PE Tools v1.5, Build 400, Christmas Edition
New in this version:
Added Generic OEP Finder
DumpFixer added to Section Editor
New signatures added (Tnx: .Cryorb/dyn!o/DeMoNiX/Aster!x/FEUERRADER)
PE Sniffer code is optimized
Ability to increment SizeOfHeaders added
New plugin added - Recover UPX by Quantum
Added ToolBar
All options are saved in INI file now
Control elements are changed a little in Sections Editor and Directory Editor
Examples of plugins in MASM32/Delphi are added to SDK
Signature creation utility (SignMan) is now distributed along with the main package
PE Tools won't allow to edit IMAGE_DOS_HEADER if offset on IMAGE_OPTIONAL_HEADER is less than size of IMAGE_DOS_HEADER
New version of update module (UUpdateSystem.dll)
MMF functions are re-written
Bug in File Location Calculator removed (Tnx: cyberbob)
Bug in Kill Section (from file) removed
Small bug in process dumper is removed
Bug in Task Viewer removed
Bug in Break & Enter removed
Bug with options saving is removed
PE Tools now works fine on Win95 (Tnx: Lepton)
Sections processing algorithm is significantly changed
Description:
This is a fully-functional utility for working with PE/PE +(64bit) files. Including: Editor PE of files, Task Viewer, Win32 PE files optimizer, detector of compiler/packer and many other things.
The basic functions of the program:
Task Viewer
Process dump
Dump Full
Dump Partial
Dump Region
Ability to dump .NET CLR processes
Automatic removal of protection " Anti Dump Protection "
Change of a priority of process
Kill process
Loading of process into PE Editor and PE Sniffer
Generic OEP Finder
PE Sniffer
Search of the compiler/packer used
Ability to update signature base
Ability to scan directories
PE Rebuilder
Optimization of a PE file
Change of PE address base of a file
PE Editor
Editing of DOS heading
Support of new PE+(64bit) format
CRC correction
Viewing and editing tables of import/export
url:
http://www.uinc.ru/scripts/load.cgi?files/neox/PE_Tools.zip
web:
http://www.uinc.ru/files/neox/PE_Tools.shtml
[课程]Linux pwn 探索篇！
