Releases: hasherezade/tiny_tracer
2.8.2
REFACT
- Optimizations: increased speed of tracing, lowered memory consumption
Requires Intel Pin 3.26 or above.
I am sorry but Intel does not allow for distribution of compiled Pin Tools. So, you need to compile them from the sources.
Follow the instructions to build and install.
2.8
FEATURE
- Added Stop Offsets
- Added Tracing with Disassembly
- Detection of Heaven's Gate
- Added new AntiVm bypasses, allowing to trace some of the VMProtect variants (#61, #26)
Requires Intel Pin 3.26 or above.
I am sorry but Intel does not allow for distribution of compiled Pin Tools. So, you need to compile them from the sources.
Follow the instructions to build and install.
2.7.1
BUGFIX
- Fixed
ANTIDEBUG=2not working for 32-bit applications (wrong size of the passed argument) - Fixed backward compatibility with older Pin versions (use
INS_OperandWidthinstead ofINS_OperandSize)
Requires Intel Pin 3.26 or above.
I am sorry but Intel does not allow for distribution of compiled Pin Tools. So, you need to compile them from the sources.
Follow the instructions to build and install.
2.7
FEATURE
- Allow to select whether or not debug symbols should be used for name resolution - can be enabled/disabled via INI file ( Issue #39 ) [ details ]
- Bypass AntiDebug technique basing on Trap Flag. Resolved problems with tracing applications protected by VMProtect with Debugger Detection enabled (bypassed mode: "Debugger: User-mode + Kernel-mode") ( Issue #26 )
- Support detecting some of the AntiVM techniques ( WMI query parameters tracing ) - can be enabled/disabled via INI file [ details ]
- Support detecting more AntiDebug techniques ( i.e. searching for Software Breakpoints )
REFACT
- Removed dependency from
windows.h
Requires Intel Pin 3.26 or above.
I am sorry but Intel does not allow for distribution of compiled Pin Tools. So, you need to compile them from the sources.
Follow the instructions to build and install.
2.6.1
BUGFIX
- Use export symbols only ( Issue #39 )
Requires Intel Pin 3.26 or above.
I am sorry but Intel does not allow for distribution of compiled Pin Tools. So, you need to compile them from the sources.
Follow the instructions to build and install.
2.6
BUGFIX
- Fixed Tracer crashing while trying to dump some Unicode strings ( Issue #38 )
FEATURE
- Added an option of tracking common Antidebug techniques. Bypass Trap Flag. (Issue #32) [details]
- Added an option to track interrupts (Issue #34) [details]
- Added functions filtering (Issue #33) [details]
Requires Intel Pin 3.26 or above.
I am sorry but Intel does not allow for distribution of compiled Pin Tools. So, you need to compile them from the sources.
Follow the instructions to build and install.
2.3
FEATURE
- Added a possibility to map syscalls to functions, using supplied table. Automatic syscalls to function name resolution on Windows. (More info: Wiki )
- When syscalls table is loaded, parameters of the syscalls can be traced also by the corresponding function's name.
- Print function's name before listing the parameters (a workaround against some concurrency issues, causing the function's parameters to be printed not immediately after the logged call)
- Enabled syscalls logging by default
Requires Intel Pin 3.26 or above.
I am sorry but Intel does not allow for distribution of compiled Pin Tools. So, you need to compile them from the sources.
Follow the instructions to build and install.
2.2
FEATURE
- Added tracing syscalls and their parameters ( #22 ) - read more here
- Added Linux support
REFACT
- Refactored checking if the event comes from a particular module
Requires Intel Pin 3.19 or above.
I am sorry but Intel does not allow for distribution of compiled Pin Tools. So, you need to compile them from the sources.
Follow the instructions to build and install.
2.1
BUGFIX
- Fixed a significant slowdown in tracing of some applications ( Issue #17 )
Requires Intel Pin 3.19 or above.
I am sorry but Intel does not allow for distribution of compiled Pin Tools. So, you need to compile them from the sources.
Follow the instructions to build and install.
2.0
FEATURE
- Allow to log indirect calls to local functions (read more here)
- If Sleep was hooked, add the information into the trace log
BUGFIX
- Fixed a case when parameters are reported, but not the name (issue #14)
Requires Intel Pin 3.19 or above.
I am sorry but Intel does not allow for distribution of compiled Pin Tools. So, you need to compile them from the sources.
Follow the instructions to build and install.