-
-
[转帖]PE-bear 0.4.0
-
发表于: 2020-1-12 06:40
-
PE-bear 0.4.0
PE-bear is new project. It’s a reversing tool for PE files.
Features and details
handles PE32 and PE64
views multiple files in parallel
recognizes known packers (by signatures)
fast disassembler – starting from any chosen RVA/File offset
visualization of sections layout
selective comparing of two chosen PE files
integration with explorer menu
and more…
Currently project is under rapid development. You can expect new fetaures/fixes every week. Any sugestions/bug reports are welcome. I am waiting for your e-mails and comments.
handles PE32 and PE64
views multiple files in parallel
recognizes known packers (by signatures)
fast disassembler – starting from any chosen RVA/File offset
visualization of sections layout
selective comparing of two chosen PE files
integration with explorer menu
and more…
Currently project is under rapid development. You can expect new fetaures/fixes every week. Any sugestions/bug reports are welcome. I am waiting for your e-mails and comments.
PE-bear 0.4.0 [Qt4]
FEATURE
Switched the disassembly engine from Udis86 to Capstone
Recognize referenced wide strings
Added more colors to disassembly view
Internal refactoring
The Linux build requires Qt4 to be installed.
The Windows build requires Visual Studio 2010 Redistributable package.
_http://download.microsoft.com/download/3/2/2/3224B87F-CFA0-4E70-BDA3-3DE650EFEBA5/vcredist_x64.exe
_http://download.microsoft.com/download/5/B/C/5BC5DBB3-652D-4DCE-B14A-475AB85EEF6E/vcredist_x86.exe
_ https://github.com/hasherezade/pe-bear-releases/releases_https://github.com/hasherezade/pe-bear-releases/releases/download/0.4.0/PE-bear_0.4.0_x64_win.zip
_https://github.com/hasherezade/pe-bear-releases/releases/download/0.4.0/PE-bear_0.4.0_x86_win.zip
_https://github.com/hasherezade/pe-bear-releases/releases/download/0.4.0/PE-bear_0.4.0_x64_linux.tar.xz
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
最后于 2020-1-12 06:41
被linhanshi编辑
，原因：
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
