ahm3dgg
a53addef5f
Serialize & Deserialize module_load_count
2026-01-08 19:23:25 +02:00
ahm3dgg
06cc62042c
Serialize and Deserialize KnownDLLs Tables
2026-01-08 00:36:53 +02:00
ahm3dgg
bb98f2cee3
no need to set maximum size for section
2026-01-07 21:03:52 +02:00
ahm3dgg
63fad67e8f
no need to set maximum size
2026-01-07 20:49:37 +02:00
ahm3dgg
f12766f027
use local path for fs ops
2026-01-07 20:34:33 +02:00
ahm3dgg
49ae9ef68a
Add dummy stub for NtFlushInstructionCache
2026-01-07 20:21:19 +02:00
ahm3dgg
0b47eb77f1
Formatting fix
2026-01-07 19:54:34 +02:00
ahm3dgg
1ec9816d9a
Return STATUS_IMAGE_MACHINE_TYPE_MISMATCH in case a 64-bit process tries to map a 32-bit executable
2026-01-07 19:50:26 +02:00
ahm3dgg
fdcc7455a1
Separated KnownDLLs and KnownDLLs32
2026-01-07 19:37:36 +02:00
ahm3dgg
72ea3e0f0d
format fix
2026-01-07 09:35:13 +02:00
ahm3dgg
200b39359e
Fix
2026-01-07 09:33:06 +02:00
ahm3dgg
c92e7bff5f
fix cast
2026-01-07 09:15:57 +02:00
ahm3dgg
6958954f82
Fix another warning
2026-01-07 09:04:37 +02:00
ahm3dgg
f61946335c
fix cast
2026-01-07 08:57:09 +02:00
ahm3dgg
741dadfced
Remove redundant code
2026-01-07 08:54:05 +02:00
ahm3dgg
981faf3600
fix
2026-01-07 08:42:12 +02:00
ahm3dgg
4dadc42284
weird c++ moments
2026-01-07 08:36:01 +02:00
ahm3dgg
6c508eb15e
formatting fix
2026-01-07 08:30:13 +02:00
ahm3dgg
d4b59cc3cd
Fix
2026-01-07 08:27:25 +02:00
ahm3dgg
c3a760dace
Fixed Formatting
2026-01-07 08:23:00 +02:00
ahm3dgg
1806eeb2e0
Fix types
2026-01-07 08:18:08 +02:00
ahm3dgg
4f8745ce1b
Support for KnownDLLs and Some Refactoring
2026-01-07 08:06:19 +02:00
ahm3dgg
f54bc3467f
Support for KnownDLLs and Some Refactoring
2026-01-07 07:34:34 +02:00
momo5502
ff99a1cb56
Log writes to the import table
2026-01-06 14:41:34 +01:00
momo5502
45ac1fc32f
Cleanup headers
2026-01-06 11:29:39 +01:00
Maurice Heumann
5d81d8bda9
Implement NtQueryMultipleValueKey ( #684 )
...
This PR implements `NtQueryMultipleValueKey` that is used in calls like
`RegQueryMultipleValues`.
2026-01-06 10:38:10 +01:00
Maurice Heumann
e46e8dcf7a
more object syscalls ( #687 )
2026-01-06 10:30:47 +01:00
Maurice Heumann
1a613be667
ports: add noop port stub for WER ( #689 )
2026-01-06 10:22:49 +01:00
Maurice Heumann
d3af3c781c
Add support for user_object/user_handle_table ( #677 )
...
Fixes #641
This PR is my attempt to add support for user32 objects and the user32
handle table. I also added a test, but as expected, it fails on Windows
2022. I’ll try to fix that another day, but feel free to review the code
😄
2026-01-06 10:21:58 +01:00
ahm3dgg
67e130a3b8
Check if the known dll path exists first
2026-01-06 09:57:33 +02:00
ahm3dgg
725c7e3e9c
Pass file_system to process_context::setup
2026-01-06 09:16:45 +02:00
redthing1
17d1e23b60
syscalls.cpp: clang format
2026-01-05 23:15:02 -08:00
redthing1
1be74c4cde
ports: add noop port stub for WER
2026-01-05 23:12:53 -08:00
redthing1
51034297bf
object syscalls: wire up the new syscalls
2026-01-05 23:08:21 -08:00
redthing1
a2a119aec2
object syscalls: implement NtCompareObjects
2026-01-05 23:08:18 -08:00
redthing1
6f8dca6614
object syscalls: implement NtWaitForMultipleObjects32
2026-01-05 23:08:14 -08:00
redthing1
cafa0ebd0b
NTSTATUS: add STATUS_NOT_SAME_OBJECT
2026-01-05 23:08:05 -08:00
ahm3dgg
b642486bc4
Add Support for KnownDLLs
2026-01-06 08:34:41 +02:00
Igor Pissolati
90b38b3bff
Fix user_handle_table initialization
2026-01-05 09:01:05 -03:00
Igor Pissolati
5d59700ec7
Remove parse_number
2026-01-05 09:00:45 -03:00
ssvine
37c2184bfc
Implement NtQueryMultipleValueKey
2026-01-05 13:11:35 +03:00
brian
565b499350
Fix: update page protection when re-committing already committed memory regions
2026-01-05 14:39:28 +08:00
Igor Pissolati
d51f890197
Use vector instead of large array
2026-01-04 22:51:19 -03:00
ahm3dgg
3e7813b269
Merge branch 'patch' of github.com:ahm3dgg/sogen into patch
2026-01-04 21:38:11 +02:00
ahm3dgg
cf2dacb304
Fixed Types for Heap Related Fields in PEB64
2026-01-04 21:37:13 +02:00
Igor Pissolati
7112d619b4
Fix clang tidy
2026-01-04 16:28:30 -03:00
ahmed
ce73ef2b6c
Merge branch 'momo5502:main' into patch
2026-01-04 21:06:46 +02:00
Igor Pissolati
5302900a9d
Fix for older Windows builds
2026-01-04 16:01:13 -03:00
ahm3dgg
e17204552f
fix warning
2026-01-04 20:59:02 +02:00
Maurice Heumann
f218ec5d1d
Fix virtual memory semantics and refactor region policy ( #681 )
2026-01-04 19:46:14 +01:00