News

Function Hacker v2.0 Alpha Release

The alpha version of the new Function Hacker has now been released (about time!). It is fairly complete currently and is a powerful hacking/reverse-engineering/anti-virus tool. Features of this Alpha version are as follows:

• Records inter-modular and intra-modular function calls.
• Visualization for the function calls. All the calls are visualized by drawing lines between the functions.
• Visualization for the function call frequency versus time for each data recording. Using the mouse this can be zoomed in on, regions can be selected, and the cursor can be set.
• Lists the function call traces with arguments for the data recordings.
• Automatic detection of number of function arguments.
• Names of functions are included when available.
• Can filter the function calls based on a large variety of criterion including type, time range, call count, number of agruments, argument contents, and address.
• Can enable and disable functions through the right-click context menu on the functions.

The next main features will be:

• Listing the function call data by function.
• Sending calls to functions with specified arguments.
• Filtering by list comparison. eg. Call is in RecordingA 3 times, in RecordingB 0 times, and in RecordingC 1 time.
• Better estimation of code regions with EXECUTE heaps for intra-modular call extraction. This is the cause of all target process crashes I have seen so far.
• Assembly viewer.
• Memory viewer and searcher (Zelimir will be working on this).
• Saving and loading function lists.
• Carry over functions lists when attaching to another process with the same main module. This is so that if the program you are hacking crashes, you can just start up another copy of it and attach again without any lost work.
• Argument dereference searching.

I am going to prepare a few YouTube video tutorials for using this tool to find and hack simple functions. Feel free to make feature requests, submit bug reports, or just chat with me at JLIB_HTML_CLOAKING .