-
-
[转帖]PE-bear 0.4.0
-
发表于: 2020-1-12 06:40
-
handles PE32 and PE64
views multiple files in parallel
recognizes known packers (by signatures)
fast disassembler – starting from any chosen RVA/File offset
visualization of sections layout
selective comparing of two chosen PE files
integration with explorer menu
and more…
Currently project is under rapid development. You can expect new fetaures/fixes every week. Any sugestions/bug reports are welcome. I am waiting for your e-mails and comments.
PE-bear 0.4.0 [Qt4]
FEATURE
Switched the disassembly engine from Udis86 to Capstone
Recognize referenced wide strings
Added more colors to disassembly view
Internal refactoring
The Linux build requires Qt4 to be installed.
The Windows build requires Visual Studio 2010 Redistributable package.
_c72K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3c8G2N6$3&6D9L8$3q4V1i4K6u0W2L8h3W2U0M7X3!0K6L8$3k6@1i4K6u0W2j5$3!0E0i4K6u0r3k6r3!0%4L8X3I4G2j5h3c8Q4x3V1j5K6i4K6u0r3x3W2)9J5c8U0u0Q4x3V1j5K6x3U0t1@1b7U0R3%4c8W2)9J5k6p5y4r3b7e0m8Q4x3X3b7@1c8e0M7H3i4K6u0V1b7V1c8m8x3#2)9J5k6o6y4p5c8e0j5#2x3p5g2r3c8f1u0m8y4g2)9J5c8Y4k6U0M7X3g2V1K9i4y4@1i4K6g2X3P5o6j5@1i4K6u0W2k6i4S2W2
_f29K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3c8G2N6$3&6D9L8$3q4V1i4K6u0W2L8h3W2U0M7X3!0K6L8$3k6@1i4K6u0W2j5$3!0E0i4K6u0r3k6r3!0%4L8X3I4G2j5h3c8Q4x3V1j5#2i4K6u0r3b7W2)9J5c8V1y4Q4x3V1j5#2b7V1x3#2c8p5u0n7x3#2)9J5k6o6j5#2x3V1c8Q4x3X3b7@1c8p5y4q4i4K6u0V1b7U0p5@1b7g2)9J5k6o6b7%4y4f1q4n7z5o6g2q4c8f1j5$3c8g2)9J5c8Y4k6U0M7X3g2V1K9i4y4@1i4K6g2X3P5o6R3$3i4K6u0W2k6i4S2W2
_ 728K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6Z5j5i4y4Z5k6i4u0W2P5X3q4V1k6g2)9J5c8Y4m8W2i4K6u0V1j5X3g2S2M7W2)9J5k6s2u0W2L8r3g2S2M7$3g2K6i4K6u0r3M7X3g2D9k6h3q4K6k6i4x3`.[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
