1.20 Build 0
October 1, 2007
New Features:
- Immunity Debugger API
o immlib.getThreadId() method added: return the current debuggee thread id
o immlib.getCallTree() method added: return the call tree for given
address
o immlib.setFocus() method added: focus ID window
o immlib.isValidHandle() method added: check if a HWND is still valid
o immlib.getInfoPanel() method added: get information from panel window
and optionally receives a type flag to force the kind of comment
fetched.
o imm.findPacker() method added: find packers/cryptors on a file or a
loaded module
o imm.getMemoryPagebyOwner(): Find all the memory pages belonging to a
module.
o immlib.ps() returns two extra objects: the tcp list and the udp list
o immlib.getComment() now will try to fetch all types of comments
o Added new HOOKTYPE: PRE_BP_HOOK, hooks exactly before the breakpoint
is hit (Decoding events timeline)
o New Vista support for libheap
o Custom Tables has "Clear Window" menu now
o Added several methods from librecognize
- PyCommands
o findpacker added. (Use of findPacker to get Packers from a module)
o recognize added. (Function Recognizing using heuristic patterns)
o Hippie now can filter by heap
o heap updated to work with new Vista Heap
o Optimized code for stackvars (Memory usage reduction during runtime)
- Core
o Pyshell can be focused once created with alt-F11
o Shortcut for attach process added: Ctrl+F1
o Added librecognition.py (Library for function recognizing)
- Graph
o immvcglib.generateGraphFromBuf() method added: play with your own vcg
files!
o Redesign of VCG parser: easier to read, easier to use.
Bug Fixes:
o Return value (HWND) of createTable
o Fixed Attach Search Filtering :
http://forum.immunityinc.com/index.php?topic=49.0
o Grapher: Vertex lastline jumps correctly displayed now
o Fixed crash when searching on modules:
http://forum.immunityinc.com/index.php?topic=63.0
o Fixed search issue on protected binary:
http://forum.immunityinc.com/index.php?topic=34
o Fixed breakpoint/logpoint hooks issue (logic/stepping inside a hook)
o Fixed PyString_AsString() missbehaviour
o Fixed PyCommand Gui Arguments box to receive \x00 as argument
o Fixed imm.getModulebyAddress() to receive any module address and not only
module entry point
http://forum.immunityinc.com/index.php?topic=74.0