Changes
- Removed the driver requirement for the access memory regions tool
- Added 1 byte jmp instructions (installs exception handler and places int3)
- Added scan option to skip unpaged memory (prevents RAM usage spikes)
reassemble()now rewrites instructions using multiple lines when needed- More descriptive error messages
- Option to center highlighted disassembler code
- Explanation and info link for driver load issues
- Memoryrecord hotkeys can now be disabled individually
- Codefilter: unwind info improved
- Support for pseudo-ops like cmpss/sd/ps/pd
- Lua: added ceserver commands, stacktrace on execution error, convertToUTF8
- Loading CT files with signatures possible under Wine and Proton
Additional Features (from Patreon 7.4.2 to 7.4.3)
- Ceserver: pipe support, change memory protection, options sent to CE GUI
- .netinfo: fields view replaced with tree
- Network config: processlist focus after opening server
- Lua: added virtualstringtree, invertColor, disassembleBytes(bytestring)
- Autoassembler: visual warning for nearby allocation failure, 14 byte jmp safe blocks
- Pointerscan: deviation option for pointer offset, copy results to clipboard
Additional Features (from Patreon 7.4.1 to 7.4.2)
- IPT: Intel process trace feature
- Ceserver: faster modulelist fetch, disconnect option, history list, ARM64 injection, FPU registers
- Assembler/disassembler: x86_64 improvements, ARM/ARM64 improvements
- Scanregions can be saved/loaded
- Option to skip loading .PDB files
- More functions exposed to newstate threads
- Ranges scans in groupscan
- Freeze+allow increase/decrease checks signed values
- Trainers: DPI scaling
- Changing record showassigned/showashex applies to all selected
- Texttraces now save as .txt
- Ccode: #include searches table files, symbolhandler supports stdcalled
- Lua: new properties, callbacks, and methods
Additional Features (from Public 7.4 to Patreon 7.4.1)
- .Visible property for treenode entries
- .VisibleRowCount and .TopItem for listviews
- ARM64 disassembling/assembling
- Lua: runCommand, callback for structure list modification
- Radiobutton for 5/14 byte jmps
- Conditional jumps support 2GB+ destinations
- Dotnetinfo: performance improvement
- Memory record hotkeys: “Only while down” option
- Updated dbghelp for better pdb symbol handling
- Different memory allocations placed within initial block
- Tracer can step over rep instructions
- Lua stringstream inherits from memorystream
- Architecture distinguishing in ceserver
- Escape closes hotkey form
- Nested structure support
- String-based custom types
- Ctrl+Enter in disassembler shows relative addresses
- Diffcount in “find out what accesses/writes” persists
Fixes
- VEH debug: fixed event handling for thread creation
- Monodatacollector: fixed invoke method
- Dotnetdatacollector: fixed dbgshim.dll version issue
- Disassembling cvtdq2pd
- Ceserver: extension loading, stepping on x86, filename display, rare scan error, documentation, stackview, tracer search, enumExports, vehdebug crash, assembler symbol handling, disassembler backlist, memscan termination
- Tracer search for instructions ending with ]
- VEH debug: invalid handle fix
- Kernelmode/VEH debug: context setting on non-suspended threads
- Lua: c# plugin delegate, speedhack on Wine 7.0, high DPI issues, anchor editor, .net info instance lookup, customtypes bug, runcommand, modalforms text color, mac progressbars
- All type not finding 4 types when double deselected
- Ccode esp access, binutils disassembly, tablefiles menulist memory leak, .net obfuscated modules, value parsing, assembling pmovmskb, disassembling vgather* vex256, addresslist error, speedhack hotkeys, groupscan parser, disassembling xchg eax/rax, lua custom type registration, memoryscan issue, ccode symbol registration