hakril
|
6fd32762da
|
Try improving CurrentProcessReadSyswow stability
|
2025-02-02 16:54:23 +01:00 |
|
hakril
|
aab4fdc02d
|
Try new handle method for CurrentProcessReadSyswow
|
2025-02-02 16:35:16 +01:00 |
|
hakril
|
ff4161602c
|
Small improvments
|
2025-02-02 16:29:05 +01:00 |
|
hakril
|
5da27a78d2
|
Fix badcode in syswo64.py
|
2025-02-01 11:35:22 +01:00 |
|
clement rouault
|
c68dc4e29a
|
Syswow.py 32->64 calls should now work with multi-threads
|
2021-06-15 15:33:28 +02:00 |
|
hakril
|
fb23ad2838
|
Fix syswow64 32<->64 for python3-23b
|
2020-03-10 21:03:59 +01:00 |
|
hakril
|
f2a6489463
|
Added mov REG/SEGREG in simple_x86 + fix a bug in syswow64 on AMD do to a processor bug (Issue10)
|
2020-02-02 17:49:42 +01:00 |
|
hakril
|
7827a43d9a
|
Fixed a logic bug in object manager + import bug in syswow.py
|
2019-08-05 22:31:00 +02:00 |
|
hakril
|
e46dc48c37
|
Addapt codebase and tests to winproxy refactoring (replace Kernel32Error to WinproxyError)
|
2018-11-24 22:59:00 +01:00 |
|
Clement Rouault
|
c75dda60b5
|
Fixed get_kernel_modules for syswow64 process
|
2017-08-17 13:51:36 +02:00 |
|
Clement Rouault
|
f54a64670e
|
Add context_syswow/set_syswow_context + debugger able to handle BP in 64b part of syswow process
|
2016-07-20 18:21:28 +02:00 |
|
Clement Rouault
|
cf6c48b418
|
Remove some commented old code + fix read/write of REG_QWORD values in registry
|
2016-07-07 17:41:57 +02:00 |
|
Clement Rouault
|
b74d7a9e7e
|
Add Jmp/Call Far 16:32 in simple_x86 + clean and simplify syswow-to-64 execution
|
2016-07-07 13:16:36 +02:00 |
|
Clement Rouault
|
3069b93d21
|
Remove winproxy.OptionExport + Add some classes ton MEMORY_INFORMATION enum
|
2016-07-01 18:12:28 +02:00 |
|
Clement Rouault
|
899e6b9147
|
Removed a debug print
|
2016-05-23 09:48:00 +02:00 |
|
hakril
|
aaa680c61c
|
Fix CurrentProcessReadSyswow for windows10
|
2016-05-22 12:00:34 +02:00 |
|
Clement Rouault
|
dfe8217259
|
Fix system.version_name on windows10
|
2016-05-13 16:31:07 +02:00 |
|
Clement Rouault
|
10a803e9c9
|
Add shr/shl + small fix simple_x64 Imm8 + execute_64bits_code_from_syswow able to return ULONG64
|
2016-05-02 18:21:09 +02:00 |
|
Clement Rouault
|
085c36c706
|
fix/simplify get_string in pe_parse / adapt syswow.py
|
2016-04-21 10:47:00 +02:00 |
|
Clement Rouault
|
b621e6a09f
|
fix queryworkingset / add test / add virtual protect context manager
|
2016-04-18 11:24:41 +02:00 |
|
Clement Rouault
|
b698b27a6f
|
Add process.query_working_set
|
2016-04-08 13:45:27 +02:00 |
|
Clement Rouault
|
3cb8cc6f9e
|
Refactor: new winobject directory
|
2016-03-23 13:42:54 +01:00 |
|
Clement Rouault
|
db4c51dc67
|
Syswow64ApiProxy now handle None from OptionalExport
|
2016-03-22 13:37:22 +01:00 |
|
Clement Rouault
|
16ef768f3f
|
Unifor the import / use of winproxy
|
2016-03-21 13:27:23 +01:00 |
|
Clement Rouault
|
b789a12040
|
Improve debugger + pe_parse 'guess' the PE type (32/64)
|
2016-02-10 16:27:53 +01:00 |
|
Clement Rouault
|
0da86e20aa
|
SetThreadContext 32<->64 + test
|
2016-02-01 17:31:56 +01:00 |
|
hakril
|
ec4862439f
|
Add LdrLoadDLL + Fix winproxy.VirtualProtect Commit2
|
2016-01-27 12:41:41 +01:00 |
|
Clement Rouault
|
99788d0368
|
Writting a debugger is fun :D
|
2016-01-22 18:19:00 +01:00 |
|
Clement Rouault
|
b459e291c4
|
More doc + regitry PyPhKey.get()
|
2016-01-07 19:26:40 +01:00 |
|
hakril
|
28eb4df2d0
|
Testing of project tree rewriting
|
2015-12-30 22:49:34 +01:00 |
|