 +02:00
Maurice Heumann
4d4c04eb78
Finish tenet tracer refactoring
2025-07-17 19:42:59 +02:00
Maurice Heumann
6e71e495bc
More fixes
2025-07-17 18:55:16 +02:00
Maurice Heumann
3c05c7a607
Small fixes
2025-07-17 18:53:07 +02:00
Maurice Heumann
d09b32eb5e
Fix clang tidy warnings
2025-07-17 18:45:18 +02:00
Maurice Heumann
b5e40c3627
Revert line endings
2025-07-17 18:38:26 +02:00
Maurice Heumann
8caf724c95
Fix formatting
2025-07-17 18:30:00 +02:00
Maurice Heumann
079d367792
Generate an output that the Tenet plugin can read ( #416 )
...
Generates a Tenet tracer output with the -t parameter. The original
Tenet tracer plugin is outdated, so I made updates to support our
emulator. The forked project below works well.
https://github.com/maskelihileci/tenet/tree/master/plugins_sogen-support
2025-07-17 18:11:47 +02:00
Maurice Heumann
9e5a6b509b
Implement guard pages ( #406 )
...
Hey, looking for feedback on my guard page implementation.
I wasn't sure on how to structure the additional windows specific memory
flags, since the emulation backends won't like additional guard flag. I
opted to create a new `memory_permission_ext` enum to hold the guard
flag, and a `nt_memory_permission` struct to wrap the "common" memory
permission flags, with the new extended flags. This struct implicitly
coerces to the original `memory_permission` to reduce the amount of
changes for the PR.
This however meant that I changed signatures of `map_memory` and
`apply_memory_protection` in `memory_interface` to accommodate this new
structure, and was an afterthought.
The `map_nt_to_emulator_protection` function might also need some
attention now, too. For future reference, windows uses
[MiMakeProtectionMask](https://doxygen.reactos.org/d1/d9a/marea_8c.html#adfb66408771a4df77c1056cc2a99ef21 )
in ntoskrnl to map `PAGE_*` flags to [MM PTE
constants](https://reactos.org/wiki/Techwiki:Memory_management_in_the_Windows_XP_kernel ).
The test added to the `test-sample` binary seems to be passing.
Fixes #21
2025-07-17 17:41:06 +02:00
3fault
188b95af5d
Fix formatting
2025-07-17 11:27:23 -04:00
3fault
f1d54f7417
Parameterize basic_memory_region to support extended memory flags
2025-07-17 11:19:56 -04:00
3fault
9f637105fb
Unset extended flags in nt_memory_permission assignment operator
2025-07-17 11:06:26 -04:00
3fault
8cea9fc75a
Ensure memory is freed after guard page test
2025-07-17 10:55:45 -04:00
maskelihileci
20f96841de
Generate an output that the Tenet plugin can read
...
Generates a Tenet tracer output with the -t parameter.
The original Tenet tracer plugin is outdated, so I made updates to support our emulator. The forked project below works well.
https://github.com/maskelihileci/tenet/tree/master/plugins_sogen-support
2025-07-17 14:36:29 +03:00
Maurice Heumann
f6fbb6c46d
Merge branch 'unicorn-upgrade-2' into unhandled-exceptions
2025-07-13 20:47:01 +02:00
Maurice Heumann
2185d00ec0
Revert invalid instruction changes
2025-07-13 19:43:13 +02:00
Maurice Heumann
91375b22f9
Try upgrading unicorn
2025-07-13 19:37:56 +02:00
Maurice Heumann
7632a77c36
Ah fuck it
2025-07-13 12:37:16 +02:00
Maurice Heumann
24ed6db02e
Try different fix
2025-07-13 12:25:20 +02:00
Maurice Heumann
cc8aa65aec
Fix icicle deprecation warning
2025-07-13 12:07:46 +02:00
Maurice Heumann
d7a1a269b7
Setup thread before dispatching APC
2025-07-12 21:33:12 +02:00
momo5502
ac2d34c143
Small cleanup
2025-07-12 15:40:04 +02:00
momo5502
7a3a5d760e
Fix thread deletion
2025-07-12 15:28:30 +02:00
momo5502
08995a4205
Print memory stats
2025-07-12 14:17:52 +02:00
momo5502
0794c1038b
Display emulation status
2025-07-11 13:43:21 +02:00
momo5502
acb65dc10d
Log message box arguments
2025-07-09 21:17:32 +02:00
3fault
f4fc9c4a6c
fix memory_permissions_ext includes
2025-07-09 14:49:26 -04:00
3fault
19574fb512
remove references to nt_memory_permission from backend
2025-07-09 14:43:06 -04:00
3fault
8ec184d57f
remove unneeded windows-emulator/memory_permission_ext.cpp
2025-07-09 14:39:49 -04:00
momo5502
adb94f37bd
Prepare memory 64 support
2025-07-09 17:38:10 +02:00
Maurice Heumann
a711a8faad
Fix posix colors
2025-07-08 18:55:29 +02:00
Maurice Heumann
965efadb51
Detailed CPUID logging
2025-07-08 18:50:40 +02:00
Maurice Heumann
d656a18c8b
Print CPUID leaf
2025-07-08 16:36:23 +02:00
