diff -r -u orig/exceptions.cfg tqn/exceptions.cfg
--- orig/exceptions.cfg 2005-10-05 16:13:50.000000000 +0800
+++ tqn/exceptions.cfg 2006-03-09 22:40:04.000000000 +0800
@@ -13,33 +13,35 @@
; description is the exception description displayed to the user
; Windows exceptions
+; Modified version for stealth debugging
+; All exceptions are passed to the application and do not suspend it
.win32
-0xC0000005 stop deb EXCEPTION_ACCESS_VIOLATION The instruction at 0x%a referenced memory at 0x%a. The memory could not be %s
-0x80000002 stop deb EXCEPTION_DATATYPE_MISALIGNMENT A datatype misalignment error was detected in a load or store instruction
-0x80000003 stop deb EXCEPTION_BREAKPOINT Software breakpoint exception
-0x80000004 stop deb EXCEPTION_SINGLE_STEP Single step exception
-0xC000008C stop deb EXCEPTION_ARRAY_BOUNDS_EXCEEDED Array bounds exceeded
-0xC000008D stop deb EXCEPTION_FLT_DENORMAL_OPERAND Floating point denormal operand
-0xC000008E stop deb EXCEPTION_FLT_DIVIDE_BY_ZERO Floating point divide by zero
-0xC000008F stop deb EXCEPTION_FLT_INEXACT_RESULT Floating point inexact result
-0xC0000090 stop deb EXCEPTION_FLT_INVALID_OPERATION Floating point invalid operation
-0xC0000091 stop deb EXCEPTION_FLT_OVERFLOW Floating point overflow
-0xC0000092 stop deb EXCEPTION_FLT_STACK_CHECK Floating point stack check
-0xC0000093 stop deb EXCEPTION_FLT_UNDERFLOW Floating point underflow
-0xC0000094 stop deb EXCEPTION_INT_DIVIDE_BY_ZERO Integer divide by zero
-0xC0000095 stop deb EXCEPTION_INT_OVERFLOW Integer overflow
-0xC0000096 stop deb EXCEPTION_PRIV_INSTRUCTION Priveleged instruction
-0xC0000006 stop deb EXCEPTION_IN_PAGE_ERROR The instruction at "0x%a" referenced memory at "0x%a". The required data was not placed into memory because of an I/O error status of "0x%a"
-0xC000001D stop deb EXCEPTION_ILLEGAL_INSTRUCTION An attempt was made to execute an illegal instruction
-0xC0000025 stop deb EXCEPTION_NONCONTINUABLE_EXCEPTION Windows cannot continue from this exception
-0xC00000FD stop deb EXCEPTION_STACK_OVERFLOW A new guard page for the stack cannot be created (stack overflow)
-0xC0000026 stop deb EXCEPTION_INVALID_DISPOSITION An invalid exception disposition was returned by an exception handler
-0x80000001 stop deb EXCEPTION_GUARD_PAGE A page of memory that marks the end of a data structure such as a stack or an array has been accessed
-0xC0000008 stop deb EXCEPTION_INVALID_HANDLE An invalid HANDLE was specified
-0xEEFFACE stop deb EXCEPTION_BCC_FATAL Fatal unhandled exception in the BCC compiled program
-0xEEDFAE6 stop deb EXCEPTION_BCC_NORMAL Unhandled exception in the BCC compiled program
-0x40010005 stop deb DBG_CONTROL_C CTRL+C was input to console process
-0x40010008 stop deb DBG_CONTROL_BREAK CTRL+BREAK was input to console process
+0xC0000005 nostop app EXCEPTION_ACCESS_VIOLATION The instruction at 0x%a referenced memory at 0x%a. The memory could not be %s
+0x80000002 nostop app EXCEPTION_DATATYPE_MISALIGNMENT A datatype misalignment error was detected in a load or store instruction
+0x80000003 nostop app EXCEPTION_BREAKPOINT Software breakpoint exception
+0x80000004 nostop app EXCEPTION_SINGLE_STEP Single step exception
+0xC000008C nostop app EXCEPTION_ARRAY_BOUNDS_EXCEEDED Array bounds exceeded
+0xC000008D nostop app EXCEPTION_FLT_DENORMAL_OPERAND Floating point denormal operand
+0xC000008E nostop app EXCEPTION_FLT_DIVIDE_BY_ZERO Floating point divide by zero
+0xC000008F nostop app EXCEPTION_FLT_INEXACT_RESULT Floating point inexact result
+0xC0000090 nostop app EXCEPTION_FLT_INVALID_OPERATION Floating point invalid operation
+0xC0000091 nostop app EXCEPTION_FLT_OVERFLOW Floating point overflow
+0xC0000092 nostop app EXCEPTION_FLT_STACK_CHECK Floating point stack check
+0xC0000093 nostop app EXCEPTION_FLT_UNDERFLOW Floating point underflow
+0xC0000094 nostop app EXCEPTION_INT_DIVIDE_BY_ZERO Integer divide by zero
+0xC0000095 nostop app EXCEPTION_INT_OVERFLOW Integer overflow
+0xC0000096 nostop app EXCEPTION_PRIV_INSTRUCTION Priveleged instruction
+0xC0000006 nostop app EXCEPTION_IN_PAGE_ERROR The instruction at "0x%a" referenced memory at "0x%a". The required data was not placed into memory because of an I/O error status of "0x%a"
+0xC000001D nostop app EXCEPTION_ILLEGAL_INSTRUCTION An attempt was made to execute an illegal instruction
+0xC0000025 nostop app EXCEPTION_NONCONTINUABLE_EXCEPTION Windows cannot continue from this exception
+0xC00000FD nostop app EXCEPTION_STACK_OVERFLOW A new guard page for the stack cannot be created (stack overflow)
+0xC0000026 nostop app EXCEPTION_INVALID_DISPOSITION An invalid exception disposition was returned by an exception handler
+0x80000001 nostop app EXCEPTION_GUARD_PAGE A page of memory that marks the end of a data structure such as a stack or an array has been accessed
+0xC0000008 nostop app EXCEPTION_INVALID_HANDLE An invalid HANDLE was specified
+0xEEFFACE nostop app EXCEPTION_BCC_FATAL Fatal unhandled exception in the BCC compiled program
+0xEEDFAE6 nostop app EXCEPTION_BCC_NORMAL Unhandled exception in the BCC compiled program
+0x40010005 nostop app DBG_CONTROL_C CTRL+C was input to console process
+0x40010008 nostop app DBG_CONTROL_BREAK CTRL+BREAK was input to console process
; Windows CE exceptions
.wince
diff -r -u orig/ida.cfg tqn/ida.cfg
--- orig/ida.cfg 2005-10-05 16:13:50.000000000 +0800
+++ tqn/ida.cfg 2006-03-28 05:49:48.000000000 +0800
@@ -60,6 +60,13 @@
"lan" : ""
"dsk" : ""
"obj" : ""
+ "dpl" : ""
+ "bpl" : ""
+ "ocx" : ""
+ "cpl" : ""
+ "awx" : ""
+ "pkg" : ""
+ "scr" : ""
"prc" : "68000" // PalmPilot programs
"axf" : "arm710a"
"h68" : "68000" // MC68000 for *.H68 files
@@ -103,14 +110,14 @@
DATABASE_MEMORY = 0 // Database buffers size in bytes.
-VPAGESIZE = 8192 // Virtual memory page size
+VPAGESIZE = 16384 // Virtual memory page size
// (effective for new bases only)
// 8192 => 128MB addressing space is the limit
VPAGES = 0 // Size of virtual memory window
// (in pages)
-NPAGESIZE = 8192 // Name pointers page size
+NPAGESIZE = 16384 // Name pointers page size
// (effective for new bases only)
-NPAGES = 32 // how big will be the memory buffer?
+NPAGES = 64 // how big will be the memory buffer?
// (each name uses 4 bytes)
// The default settings allow to keep
// in memory 2^16 names. The remaining
@@ -152,7 +159,7 @@
//
//-------------------------------------------------------------------------
-PACK_DATABASE = 1 // 0 - don't pack at all
+PACK_DATABASE = 2 // 0 - don't pack at all
// 1 - pack database (store)
// 2 - pack database (deflate)
CREATE_BACKUPS = NO // Create database backups
@@ -215,35 +222,35 @@
//
//-------------------------------------------------------------------------
-OPCODE_BYTES = 0 // don't display bytes of instruction/data
+OPCODE_BYTES = 8 // don't display bytes of instruction/data
// The 'default' configuration in the registry may
// override this value
-INDENTION = 16 // Indention of instructions
+INDENTION = 8 // Indention of instructions
// The 'default' configuration in the registry may
// override this value
COMMENTS_INDENTION = 40 // Indention of short comments
MAX_TAIL = 16 // Tail depth (used to gather xref info)
MAX_XREF_LENGTH = 80 // Maximal length of line with cross-references
-MAX_DATALINE_LENGTH = 70 // Data directives (db,dw, etc):
+MAX_DATALINE_LENGTH = 100 // Data directives (db,dw, etc):
// max length of argument string
-SHOW_AUTOCOMMENTS = NO // Display comments for every instruction
+SHOW_AUTOCOMMENTS = YES // Display comments for every instruction
// Advanced users will turn this off
// Please note that there is another definition
// for IBM PC below
SHOW_BAD_INSTRUCTIONS = NO // Don't bother about instruction lengthes
-SHOW_BASIC_BLOCKS = NO // Generate an empty line at the end of a basic block
+SHOW_BASIC_BLOCKS = YES // Generate an empty line at the end of a basic block
SHOW_BORDERS = YES // Borders between data/code
SHOW_EMPTYLINES = YES // Generate empty line to make disassembly more readable
SHOW_LINEPREFIXES = YES // Show line prefixes (like 1000:0000)
-SHOW_VARIABLE_MARKS = NO // Show asterisks in the line prefix for addresses marked as variable
+SHOW_VARIABLE_MARKS = YES // Show asterisks in the line prefix for addresses marked as variable
SHOW_SEGMENTS = YES // Show segments in addresses
USE_SEGMENT_NAMES = YES // Show segment names instead of numbers
SHOW_REPEATABLE_COMMENTS= YES // Show repeatable comments (disabling this increases IDA speed)
-SHOW_SP = NO // Show stack pointer at the start of lines
+SHOW_SP = YES // Show stack pointer at the start of lines
// The 'default' configuration in the registry may
// override this value
-SHOW_SUSPICIOUS = NO // Show <void> marks (the red/orange color is bright enough)
-SHOW_XREFS = 2 // Show 2 cross-references (the rest is accessible by Ctrl-X)
+SHOW_SUSPICIOUS = YES // Show <void> marks (the red/orange color is bright enough)
+SHOW_XREFS = 8 // Show 2 cross-references (the rest is accessible by Ctrl-X)
SHOW_XREF_FUNC = YES // Show function offsets in xrefs
SHOW_XREF_TYPES = YES // Show xref type marks
SHOW_XREF_VALUES = YES // If not, xrefs are displayed as "..."
@@ -251,7 +258,7 @@
SHOW_SOURCE_LINNUM = YES // Show source line numbers
SHOW_ASSUMES = YES // Generate 'assume' directives
SHOW_ORIGINS = YES // Generate 'org' directives
-USE_TABULATION = YES // Use '\t' in output files
+USE_TABULATION = NO // Use '\t' in output files
DEL_CODE_COMMENTS = YES // Delete a comment attached to an instruction
// when the instruction is deleted
@@ -273,7 +280,7 @@
// same color as dummy names.
ASCII_LINEBREAK = '\n' // This char forces IDA
// to start a new line
-ASCII_PREFIX = "a" // This prefix is used when a new
+ASCII_PREFIX = "sz" // This prefix is used when a new
// name is generated
#define ASCII_STYLE_C 0x00000000// Character-terminated ASCII string
@@ -294,9 +301,9 @@
// display the beginning of ascii string
// at the instruction which refers
// to the string
-ASCII_SAVECASE = NO // Preserve case of ascii strings for identifiers
+ASCII_SAVECASE = YES // Preserve case of ascii strings for identifiers
- // type of generated names: (dummy names)
+// type of generated names: (dummy names)
#define NM_REL_OFF 0
#define NM_PTR_OFF 1
#define NM_NAM_OFF 2
@@ -310,7 +317,7 @@
#define NM_SERIAL 10
DUMMY_NAMES_TYPE = NM_EA
-MAX_NAMES_LENGTH = 15 // Maximal length of new names
+MAX_NAMES_LENGTH = 128 // Maximal length of new names
// (you may specify values up to 511)
//
// NOTE: As far as I know some assemblers can't handle such
@@ -381,7 +388,7 @@
#define DEMNAM_NAME 1 // regular names
#define DEMNAM_NONE 2 // don't display
-DemangleNames = DEMNAM_CMNT // Show demangled names as comments
+DemangleNames = DEMNAM_NAME // Show demangled names as regular names
//-------------------------------------------------------------------------
//
@@ -439,7 +446,7 @@
// the following characters are allowed in user-defined names:
NameChars =
- "$?@" // asm specific character
+ "$?@->" // asm specific character
"_0123456789"
"ABCDEFGHIJKLMNOPQRSTUVWXYZ"
"abcdefghijklmnopqrstuvwxyz";
@@ -462,7 +469,13 @@
// List of include directories separated by ';'
// This list must end by a semicolon (outside the quotes)
-C_HEADER_PATH = "/Program Files/Microsoft Visual Studio/VC98/include";
+C_HEADER_PATH = "e:\microsoft visual studio .net\frameworksdk\include;"
+ "e:\microsoft visual studio .net\vc7\platformsdk\include;"
+ "e:\microsoft visual studio .net\vc7\platformsdk\include\prerelease;"
+ "e:\microsoft visual studio\vc98\include;"
+ "e:\microsoft visual studio\vc98\mfc\include;"
+ "e:\microsoft visual studio\vc98\atl\include;"
+ "e:\microsoft visual studio\vc98\wtl\include";
// List of predefined macros separated by ';'
// This list must end by a semicolon (outside the quotes)
@@ -581,7 +594,7 @@
//
// This option allows ida to check catch/finally exception blocks
//
-PC_ANALYZE_DIFBASE = NO // Allow references with different segment bases
+PC_ANALYZE_DIFBASE = YES // Allow references with different segment bases
//
// This option allows IDA to display a reference to a symbol even if
// the reference value is not equal to the symbol value. For example,
@@ -616,7 +629,7 @@
//
PE_MAKE_IDATA = YES // Create imports segment for PE files
-PE_LOAD_RESOURCES = NO // Load resources for PE files
+PE_LOAD_RESOURCES = YES // Load resources for PE files
PE_CREATE_FLAT_GROUP = NO // Create FLAT group for PE files
@@ -661,7 +674,7 @@
// /*E0..EF*/ "\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf"
// /*F0..FF*/ "\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef";
-SHOW_AUTOCOMMENTS = NO // Don't display comments for every instruction
+SHOW_AUTOCOMMENTS = YES // Don't display comments for every instruction
#endif // __PC__
//-------------------------------------------------------------------------
@@ -790,13 +803,13 @@
//-------------------------------------------------------------------------
#ifdef __TMS320C54__
-TMS320C54_IO = YES // Use I/O definitions from the configuration
- // file in macro instructions.
+TMS320C54_IO = YES // Use I/O definitions from the configuration
+ // file in macro instructions.
-TMS320C54_MMR = YES // Replace addresses by an equivalent memory
- // mapped register.
+TMS320C54_MMR = YES // Replace addresses by an equivalent memory
+ // mapped register.
-TMS320C54_DSEG = 0x10000 // Default data segment address
+TMS320C54_DSEG = 0x10000 // Default data segment address
#endif // __TMS320C54__
diff -r -u orig/idagui.cfg tqn/idagui.cfg
--- orig/idagui.cfg 2005-10-05 16:13:50.000000000 +0800
+++ tqn/idagui.cfg 2006-03-06 12:25:00.000000000 +0800
@@ -15,7 +15,7 @@
// The windows version of IDA determines the directory
// automatically. The following parameter isn't needed anymore.
-// WINDIR = "c:\\windows" // Default directory to look up for
+//WINDIR = "C:\\WINDOWS" // Default directory to look up for
// MS Windows DLL files
// IDA will search subdirs
// "dll"
@@ -27,10 +27,8 @@
// look up DLLs)
-HELPFILE = "sample.hlp" // Name of help file used by Ctrl-F1
+HELPFILE = "WIN32.hlp" // Name of help file used by Ctrl-F1
// Please change it as shown below:
-//HELPFILE = "WIN32.HLP"
-
ASK_EXIT_UNPACKED = YES // Ask confirmation if the user
// wants to exit the database without
@@ -39,17 +37,17 @@
ASK_EXIT = YES // Ask confirmation if the user
// wants to exit
-OPEN_DEFAULT_IDC_PATH = NO // YES: The dialog box to select an
+OPEN_DEFAULT_IDC_PATH = YES // YES: The dialog box to select an
// IDC scrip always starts in
// the IDC subdirectory
// NO: The dialog box opens in the
// current/last directory
TEXT_SEARCH_CASE_SENSITIVE = NO // Search in the disassembly text
-BIN_SEARCH_CASE_SENSITIVE = YES // Search in the input file
+BIN_SEARCH_CASE_SENSITIVE = NO // Search in the input file
-DISPLAY_PATCH_SUBMENU = NO // Display the Edit,Patch submenu
-DISPLAY_COMMAND_LINE = NO // Display the expressions/IDC command line
+DISPLAY_PATCH_SUBMENU = YES // Display the Edit,Patch submenu
+DISPLAY_COMMAND_LINE = YES // Display the expressions/IDC command line
// To turn on/off the command line,
// right click on the main toolbar after
// setting this parameter to YES
@@ -58,8 +56,8 @@
#define CONFIRM_UNDEFINE_YES 0 // Always confirm
#define CONFIRM_UNDEFINE_BLOCK 1 // Confirm only if an area has been selected
-CONFIRM_UNDEFINE_COMMAND = CONFIRM_UNDEFINE_YES // Confirm the "undefine" command
-CONFIRM_SETFUNCEND_COMMAND = YES // Confirm the "set function end" command (E hotkey)
+CONFIRM_UNDEFINE_COMMAND = CONFIRM_UNDEFINE_NO // Confirm the "undefine" command
+CONFIRM_SETFUNCEND_COMMAND = NO // Confirm the "set function end" command (E hotkey)
//
// Keyboard hotkey definitions
@@ -236,7 +234,7 @@
"SetNameType" = 0
"SetDemangledNames" = 0
-//"Calculate" = '?'
+"Calculate" = '?'
"ShowFlags" = 'F'
"SetupHidden" = 0
"Hide" = "Numpad-"
@@ -300,7 +298,7 @@
"BreakpointEnable" = 0
"BreakpointDisable" = 0
"Breakpoints" = "Ctrl-Alt-B" // open breakpoints window
-//"WatchList" = "Ctrl-Alt-W" // open the watch list
+"WatchList" = "Ctrl-Alt-W" // open the watch list
"AddWatch" = 0 // add watch
"DelWatch" = "Del" // del watch
"StackTrace" = "Ctrl-Alt-S" // open stack trace window
diff -r -u orig/idatui.cfg tqn/idatui.cfg
--- orig/idatui.cfg 2005-10-05 16:13:50.000000000 +0800
+++ tqn/idatui.cfg 2006-03-06 12:24:12.000000000 +0800
@@ -64,9 +64,8 @@
// look up DLLs)
-HELPFILE = "sample.hlp" // Name of help file used by Ctrl-F1
+HELPFILE = "WIN32.HLP" // Name of help file used by Ctrl-F1
// Please change it as shown below:
-//HELPFILE = "WIN32.HLP"
ASK_EXIT_UNPACKED = YES // Ask confirmation if the user
@@ -74,14 +73,14 @@
// packing it
TEXT_SEARCH_CASE_SENSITIVE = NO // Search in the disassembly text
-BIN_SEARCH_CASE_SENSITIVE = YES // Search in the input file
+BIN_SEARCH_CASE_SENSITIVE = NO // Search in the input file
#define CONFIRM_UNDEFINE_NO -1 // Never confirm
#define CONFIRM_UNDEFINE_YES 0 // Always confirm
#define CONFIRM_UNDEFINE_BLOCK 1 // Confirm only if selected
-CONFIRM_UNDEFINE_COMMAND = CONFIRM_UNDEFINE_YES // Confirm the "undefine" command
-CONFIRM_SETFUNCEND_COMMAND = YES // Confirm the "set function end" command (E hotkey)
+CONFIRM_UNDEFINE_COMMAND = CONFIRM_UNDEFINE_NO // Confirm the "undefine" command
+CONFIRM_SETFUNCEND_COMMAND = NO // Confirm the "set function end" command (E hotkey)
//
// Novice mode. The novice mode effectifely disables a lot of