Refactored driver list tooltip logic to use dynamically allocated buffers and improved tooltip display reliability. Applied minor code quality and static analysis annotation fixes throughout the codebase.
Project files updated to use PlatformToolset v145 for Visual Studio 2026 support. Object type hash table implementation in objects.c changed to use linked nodes for better collision handling. Minor code improvements, version and date updates, and additional error checks were made throughout the codebase.
Win11 24h2/25h2 compatibility improvements:
Updates to various types of callbacks query
Updates to FltCommPort object view
Updates to win32k table view
Rtls update
added entirely new handling of object names to support embedded nulls
added Pico providers, Nmi, SiloMonitor and Errata manager callbacks
added CmControlVector viewer
added Copy Name/Copy Name (Binary) commands to the main window popup menus
added program statistics (see Help->Statistics)
added legend window description for process list
added ability to fix image sections for dumped drivers
added RegistryTransaction object view and access rights
moved "Globals" from about box to the View->System Information and rearranged it output
drivers dump operation can now be cancelled
fix display of PUNICODE_STRING dump
fix ALPC Port type objects sometimes unable to open while they can be opened
plugin sdk updated to accommodate new named objects handling
imagescope plugin updated to accomodate plugin sdk changes
elevation required features in "extras" will now request elevation instead of just been disabled
help file updated with drivers and symbols usage
internal rearrange and minor UI changes
(release candidate 1)
more Win10/11 21h2 compatibility changes
added FLT_FILTER, FLT_OBJECT structured dump
added authenticode hash calculation for loaded drivers (extras->Drivers, use popup menu on driver entry)
various minor UI changes
rtls updated
internal rearrange
(beta 1)
hfiref0x