|
v1.2 (03/Jun/2026)
- Added SeDebugPrivilege check on attach mode just in case we have the access might need to run as admin, not needed for target mode we already have the handle and neither on static mode
- SanitizeInitData and RestoreBSS now only run in attach mode, target dumps are pre-init state, the loader has already done the right thing, running sanitization was not needed in previous version
- Heap flags patching added to AntiDebug, PEB->ProcessHeap->Flags and ForceFlags are checked by many protectors alongside BeingDebugged, only called in attach mode
- Added EnumResourceLanguagesA to static scanner to dump all resource of every single language PE/DLL present
- Many bugs fixed under the hood
|