English
|
Internal Memory Viewer [IMV] version 0.8 | #1 |
|
Anmeldungsdatum: Aug 2007 Beiträge: 8646 Benutzer-Bewertung: 199 positiv
33 negativ
|
Can view assembly code of the process. ::Input an address in the top text box _OR ::Select a module to goto its base address ::Increase size of disassembly by changing the numerical value. - issues There are some unknown operands, this is because there is limited usage of BeaEngine in my wrapper. Stability issues, sometimes reading protected memory will cause issues _HOWEVER I have implemented a hotfix for this which leads onto the next issue. Memory will sometimes be skipped and the nearest readable memory will be disassembled. The is also a small alignment issue within the release version when inputting a manual address. ////////////////////////////////////////////////// @ Breakpoints @ Hardware breakpoints can be set via context registers. ::Input a thread id [ID can be found via the Thread tab] ::Select a context register ::Click 'Set' ::Information dump will be viewable once breakpoint is reached - issues Will fail if NTOpenThread is hooked [will change to other methods if this becomes common]. You can only work with one thread at a time. THREAD_ALL_ACCESS may not be given. Um Links zu sehen, musst du dich registrieren Um Links zu sehen, musst du dich registrieren Download Internal Memory Viewer [IMV] version 0.8 __________________ Hallo |
|
| KN4CK3R ist offline | ||
