-
-
[转帖]PE-bear 0.4.0
-
发表于: 2020-1-12 06:40
-
handles PE32 and PE64
views multiple files in parallel
recognizes known packers (by signatures)
fast disassembler – starting from any chosen RVA/File offset
visualization of sections layout
selective comparing of two chosen PE files
integration with explorer menu
and more…
Currently project is under rapid development. You can expect new fetaures/fixes every week. Any sugestions/bug reports are welcome. I am waiting for your e-mails and comments.
PE-bear 0.4.0 [Qt4]
FEATURE
Switched the disassembly engine from Udis86 to Capstone
Recognize referenced wide strings
Added more colors to disassembly view
Internal refactoring
The Linux build requires Qt4 to be installed.
The Windows build requires Visual Studio 2010 Redistributable package.
_1d8K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3c8G2N6$3&6D9L8$3q4V1i4K6u0W2L8h3W2U0M7X3!0K6L8$3k6@1i4K6u0W2j5$3!0E0i4K6u0r3k6r3!0%4L8X3I4G2j5h3c8Q4x3V1j5K6i4K6u0r3x3W2)9J5c8U0u0Q4x3V1j5K6x3U0t1@1b7U0R3%4c8W2)9J5k6p5y4r3b7e0m8Q4x3X3b7@1c8e0M7H3i4K6u0V1b7V1c8m8x3#2)9J5k6o6y4p5c8e0j5#2x3p5g2r3c8f1u0m8y4g2)9J5c8Y4k6U0M7X3g2V1K9i4y4@1i4K6g2X3P5o6j5@1i4K6u0W2k6i4S2W2
_798K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3c8G2N6$3&6D9L8$3q4V1i4K6u0W2L8h3W2U0M7X3!0K6L8$3k6@1i4K6u0W2j5$3!0E0i4K6u0r3k6r3!0%4L8X3I4G2j5h3c8Q4x3V1j5#2i4K6u0r3b7W2)9J5c8V1y4Q4x3V1j5#2b7V1x3#2c8p5u0n7x3#2)9J5k6o6j5#2x3V1c8Q4x3X3b7@1c8p5y4q4i4K6u0V1b7U0p5@1b7g2)9J5k6o6b7%4y4f1q4n7z5o6g2q4c8f1j5$3c8g2)9J5c8Y4k6U0M7X3g2V1K9i4y4@1i4K6g2X3P5o6R3$3i4K6u0W2k6i4S2W2
_ 709K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6Z5j5i4y4Z5k6i4u0W2P5X3q4V1k6g2)9J5c8Y4m8W2i4K6u0V1j5X3g2S2M7W2)9J5k6s2u0W2L8r3g2S2M7$3g2K6i4K6u0r3M7X3g2D9k6h3q4K6k6i4x3`.[培训]传播安全知识、拓宽行业人脉——看雪讲师团队等你加入！
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
