-
-
[转帖]PE-bear 0.4.0
-
2020-1-12 06:40
-
PE-bear 0.4.0
PE-bear is new project. It’s a reversing tool for PE files.
Features and details
handles PE32 and PE64
views multiple files in parallel
recognizes known packers (by signatures)
fast disassembler – starting from any chosen RVA/File offset
visualization of sections layout
selective comparing of two chosen PE files
integration with explorer menu
and more…
Currently project is under rapid development. You can expect new fetaures/fixes every week. Any sugestions/bug reports are welcome. I am waiting for your e-mails and comments.
handles PE32 and PE64
views multiple files in parallel
recognizes known packers (by signatures)
fast disassembler – starting from any chosen RVA/File offset
visualization of sections layout
selective comparing of two chosen PE files
integration with explorer menu
and more…
Currently project is under rapid development. You can expect new fetaures/fixes every week. Any sugestions/bug reports are welcome. I am waiting for your e-mails and comments.
PE-bear 0.4.0 [Qt4]
FEATURE
Switched the disassembly engine from Udis86 to Capstone
Recognize referenced wide strings
Added more colors to disassembly view
Internal refactoring
The Linux build requires Qt4 to be installed.
The Windows build requires Visual Studio 2010 Redistributable package.
_http://download.microsoft.com/download/3/2/2/3224B87F-CFA0-4E70-BDA3-3DE650EFEBA5/vcredist_x64.exe
_http://download.microsoft.com/download/5/B/C/5BC5DBB3-652D-4DCE-B14A-475AB85EEF6E/vcredist_x86.exe
_ https://github.com/hasherezade/pe-bear-releases/releases_https://github.com/hasherezade/pe-bear-releases/releases/download/0.4.0/PE-bear_0.4.0_x64_win.zip
_https://github.com/hasherezade/pe-bear-releases/releases/download/0.4.0/PE-bear_0.4.0_x86_win.zip
_https://github.com/hasherezade/pe-bear-releases/releases/download/0.4.0/PE-bear_0.4.0_x64_linux.tar.xz
[培训]《安卓高级研修班(网课)》月薪三万计划，掌握调试、分析还原ollvm、vmp的方法，定制art虚拟机自动化脱壳的方法
最后于 2020-1-12 06:41
被linhanshi编辑
，原因：
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
