- Automated forwarding engine coded.
- Removed old hard-coded forwarded apis.
- IAT manager tool added.
- Smart IAT analyser&rebuilder: can detect and fix valid, invalid, partially
valid, shuffled, overlapped, scattered, disordered iat entries as well as
direct calls and import elimination.
- Added other direct calls schemes for APIs detection and rebuilding.
- Possibility of removing undesired IAT entries.
- Different colors used depending on IAT entry type.
- Statistics about each IAT entry (Blocks, DLLs, APIs, Invalid, %Invalid ...).
- Create new IAT option added.
- Possibility to select sections that contain code.
- Removed classic method of retreiving IAT by entering IAT RVA and IAT Size.
- Fast imports rebuilding, imports can be rebuilt even if invalid thunks still exist
in the imports tree.
- The display speed of data in ListViews, Imports tree list and HexEditor is
improved.
- Fixed a forwarding problem in shunimpl.dll under Windows 7.
- Imports Editor and Dumper Tool show instantly when called.
- IF auto refresh if the target is changed in memory (while getting and
loading imports).
- Plugins arguments changed and plugins help file updated.
- Arrange Thunks option added.
- Modern style.
- Unforwarding api names from crypt32.dll.
- "Write Imports" is replaced by "Fix dump" to avoid confusion.
- IAT section flags are set to C0000040.
- IAT section VOffset and ROffset corrected to respect Section and File
alignements.
- Terminating 00 is added on IAT section name while writing imports.
- Disable splash screen option added.
- Can now specify the location of new import table.
- Default state of checkbox "Notify me if a new version is out." is set to
unchecked.
- Intelli fix for direct call schemes (TM/WL).
- IAT thunks are written in original IAT even in the case of new created
IAT (TM/WL).
- Manually imports adding supported.
- Retreive APIs with/without direct calls option added.
- Major code update.
|
发表于 2010-10-8 17:53
|楼主
发表于 2010-10-8 18:11
发表于 2010-10-9 19:19
收藏
淘帖
有用
分享到朋友圈
