-
-
[转帖]PE-bear 0.4.0
-
发表于: 2020-1-12 06:40
-
PE-bear 0.4.0
PE-bear is new project. It’s a reversing tool for PE files.
Features and details
handles PE32 and PE64
views multiple files in parallel
recognizes known packers (by signatures)
fast disassembler – starting from any chosen RVA/File offset
visualization of sections layout
selective comparing of two chosen PE files
integration with explorer menu
and more…
Currently project is under rapid development. You can expect new fetaures/fixes every week. Any sugestions/bug reports are welcome. I am waiting for your e-mails and comments.
handles PE32 and PE64
views multiple files in parallel
recognizes known packers (by signatures)
fast disassembler – starting from any chosen RVA/File offset
visualization of sections layout
selective comparing of two chosen PE files
integration with explorer menu
and more…
Currently project is under rapid development. You can expect new fetaures/fixes every week. Any sugestions/bug reports are welcome. I am waiting for your e-mails and comments.
PE-bear 0.4.0 [Qt4]
FEATURE
Switched the disassembly engine from Udis86 to Capstone
Recognize referenced wide strings
Added more colors to disassembly view
Internal refactoring
The Linux build requires Qt4 to be installed.
The Windows build requires Visual Studio 2010 Redistributable package.
_http://download.microsoft.com/download/3/2/2/3224B87F-CFA0-4E70-BDA3-3DE650EFEBA5/vcredist_x64.exe
_http://download.microsoft.com/download/5/B/C/5BC5DBB3-652D-4DCE-B14A-475AB85EEF6E/vcredist_x86.exe
_ https://github.com/hasherezade/pe-bear-releases/releases_https://github.com/hasherezade/pe-bear-releases/releases/download/0.4.0/PE-bear_0.4.0_x64_win.zip
_https://github.com/hasherezade/pe-bear-releases/releases/download/0.4.0/PE-bear_0.4.0_x86_win.zip
_https://github.com/hasherezade/pe-bear-releases/releases/download/0.4.0/PE-bear_0.4.0_x64_linux.tar.xz
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！
最后于 2020-1-12 06:41
被linhanshi编辑
，原因：
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
