Saturday, January 6, 2018

Orthia Windbg Extension 2.0.0.193 released


 
Orthia Windbg Extension 2.0.0.193 Released
Latest version:
https://sourceforge.net/projects/diana-dasm/files/orthia-2.0.0.193.zip/download

1. New Major Feature added: Code Emulator


How to use: 
// load extension and setup profile
.load orthia.dll
!orthia.profile %temp%\test.db

// rewrite default VM (another way is to use vm_vm_new)
!orthia.vm_vm_def

// run the function and show the result
!orthia.vm_vm_call 0 nt!PsGetCurrentProcess --print 

See Wiki for the details:
https://sourceforge.net/p/diana-dasm/wiki/Orthia%20Windbg%20plugin/ 

2. Code Analyzer improved

1. Memory consumption reduced
2. Performance of analyzing improved



The latest sources: 
https://sourceforge.net/p/diana-dasm/code/HEAD/tree/trunk/src/
 

No comments: