Maurice Heumann
d7a1a269b7
Setup thread before dispatching APC
2025-07-12 21:33:12 +02:00
momo5502
f3b20da9cc
Optimize thread scheduling and pausing
2025-06-07 14:20:19 +02:00
momo5502
05c5f0a085
Final cleanup
2025-06-07 08:01:02 +02:00
momo5502
da4a4f90c9
Cleanup exception callbacks
2025-06-07 07:54:11 +02:00
momo5502
bc77faec3d
Move more logging into callbacks
2025-06-06 20:03:53 +02:00
momo5502
9b8ea27a29
Delay process setup
2025-06-05 20:53:38 +02:00
momo5502
f2e0e91630
Isolate more analysis into analyzer
2025-06-05 18:59:27 +02:00
momo5502
f046246740
Extract more analysis logic
2025-06-04 21:21:48 +02:00
momo5502
84e8e86b94
Extract sus activity logging
2025-06-04 19:28:50 +02:00
momo5502
009961620b
Fix thread deletion
2025-06-01 13:57:14 +02:00
momo5502
da658e5178
Prepare timer support
2025-06-01 13:56:45 +02:00
momo5502
28de07ac8f
Explicitly pass desired backend to emulator
2025-05-29 19:49:53 +02:00
momo5502
c559c2ff43
Support stopping emulation while all threads are sleeping
...
This fixes #242
2025-05-29 08:30:56 +02:00
momo5502
ae77e1b62d
Fix fuzzer
2025-05-28 19:47:08 +02:00
momo5502
30363cc760
Reimplement snapshot support
2025-05-25 17:56:50 +02:00
Soham Nandy
cff2feee75
Add rdtscp instruction with stub IA32_TSC_AUX values
2025-05-02 07:20:36 +05:30
Maurice Heumann
6cb571f496
Prepare web debugger ( #247 )
2025-04-29 09:51:15 +02:00
momo5502
1beb95c2b2
Support thread-switch callback
2025-04-29 09:25:45 +02:00
Igor Pissolati
a629f77e31
Miscellaneous fixes
2025-04-28 12:48:28 -03:00
Igor Pissolati
9d5338b168
Load environment variables from registry
2025-04-28 12:46:36 -03:00
robert-yates
b2296930d3
prepare 32bit support with name and class inheritance modifications
2025-04-22 12:01:40 +02:00
momo5502
4ac8d853a6
Always use static socket factory for emscripten
2025-04-18 08:15:17 +02:00
momo5502
c1553ad2ec
Fixes for emscripten
2025-04-17 19:40:20 +02:00
momo5502
68022ef501
Fixes
2025-04-14 20:16:24 +02:00
Maurice Heumann
a6dd9251b8
Prepare 32 bit support
2025-04-14 13:57:54 +02:00
momo5502
b3139cfacd
Small fixes
2025-04-13 16:38:50 +02:00
momo5502
2ed35d94b9
Set correct status
2025-04-13 15:00:39 +02:00
momo5502
7910021124
Fix apc dispatching
2025-04-13 14:28:35 +02:00
momo5502
c1e621c2cd
Basic hacky working APC dispatching
2025-04-13 13:39:09 +02:00
momo5502
f58dec38a2
Prepare APC support
2025-04-13 13:39:08 +02:00
Soham Nandy
ea7f6a68c8
Use auto for timestamp_counter tick type
...
Co-authored-by: Maurice Heumann <MauriceHeumann@gmail.com >
2025-04-11 12:12:56 +05:30
Soham Nandy
daeefb4a7f
refactor(rdtsc): clean up code overall
...
Change type of chrono return to be auto
Co-authored-by: Maurice Heumann <MauriceHeumann@gmail.com >
simplify conditional compile and add #else to prevent clang-tidy breaking CI
Co-authored-by: Maurice Heumann <MauriceHeumann@gmail.com >
2025-04-11 06:39:01 +05:30
Soham Nandy
0271e39474
refactor(rdtsc): clean up tick logic,
...
fix intrinsics, and resolve x86 compiler issues
- fix `time.hpp` compiler warnings (errors) and use proper intrinsic for gcc
- simplify tick calculation logic
- fix: exclude intrinsics include for non x86 builds and fix style
- fix: get() on clock_ unique ptr
2025-04-11 01:46:52 +05:30
Soham Nandy
dbc1b4439e
feat: spoof rdtsc timings
...
Previously, RDTSC in the VM always returned a constant value, which broke any non deterministic timing-based operations, or caused detections in heuristics of malware and ANTI-VM tools.
This patch introduces a spoofed rdtsc_fake counter that tracks and adjusts timing deltas to simulate realistic TSC increments. Can be extended to simulate rdtsc timings based on CPU clock speed.
2025-04-10 06:58:01 +05:30
Maurice Heumann
67d34b3988
Small fix
2025-04-08 10:17:05 +02:00
Maurice Heumann
66a529cf43
More logging
2025-04-07 15:36:25 +02:00
Maurice Heumann
f087d3998a
Ignore certain function calls
2025-04-07 15:17:52 +02:00
momo5502
349526a54a
Simplify hooking interface
2025-04-05 11:59:49 +02:00
Maurice Heumann
8de5c7be3a
Run icicle tests
2025-04-04 15:34:58 +02:00
Maurice Heumann
24df7c65c2
Support accurate instruction counts
2025-04-04 13:13:09 +02:00
momo5502
1cdf280fcf
Support disabling rust code
2025-04-01 18:49:41 +02:00
momo5502
7d5555e985
Fix unicorn and switch back to it as default emulator
2025-04-01 18:37:00 +02:00
Maurice Heumann
dec66f051d
Test
2025-03-29 10:44:41 +01:00
momo5502
c4349bc4e6
Log message box strings
2025-03-22 20:32:18 +01:00
momo5502
53fb2f9116
Support more syscalls
2025-03-22 19:53:53 +01:00
momo5502
0b9fe3d7cc
Slightly optimize performance
2025-03-22 17:54:39 +01:00
Maurice Heumann
851fe3acba
Create proper emulator
2025-03-20 16:15:00 +01:00
Maurice Heumann
4da6642123
Add socket abstraction
2025-03-20 15:45:38 +01:00
momo5502
df4208c34d
Fix more warnings
2025-03-18 20:58:26 +01:00
Maurice Heumann
95c7ffbf91
Move executed instructions into windows emulator
2025-03-18 12:35:38 +01:00