Orthia UI 1.1.0.16 released

New Features

Full-Scale Linux Version — ELF support, dependency loading, 'make install', and a root sandbox (only `CAP_SYS_PTRACE` is kept). Tested on Ubuntu 24.04. No major placeholders: orthia, welcome to Linux.

Command-Line support — the new `--cmd` switch runs commands without the UI. Great for scripts, tests and AI agents. Usage line and options: --file, --pid, --cmd, --analyze, --no-sandbox and --version/-h. Most-used commands: lm, x, u, the d* memory commands, modinfo, sections, .reload/.analyze and .database.

Bug fixes — database integrity, faster opening, better symbol lookup, sane error text, better windows kernel modules support, and more.

New documentation — a major update: a full manual, a database guide and a WinDbg plugin guide. 

See the docs here: https://github.com/ligen-ua/diana-dasm/tree/v1.1.0.16-ui 

Screenshot 1. Self-disasm on Linux:

 

Repo:

https://github.com/ligen-ua/diana-dasm/   

 

Orthia UI 1.1.0.13 released

Orthia UI 1.1.0.13 is here:

https://github.com/ligen-ua/diana-dasm/releases/tag/v1.1.0.13-ui 

New Features

• Shellcode analysis — load and disassemble raw shellcode directly, without a PE file
• Sections view — new panel listing PE sections with addresses and sizes
• Context menu — right-click support across disassembly and output windows

Improvements

• Improved error messages and process lifecycle handling
• Stability fix for random crash on exit

Orthia UI 1.1.0.10 released

 

Orthia UI 1.1.0.10 is here:

https://github.com/ligen-ua/diana-dasm/releases/tag/v1.1.0.10-ui 

PDB Symbol Support

Adds PDB symbol loading and integration throughout the disassembler, enabling symbol-aware navigation and analysis for Windows binaries.

New features

• PDB symbol loading — integrates libpdb to parse .pdb files; supports recursive PDB search to locate symbol files automatically
• External and module symbol layers — new orthia_external_symbols and orthia_module_symbols components manage symbol lifecycles and expose them to the analysis pipeline
• Private symbol support in Goto dialog — the Goto dialog can now resolve private symbols, not just exports
• Ctrl+X — new keyboard shortcut (XREF navigation)
• .symfix command improvements — more robust symbol path fixing

Improvements

• Symbol impact applied correctly during analysis (flags_analyzePrivateDone and related state)
• File mode address/name resolution fixed (QueryAddressNameImpl, QueryNames)
• Module flags handling corrected
• Memory cache added to reduce repeated lookups
• Default symbol search behavior improved
• Duplicate entries eliminated on XREF update
• Modules window shows symbol information

Fixes

• Goto dialog layout fixed
• File item handling fixed
• PDB load error handling fixed
• Linux build errors fixed

Demo GIF:

Orthia Windbg Extension 2.0.0.228 released

Orthia Windbg Extension v. 2.0.0.228 is here:

https://github.com/ligen-ua/diana-dasm/releases/download/v1.2-tools/tools-v1.2-amd64.zip  

What's changed:

• Added scxr command that searches through the stack for context records
• Fixed issues with wow64
• Added lazy profile initialization for some ease of use

Demo of !orthia.scxr 

The  command scans the current stack for context records, and it is useful for usermode crash dump analysis.

Let's assume we have an UM dump opened: 

 

The stack doesn't show original problem, we need to grab the original context:

 

That's it, !scxr command outputs ".cxr"-encoded URLs, so when you click on URL you get original context, see Calls and Disassembly windows.

 

Fancy-Viewer 1.5.0.21

 

Fancy-Viewer 1.5.0.21 Released: https://www.fancy-viewer.com/

Changes:

• Bugfix of PDF preview 
• New feature: Docx preview, currently text only
• Improved UX of light theme 

 

Fancy-Viewer 1.4.0.11

 Fancy-Viewer 1.4.0.11 Released: https://www.fancy-viewer.com/

Changes:

• some UI improvements: full screen mode and ctrl+wheel mouse support (thanks to my friends for feature requests);
• PDF files support.

 

Fancy-Viewer 1.2.0.8

Fancy-Viewer 1.2.0.8 Released: https://www.fancy-viewer.com/

Changes:

• updated ImageMagick to some fresh version 7.1.1-40;
• fixed a crash in libmagic (file type detection library);
• fixed issue with old FTP servers support (for those who doesn't understand MLSD, like my TP-LINK router);
• improved security sandbox of host-process for ImageMagick;
• improved performance;
• did some other bugfix;