- Hex Editor loading data speed improved (whole hex editor recoded).
- Bug fixed while attempting to change a byte in the hex editor in a non writable memory page.
- Bug fixed while redirecting APIs to wsock32.dll.
- RtlSetLastWin32Error is now correctly forwarded.
- 4 ntdll APIs forwarded to user32.dll for VISTA & Windows 7.
- Bug fixed when cancel is chosen in the savedialog of update form. IF just used to ignore the user decision.
- Fixed small bug when IF updated version name is displayed in the savedialog form.
- Weird processes appearing as ??????? in the processes list or those having no path are removed from the list.
- A reminder messagebox pops up if the user tries to select an already terminated process (I noticed it was removed).
- Loading dlls is now done using mapping apis instead of LoadLibraryEx.
- Critical bug fixed while opening processes on x64 machines.
- Bug fixed when trying to set BaseOfCode of WinUpack packed targets.
- LoadConfig and COM are now fixed in the PE header.
- Dumper automatically displays data when pressing the arrows in order to improve speed.
- About section filled.
- IF update is redirected to IF official download site and no longer uses direct downloads.
- IF is no longer packed to avoid false virus alerts.
- IF Help updated and is now in pdf format.
- Using backspace in hex edit boxes now allowed.
- Original byte in Bytes Editor removed.
- IT & IAT Tab is henceforth disabled until a process is selected.
- Added the dates of new released versions in history.
http://tuts4you.com/request.php?2969
- Automated forwarding engine coded. - Removed old hard-coded forwarded apis. - IAT manager tool added. - Smart IAT analyser&rebuilder: can detect and fix valid, invalid, partially valid, shuffled, overlapped, scattered, disordered iat entries as well as direct calls and import elimination. - Added other direct calls schemes for APIs detection and rebuilding. - Possibility of removing undesired IAT entries. - Different colors used depending on IAT entry type. - Statistics about each IAT entry (Blocks, DLLs, APIs, Invalid, %Invalid ...). - Create new IAT option added. - Possibility to select sections that contain code. - Removed classic method of retreiving IAT by entering IAT RVA and IAT Size. - Fast imports rebuilding, imports can be rebuilt even if invalid thunks still exist in the imports tree. - The display speed of data in ListViews, Imports tree list and HexEditor is improved. - Fixed a forwarding problem in shunimpl.dll under Windows 7. - Imports Editor and Dumper Tool show instantly when called. - IF auto refresh if the target is changed in memory (while getting and loading imports). - Plugins arguments changed and plugins help file updated. - Arrange Thunks option added. - Modern style. - Unforwarding api names from crypt32.dll. - "Write Imports" is replaced by "Fix dump" to avoid confusion. - IAT section flags are set to C0000040. - IAT section VOffset and ROffset corrected to respect Section and File alignements. - Terminating 00 is added on IAT section name while writing imports. - Disable splash screen option added. - Can now specify the location of new import table. - Default state of checkbox "Notify me if a new version is out." is set to unchecked. - Intelli fix for direct call schemes (TM/WL). - IAT thunks are written in original IAT even in the case of new created IAT (TM/WL). - Manually imports adding supported. - Retreive APIs with/without direct calls option added. - Major code update.
Sorry for being late, it is because there were a lots of tests and updates made on the PRIVATE beta version. I would like also to warmly thank LCF-AT, Fungus, Nacho_dj and metr0 for the bug reports and suggestions , they have made great efforts on testing this version.
