diff -r -u orig/exceptions.cfg tqn/exceptions.cfg --- orig/exceptions.cfg 2005-10-05 16:13:50.000000000 +0800 +++ tqn/exceptions.cfg 2006-03-09 22:40:04.000000000 +0800 @@ -13,33 +13,35 @@ ; description is the exception description displayed to the user ; Windows exceptions +; Modified version for stealth debugging +; All exceptions are passed to the application and do not suspend it .win32 -0xC0000005 stop deb EXCEPTION_ACCESS_VIOLATION The instruction at 0x%a referenced memory at 0x%a. The memory could not be %s -0x80000002 stop deb EXCEPTION_DATATYPE_MISALIGNMENT A datatype misalignment error was detected in a load or store instruction -0x80000003 stop deb EXCEPTION_BREAKPOINT Software breakpoint exception -0x80000004 stop deb EXCEPTION_SINGLE_STEP Single step exception -0xC000008C stop deb EXCEPTION_ARRAY_BOUNDS_EXCEEDED Array bounds exceeded -0xC000008D stop deb EXCEPTION_FLT_DENORMAL_OPERAND Floating point denormal operand -0xC000008E stop deb EXCEPTION_FLT_DIVIDE_BY_ZERO Floating point divide by zero -0xC000008F stop deb EXCEPTION_FLT_INEXACT_RESULT Floating point inexact result -0xC0000090 stop deb EXCEPTION_FLT_INVALID_OPERATION Floating point invalid operation -0xC0000091 stop deb EXCEPTION_FLT_OVERFLOW Floating point overflow -0xC0000092 stop deb EXCEPTION_FLT_STACK_CHECK Floating point stack check -0xC0000093 stop deb EXCEPTION_FLT_UNDERFLOW Floating point underflow -0xC0000094 stop deb EXCEPTION_INT_DIVIDE_BY_ZERO Integer divide by zero -0xC0000095 stop deb EXCEPTION_INT_OVERFLOW Integer overflow -0xC0000096 stop deb EXCEPTION_PRIV_INSTRUCTION Priveleged instruction -0xC0000006 stop deb EXCEPTION_IN_PAGE_ERROR The instruction at "0x%a" referenced memory at "0x%a". The required data was not placed into memory because of an I/O error status of "0x%a" -0xC000001D stop deb EXCEPTION_ILLEGAL_INSTRUCTION An attempt was made to execute an illegal instruction -0xC0000025 stop deb EXCEPTION_NONCONTINUABLE_EXCEPTION Windows cannot continue from this exception -0xC00000FD stop deb EXCEPTION_STACK_OVERFLOW A new guard page for the stack cannot be created (stack overflow) -0xC0000026 stop deb EXCEPTION_INVALID_DISPOSITION An invalid exception disposition was returned by an exception handler -0x80000001 stop deb EXCEPTION_GUARD_PAGE A page of memory that marks the end of a data structure such as a stack or an array has been accessed -0xC0000008 stop deb EXCEPTION_INVALID_HANDLE An invalid HANDLE was specified -0xEEFFACE stop deb EXCEPTION_BCC_FATAL Fatal unhandled exception in the BCC compiled program -0xEEDFAE6 stop deb EXCEPTION_BCC_NORMAL Unhandled exception in the BCC compiled program -0x40010005 stop deb DBG_CONTROL_C CTRL+C was input to console process -0x40010008 stop deb DBG_CONTROL_BREAK CTRL+BREAK was input to console process +0xC0000005 nostop app EXCEPTION_ACCESS_VIOLATION The instruction at 0x%a referenced memory at 0x%a. The memory could not be %s +0x80000002 nostop app EXCEPTION_DATATYPE_MISALIGNMENT A datatype misalignment error was detected in a load or store instruction +0x80000003 nostop app EXCEPTION_BREAKPOINT Software breakpoint exception +0x80000004 nostop app EXCEPTION_SINGLE_STEP Single step exception +0xC000008C nostop app EXCEPTION_ARRAY_BOUNDS_EXCEEDED Array bounds exceeded +0xC000008D nostop app EXCEPTION_FLT_DENORMAL_OPERAND Floating point denormal operand +0xC000008E nostop app EXCEPTION_FLT_DIVIDE_BY_ZERO Floating point divide by zero +0xC000008F nostop app EXCEPTION_FLT_INEXACT_RESULT Floating point inexact result +0xC0000090 nostop app EXCEPTION_FLT_INVALID_OPERATION Floating point invalid operation +0xC0000091 nostop app EXCEPTION_FLT_OVERFLOW Floating point overflow +0xC0000092 nostop app EXCEPTION_FLT_STACK_CHECK Floating point stack check +0xC0000093 nostop app EXCEPTION_FLT_UNDERFLOW Floating point underflow +0xC0000094 nostop app EXCEPTION_INT_DIVIDE_BY_ZERO Integer divide by zero +0xC0000095 nostop app EXCEPTION_INT_OVERFLOW Integer overflow +0xC0000096 nostop app EXCEPTION_PRIV_INSTRUCTION Priveleged instruction +0xC0000006 nostop app EXCEPTION_IN_PAGE_ERROR The instruction at "0x%a" referenced memory at "0x%a". The required data was not placed into memory because of an I/O error status of "0x%a" +0xC000001D nostop app EXCEPTION_ILLEGAL_INSTRUCTION An attempt was made to execute an illegal instruction +0xC0000025 nostop app EXCEPTION_NONCONTINUABLE_EXCEPTION Windows cannot continue from this exception +0xC00000FD nostop app EXCEPTION_STACK_OVERFLOW A new guard page for the stack cannot be created (stack overflow) +0xC0000026 nostop app EXCEPTION_INVALID_DISPOSITION An invalid exception disposition was returned by an exception handler +0x80000001 nostop app EXCEPTION_GUARD_PAGE A page of memory that marks the end of a data structure such as a stack or an array has been accessed +0xC0000008 nostop app EXCEPTION_INVALID_HANDLE An invalid HANDLE was specified +0xEEFFACE nostop app EXCEPTION_BCC_FATAL Fatal unhandled exception in the BCC compiled program +0xEEDFAE6 nostop app EXCEPTION_BCC_NORMAL Unhandled exception in the BCC compiled program +0x40010005 nostop app DBG_CONTROL_C CTRL+C was input to console process +0x40010008 nostop app DBG_CONTROL_BREAK CTRL+BREAK was input to console process ; Windows CE exceptions .wince diff -r -u orig/ida.cfg tqn/ida.cfg --- orig/ida.cfg 2005-10-05 16:13:50.000000000 +0800 +++ tqn/ida.cfg 2006-03-28 05:49:48.000000000 +0800 @@ -60,6 +60,13 @@ "lan" : "" "dsk" : "" "obj" : "" + "dpl" : "" + "bpl" : "" + "ocx" : "" + "cpl" : "" + "awx" : "" + "pkg" : "" + "scr" : "" "prc" : "68000" // PalmPilot programs "axf" : "arm710a" "h68" : "68000" // MC68000 for *.H68 files @@ -103,14 +110,14 @@ DATABASE_MEMORY = 0 // Database buffers size in bytes. -VPAGESIZE = 8192 // Virtual memory page size +VPAGESIZE = 16384 // Virtual memory page size // (effective for new bases only) // 8192 => 128MB addressing space is the limit VPAGES = 0 // Size of virtual memory window // (in pages) -NPAGESIZE = 8192 // Name pointers page size +NPAGESIZE = 16384 // Name pointers page size // (effective for new bases only) -NPAGES = 32 // how big will be the memory buffer? +NPAGES = 64 // how big will be the memory buffer? // (each name uses 4 bytes) // The default settings allow to keep // in memory 2^16 names. The remaining @@ -152,7 +159,7 @@ // //------------------------------------------------------------------------- -PACK_DATABASE = 1 // 0 - don't pack at all +PACK_DATABASE = 2 // 0 - don't pack at all // 1 - pack database (store) // 2 - pack database (deflate) CREATE_BACKUPS = NO // Create database backups @@ -215,35 +222,35 @@ // //------------------------------------------------------------------------- -OPCODE_BYTES = 0 // don't display bytes of instruction/data +OPCODE_BYTES = 8 // don't display bytes of instruction/data // The 'default' configuration in the registry may // override this value -INDENTION = 16 // Indention of instructions +INDENTION = 8 // Indention of instructions // The 'default' configuration in the registry may // override this value COMMENTS_INDENTION = 40 // Indention of short comments MAX_TAIL = 16 // Tail depth (used to gather xref info) MAX_XREF_LENGTH = 80 // Maximal length of line with cross-references -MAX_DATALINE_LENGTH = 70 // Data directives (db,dw, etc): +MAX_DATALINE_LENGTH = 100 // Data directives (db,dw, etc): // max length of argument string -SHOW_AUTOCOMMENTS = NO // Display comments for every instruction +SHOW_AUTOCOMMENTS = YES // Display comments for every instruction // Advanced users will turn this off // Please note that there is another definition // for IBM PC below SHOW_BAD_INSTRUCTIONS = NO // Don't bother about instruction lengthes -SHOW_BASIC_BLOCKS = NO // Generate an empty line at the end of a basic block +SHOW_BASIC_BLOCKS = YES // Generate an empty line at the end of a basic block SHOW_BORDERS = YES // Borders between data/code SHOW_EMPTYLINES = YES // Generate empty line to make disassembly more readable SHOW_LINEPREFIXES = YES // Show line prefixes (like 1000:0000) -SHOW_VARIABLE_MARKS = NO // Show asterisks in the line prefix for addresses marked as variable +SHOW_VARIABLE_MARKS = YES // Show asterisks in the line prefix for addresses marked as variable SHOW_SEGMENTS = YES // Show segments in addresses USE_SEGMENT_NAMES = YES // Show segment names instead of numbers SHOW_REPEATABLE_COMMENTS= YES // Show repeatable comments (disabling this increases IDA speed) -SHOW_SP = NO // Show stack pointer at the start of lines +SHOW_SP = YES // Show stack pointer at the start of lines // The 'default' configuration in the registry may // override this value -SHOW_SUSPICIOUS = NO // Show marks (the red/orange color is bright enough) -SHOW_XREFS = 2 // Show 2 cross-references (the rest is accessible by Ctrl-X) +SHOW_SUSPICIOUS = YES // Show marks (the red/orange color is bright enough) +SHOW_XREFS = 8 // Show 2 cross-references (the rest is accessible by Ctrl-X) SHOW_XREF_FUNC = YES // Show function offsets in xrefs SHOW_XREF_TYPES = YES // Show xref type marks SHOW_XREF_VALUES = YES // If not, xrefs are displayed as "..." @@ -251,7 +258,7 @@ SHOW_SOURCE_LINNUM = YES // Show source line numbers SHOW_ASSUMES = YES // Generate 'assume' directives SHOW_ORIGINS = YES // Generate 'org' directives -USE_TABULATION = YES // Use '\t' in output files +USE_TABULATION = NO // Use '\t' in output files DEL_CODE_COMMENTS = YES // Delete a comment attached to an instruction // when the instruction is deleted @@ -273,7 +280,7 @@ // same color as dummy names. ASCII_LINEBREAK = '\n' // This char forces IDA // to start a new line -ASCII_PREFIX = "a" // This prefix is used when a new +ASCII_PREFIX = "sz" // This prefix is used when a new // name is generated #define ASCII_STYLE_C 0x00000000// Character-terminated ASCII string @@ -294,9 +301,9 @@ // display the beginning of ascii string // at the instruction which refers // to the string -ASCII_SAVECASE = NO // Preserve case of ascii strings for identifiers +ASCII_SAVECASE = YES // Preserve case of ascii strings for identifiers - // type of generated names: (dummy names) +// type of generated names: (dummy names) #define NM_REL_OFF 0 #define NM_PTR_OFF 1 #define NM_NAM_OFF 2 @@ -310,7 +317,7 @@ #define NM_SERIAL 10 DUMMY_NAMES_TYPE = NM_EA -MAX_NAMES_LENGTH = 15 // Maximal length of new names +MAX_NAMES_LENGTH = 128 // Maximal length of new names // (you may specify values up to 511) // // NOTE: As far as I know some assemblers can't handle such @@ -381,7 +388,7 @@ #define DEMNAM_NAME 1 // regular names #define DEMNAM_NONE 2 // don't display -DemangleNames = DEMNAM_CMNT // Show demangled names as comments +DemangleNames = DEMNAM_NAME // Show demangled names as regular names //------------------------------------------------------------------------- // @@ -439,7 +446,7 @@ // the following characters are allowed in user-defined names: NameChars = - "$?@" // asm specific character + "$?@->" // asm specific character "_0123456789" "ABCDEFGHIJKLMNOPQRSTUVWXYZ" "abcdefghijklmnopqrstuvwxyz"; @@ -462,7 +469,13 @@ // List of include directories separated by ';' // This list must end by a semicolon (outside the quotes) -C_HEADER_PATH = "/Program Files/Microsoft Visual Studio/VC98/include"; +C_HEADER_PATH = "e:\microsoft visual studio .net\frameworksdk\include;" + "e:\microsoft visual studio .net\vc7\platformsdk\include;" + "e:\microsoft visual studio .net\vc7\platformsdk\include\prerelease;" + "e:\microsoft visual studio\vc98\include;" + "e:\microsoft visual studio\vc98\mfc\include;" + "e:\microsoft visual studio\vc98\atl\include;" + "e:\microsoft visual studio\vc98\wtl\include"; // List of predefined macros separated by ';' // This list must end by a semicolon (outside the quotes) @@ -581,7 +594,7 @@ // // This option allows ida to check catch/finally exception blocks // -PC_ANALYZE_DIFBASE = NO // Allow references with different segment bases +PC_ANALYZE_DIFBASE = YES // Allow references with different segment bases // // This option allows IDA to display a reference to a symbol even if // the reference value is not equal to the symbol value. For example, @@ -616,7 +629,7 @@ // PE_MAKE_IDATA = YES // Create imports segment for PE files -PE_LOAD_RESOURCES = NO // Load resources for PE files +PE_LOAD_RESOURCES = YES // Load resources for PE files PE_CREATE_FLAT_GROUP = NO // Create FLAT group for PE files @@ -661,7 +674,7 @@ // /*E0..EF*/ "\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf" // /*F0..FF*/ "\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef"; -SHOW_AUTOCOMMENTS = NO // Don't display comments for every instruction +SHOW_AUTOCOMMENTS = YES // Don't display comments for every instruction #endif // __PC__ //------------------------------------------------------------------------- @@ -790,13 +803,13 @@ //------------------------------------------------------------------------- #ifdef __TMS320C54__ -TMS320C54_IO = YES // Use I/O definitions from the configuration - // file in macro instructions. +TMS320C54_IO = YES // Use I/O definitions from the configuration + // file in macro instructions. -TMS320C54_MMR = YES // Replace addresses by an equivalent memory - // mapped register. +TMS320C54_MMR = YES // Replace addresses by an equivalent memory + // mapped register. -TMS320C54_DSEG = 0x10000 // Default data segment address +TMS320C54_DSEG = 0x10000 // Default data segment address #endif // __TMS320C54__ diff -r -u orig/idagui.cfg tqn/idagui.cfg --- orig/idagui.cfg 2005-10-05 16:13:50.000000000 +0800 +++ tqn/idagui.cfg 2006-03-06 12:25:00.000000000 +0800 @@ -15,7 +15,7 @@ // The windows version of IDA determines the directory // automatically. The following parameter isn't needed anymore. -// WINDIR = "c:\\windows" // Default directory to look up for +//WINDIR = "C:\\WINDOWS" // Default directory to look up for // MS Windows DLL files // IDA will search subdirs // "dll" @@ -27,10 +27,8 @@ // look up DLLs) -HELPFILE = "sample.hlp" // Name of help file used by Ctrl-F1 +HELPFILE = "WIN32.hlp" // Name of help file used by Ctrl-F1 // Please change it as shown below: -//HELPFILE = "WIN32.HLP" - ASK_EXIT_UNPACKED = YES // Ask confirmation if the user // wants to exit the database without @@ -39,17 +37,17 @@ ASK_EXIT = YES // Ask confirmation if the user // wants to exit -OPEN_DEFAULT_IDC_PATH = NO // YES: The dialog box to select an +OPEN_DEFAULT_IDC_PATH = YES // YES: The dialog box to select an // IDC scrip always starts in // the IDC subdirectory // NO: The dialog box opens in the // current/last directory TEXT_SEARCH_CASE_SENSITIVE = NO // Search in the disassembly text -BIN_SEARCH_CASE_SENSITIVE = YES // Search in the input file +BIN_SEARCH_CASE_SENSITIVE = NO // Search in the input file -DISPLAY_PATCH_SUBMENU = NO // Display the Edit,Patch submenu -DISPLAY_COMMAND_LINE = NO // Display the expressions/IDC command line +DISPLAY_PATCH_SUBMENU = YES // Display the Edit,Patch submenu +DISPLAY_COMMAND_LINE = YES // Display the expressions/IDC command line // To turn on/off the command line, // right click on the main toolbar after // setting this parameter to YES @@ -58,8 +56,8 @@ #define CONFIRM_UNDEFINE_YES 0 // Always confirm #define CONFIRM_UNDEFINE_BLOCK 1 // Confirm only if an area has been selected -CONFIRM_UNDEFINE_COMMAND = CONFIRM_UNDEFINE_YES // Confirm the "undefine" command -CONFIRM_SETFUNCEND_COMMAND = YES // Confirm the "set function end" command (E hotkey) +CONFIRM_UNDEFINE_COMMAND = CONFIRM_UNDEFINE_NO // Confirm the "undefine" command +CONFIRM_SETFUNCEND_COMMAND = NO // Confirm the "set function end" command (E hotkey) // // Keyboard hotkey definitions @@ -236,7 +234,7 @@ "SetNameType" = 0 "SetDemangledNames" = 0 -//"Calculate" = '?' +"Calculate" = '?' "ShowFlags" = 'F' "SetupHidden" = 0 "Hide" = "Numpad-" @@ -300,7 +298,7 @@ "BreakpointEnable" = 0 "BreakpointDisable" = 0 "Breakpoints" = "Ctrl-Alt-B" // open breakpoints window -//"WatchList" = "Ctrl-Alt-W" // open the watch list +"WatchList" = "Ctrl-Alt-W" // open the watch list "AddWatch" = 0 // add watch "DelWatch" = "Del" // del watch "StackTrace" = "Ctrl-Alt-S" // open stack trace window diff -r -u orig/idatui.cfg tqn/idatui.cfg --- orig/idatui.cfg 2005-10-05 16:13:50.000000000 +0800 +++ tqn/idatui.cfg 2006-03-06 12:24:12.000000000 +0800 @@ -64,9 +64,8 @@ // look up DLLs) -HELPFILE = "sample.hlp" // Name of help file used by Ctrl-F1 +HELPFILE = "WIN32.HLP" // Name of help file used by Ctrl-F1 // Please change it as shown below: -//HELPFILE = "WIN32.HLP" ASK_EXIT_UNPACKED = YES // Ask confirmation if the user @@ -74,14 +73,14 @@ // packing it TEXT_SEARCH_CASE_SENSITIVE = NO // Search in the disassembly text -BIN_SEARCH_CASE_SENSITIVE = YES // Search in the input file +BIN_SEARCH_CASE_SENSITIVE = NO // Search in the input file #define CONFIRM_UNDEFINE_NO -1 // Never confirm #define CONFIRM_UNDEFINE_YES 0 // Always confirm #define CONFIRM_UNDEFINE_BLOCK 1 // Confirm only if selected -CONFIRM_UNDEFINE_COMMAND = CONFIRM_UNDEFINE_YES // Confirm the "undefine" command -CONFIRM_SETFUNCEND_COMMAND = YES // Confirm the "set function end" command (E hotkey) +CONFIRM_UNDEFINE_COMMAND = CONFIRM_UNDEFINE_NO // Confirm the "undefine" command +CONFIRM_SETFUNCEND_COMMAND = NO // Confirm the "set function end" command (E hotkey) // // Novice mode. The novice mode effectifely disables a lot of