News:

WinAPIOverride

Caller address is presented as raw and relative from module
Filters can be defined depending calling module
Injection in suspended mode works for all applications now
Better injection performances when injecting to all applications
...

Dumper

Fully changed for better performance
Allow Allocate, Read, Write or Free memory in remote processes
Allow to make raw dump
Allow to set processes/threads priority, suspend, resume or terminate them
Retreives Eip of threads (and if thread is not system locked, its context)
Show process threads and parent Id
Description:

This software allows you to monitor and/or modify any function of a process. This can be done for any calling convention (stdcall or cdecl), and for API functions or executable internal functions.

Full source and documentation available.

http://jacquelin.potier.free.fr/winapioverride32/

[课程]FART 脱壳王！加量不加价！FART作者讲授！