265 Commits

Author SHA1 Message Date
hasherezade f1a302e0c7 [VERSION] 4.0 2026-05-28 01:30:24 +02:00
hasherezade 4ef5ec1dfd [BUGFIX] Fixed the order of initializing the debug symbols 2026-05-27 19:37:08 +02:00
hasherezade 0dde72e777 [BUGFIX] Fixed counting loaded entries (params and exclusions) 2026-05-25 20:00:54 +02:00
hasherezade 46f5080d3e [FEATURE] Implemented local watch and exclusion lists 2026-05-25 17:35:14 +02:00
hasherezade 434bbf6576 [FEATURE] Define stop offsets per executable rather than globally 2026-05-25 16:48:46 +02:00
hasherezade 82548f11cb [FEATURE] Refactored loadInt to a template. Added ini parameter: flush interval 2026-05-25 15:16:51 +02:00
hasherezade b6950c33f9 [FEATURE] Force autoflushing of log on pause and resume 2026-05-24 09:41:49 -08:00
hasherezade 35d133abaa [REFACT] Refactored for compatibility with Pin 4+ 2026-05-23 21:08:50 +02:00
hasherezade bc5f9631e1 [FEATURE] In case of indirect branching, log instruction 2025-11-24 04:54:17 -08:00
hasherezade 991cafa2bc [FEATURE] Changes in Disasm follow rules: allow to follow threads 2025-11-12 23:14:43 +01:00
hasherezade 662827a9ba [FEATURE] Allow for two modes of disassembly logging: inner and outer 2025-10-04 03:27:34 -07:00
hasherezade 7e94961828 [FEATURE] Load disasm ranges from a file ([module].disasm_range.csv),
per module
2025-10-03 14:16:44 -07:00
hasherezade 2410d741a9 [FEATURE] Allow for naming ranges 2025-10-02 15:38:11 -07:00
hasherezade 746e483d59 [FEATURE] Define disasembly fragments as ranges 2025-10-02 14:27:29 -07:00
hasherezade 4dca64ea64 [FEATURE] Allow to exclude DLLs by name 2025-10-01 15:31:38 -07:00
hasherezade 787dc8b580 [REFACT] Print the banner after setup finished 2025-06-12 09:32:29 -07:00
hasherezade 631a7487b4 [REFACT] Small cleanup 2025-06-06 08:27:33 -07:00
hasherezade e8d6ad442e [FEATURE] Changed extension of the custom definitions file to: .func.csv 2025-06-06 08:21:15 -07:00
hasherezade f3425c06fa [REFACT] Moved function makePath to Util 2025-06-06 07:50:23 -07:00
hasherezade d9d62e4f7a [BUGFIX] Added missing const qualifier 2025-06-05 17:35:01 -07:00
hasherezade 75ad083b54 [BUGFIX] In getReadableMemSize: added boundary check 2025-06-05 17:34:06 -07:00
hasherezade dbdedea9ac [REFACT] Removed unused variable. Cleanup 2025-06-05 16:12:42 -07:00
hasherezade 5249c2cf51 [FEATURE] Allow to watch defined functions witin the traced module 2025-06-05 12:36:34 -07:00
hasherezade ff810bcf38 [REFACT] Use the new function to check if pointer is readable 2025-06-05 09:48:21 -07:00
hasherezade facbf4a450 [FEATURE] Allow to replace volume serial ID with a value from the INI file 2025-06-04 16:38:32 -07:00
hasherezade 86492df189 [REFACT] Changed comparing memory snapshots. Simplified displaying changed args 2025-06-04 12:47:06 -07:00
hasherezade 302e1b1736 [BUGFIX] Removed empty fini function 2025-06-04 11:28:03 -07:00
hasherezade b31ee67395 Merge pull request #75 from maxspl/master
[FEATURE] Return value and follow args - optimization
2025-06-04 20:25:37 +02:00
maxspl cabb035dae [REFACT] Naming and formatting 2025-06-04 19:58:53 +02:00
hasherezade 719a50df07 [BUGFIX] Build output path basing on the traced app path. Allow for empty 2025-06-04 07:02:00 -07:00
hasherezade f32bb5611c [FEATURE] In string verification: use retrieved length rather than hardcoded 2025-06-04 06:57:38 -07:00
hasherezade 4a3a48497e [REFACT] Improved verification of UNICODE_STRING 2025-06-04 05:48:06 -07:00
hasherezade 057776437c [REFACT] Retrieve size of readable in-memory buffer 2025-06-03 11:53:07 -07:00
hasherezade 0644e63046 [BUGFIX] Fixed crash on checking if pointer is readable. Changed implementation of the check 2025-06-02 13:03:39 -07:00
hasherezade fdb77f3cfe [FEATURE] Use the name of the traced module in the target file 2025-06-02 10:37:41 -07:00
hasherezade 9c7da6a2bf [FEATURE] Added manual exports parsing (for PE) 2025-06-01 17:26:27 -07:00
maxspl 92976a40af [FEATURE] Simplified feature to track args changes 2025-05-08 01:43:38 +02:00
hasherezade f4a33a9ae6 [BUGFIX] Ensure that all callbacks are called under global PinLocker 2025-04-27 01:34:59 +02:00
hasherezade 8f530b8c37 [REFACT] Fixed formattign of a printed buffer 2025-04-27 00:40:48 +02:00
hasherezade 74f5eb199e [NOBIN] Fixed code formatting 2025-04-27 00:21:21 +02:00
hasherezade 067de8d918 [REFACT] Moved return-tracking function into a separate namespace. Added checks 2025-04-26 23:04:30 +02:00
hasherezade 350ab51fd5 [REFACT] Moved trackign returns into separate files 2025-04-26 22:06:53 +02:00
maxspl d35b56cd85 [FIX] Minor fix for logging issue 2025-04-26 14:19:38 +02:00
maxspl fba4569d50 [FEATURE] Log return value + follow args and returns 2025-04-26 14:19:17 +02:00
hasherezade a081b8223c [BUGFIX] Fixed retrieving the syscall ID 2025-01-24 06:27:11 -08:00
hasherezade 7ac1c004b5 [VERSION] 2.9.5 2024-12-30 15:03:51 -08:00
hasherezade 863ffdcda3 [VERSION] 2.9.1 2024-12-29 05:47:12 -08:00
hasherezade 6ea138a549 [FEATURE] Hidden the message about not following the child process 2024-12-29 05:43:19 -08:00
hasherezade 9b2a559cbd [BUGFIX] Fixed Trap Flag simulation (Issue #69) 2024-12-29 05:39:31 -08:00
hasherezade d3426ba4f2 [FEATURE] Reverted: INI option regulating whether or not the child process will be followed 2024-12-15 16:13:52 -08:00