-
-
[转帖]ARTeam: Armag3ddon 2.0
-
发表于: 2013-12-26 07:34
-
ARTeam: Armag3ddon 2.0
From:_http://forum.exetools.com/showpost.php?p=88910&postcount=1
From:_http://forum.exetools.com/showpost.php?p=88910&postcount=1
Hi mates,[/QUOTE]
a new update for our well known tool.
This what CondZero says about: after slightly more than 3 years hiatus,
though it was time to release the latest version. Admittedly, the improvements are relatively minor and interest is waning on my part to support this tool going forward.
Never thought it would last this long. I am still testing this on a rather antiquated pc setup using winxp sp3. What I now need is to start dumping off apps to make way for a newer win7 64 bit platform.
Changelog from the help file:
[QUOTE]Current Release December 2013 v2.0
+ This will be the last release to support WinXP. Due to system internals and compatibility issues, a separate release for Win 7 will be supported.
+ Numerous updates and minor bug fixes for newest Armadillo versions.
+ Upgrade nanolib.dll for compatibility with Armageddon.
+ Remove Peid dll as it was no longer required.
+ Improved nanomites and spliced code static analysis via new disassembler engine from Vanja Fuckar (RDisasm.dll).
+ New interactive Security.dll dump / load options for unpacking / testing.
+ Improved import redirection algorithm.
+ New built in Nanomite viewer option for viewing analyzed nanomites.
+ Add context menu for Log window.
+ Removed some legacy functionality / options. This version is not backwards compatible with previous versions.
+ Updated Arteam Import Reconstructor (Nacho_dj) version 1.7.8 Updated 2013 June
Includes:
+ Improved performance of the search engine for imports
+ Updated the overlay generation engine
+ Fixed some bugs when analyzing code sections for imports
+ Fixed a bug in import rebuilder when forwarding
+ Added an exported function: TryGetImportedFunctionName
+ Improved code for retrieving imports
+ Improved sorting of imported functions and dlls by name
+ Fixed an issue with rebuilding by relocations when module is loaded at a different virtual address than imagebase
+ Fixed bugs when rebuilding without modifying any code
http://www.accessroot.com/arteam/site/download.php?view.262
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
|
|
|---|---|
|
|
Test OK.
 |
|
|
|
|
|
跟原来的2.0比较有增加有减少的内容：
 |
|
|
|
|
|
|
|
|
|
