30 Mar 2018
Primarily, new release is about bug fixes. There are lot of things fixed including memory leaks and program logic. Be warned, sometimes new bugs are replacing old ones, but we had worked hard to bring you bug-free release without introducing new bugs (we really hope so).
Some nice new features are added to make your experience more visible and comfortable:
- Brand new Entropy View (approximately detect packing status, presence of encrypted data) with two modes: Curve and Histogram;
- New disassembler engine (previously it was CADt by Ms-Rem, then Mediana by mika0x65 and now it's diStorm by Gil Dabah) has now resulted in x86-64 (64 bit) disasm in addition to x86 (32 bit);
- Load Config Directory (
IMAGE_LOAD_CONFIG_DIRECTORY) support with new additional values and sizes (non-standard sizes); - Display of Structured Exception Handlers in Config directory;
- Certificates (Security Directory) removal (with all certificates);
- File System Redirector (Windows-on-Windows, WoW) support;
- Edit functionality in hex-editor;
- Correct process list display in modern OS;
- Display x86-64 (64 bit) processes in process list;
- DLL Characteristics dialog;
- PE Sniffer (Signs.txt) are translated to PEiD format.
- Link files support (.lnk);
- Debug directory info: PDB name, GUID, POGO types, VC types;
- Disasm call/jmp direction (up / down relative to current offset);
- Copy and Save menus in disasm and hex-editor dialogs;
- Copy options in hex-editor: C source, Editor display, hex values (raw bytes);
- Shortcuts in Copy menu in hex-editor;
- Fill Block dialog in в hex-editor: fill with values; XOR, OR, AND, NOT operations supported;
- Sections Editor shows zero-based section number (useful with files with many unnamed sections);
- Default action for double click: opening corresponding dialogs without context menu by default;
- Values
OperatingSystemVersionandSubsystemVersionare automatically updated to conform maximum number of sections for specific OS when increasing number of sections; - Correct calculation and fix of certain header sizes;
- Detection of many int3 opcodes to interrupt fast disasm;
- Correct relocation table removal with fix of corresponding flags;
- Serious bugs fixed in File Location Calculator (FLC);
- Import adder: fixed library name truncation bug;
- Auto close of Admin privilege warning.
High-DPI display modes supported including 192 DPI:
- DPI modes supported and tested: 96, 120, 144, 192
- Graphics redrawn:
- Main Application Icon
- Logo
- Toolbar icons
Outdated and unnecessary features removed:
- Old update system removed;
- Plugins removed (old plugins had very basic API set with only 2 functions);
- Number of external libraries reduced;
- Modules with similar functionality merged.
2017 internal
- TODO: Update history
18 Jan 2012 internal
- Default values when adding new section:
SizeOfRawData = 0x200andVirtualSize = 0x1000 - Option to set
PE Snifferdatabase: APISetDataFile -
PESnifferdatabase is now loaded fromPESniffer.dlllocation path, not from calling app path
18 July 2011 internal
- Fixed bug in
import adder
28 Nov 2009 internal
- Open file in
PE Editorby double click in process list - Edit section header by double click on section name in
Sections Editor. - When adding section from zero-sized file, 'Fill with zero' method chosen.
- Added more predefined section names (
Borland,UPX) - Open configuration dialog from command line:
/CFGoption. No need to wait mainPE Toolswindow loading. - The
/CFGparameter may be added to open configuration dialog before rebuilding file:/REBUILDPE File.exe /CFG - "Keep file time" option for
PE Rebuilder - New manifest for modern OS
27 Nov 2009 internal
- Build using
Visual Studio 2008 - Small additions and changes
internal
- Small bug-fixes
- Source code refactoring
14 May 2006 internal
- Many bugs fixed
-
PTDS SDKadded
11.10.05 internal
-
Section Editorbug fixed - Bug in resiurce handler fixed
- Small internal changed
- New version of CADt
disassemblerby Ms-Rem
08 Dec 2003 Xmas Edition
- Added
Generic OEP Finder -
DumpFixeradded toSection Editor - New signatures added (Tnx: .Cryorb/dyn!o/DeMoNiX/Aster!x/FEUERRADER)
-
PE Sniffercode is optimized - Ability to increment
SizeOfHeadersadded - New plugin added -
Recover UPXby Quantum - Added
ToolBar - All options are saved in
INIfile now - Control elements are changed a little in
Sections EditorandDirectory Editor - Examples of plugins in
MASM32/Delphiare added toSDK - Signature creation utility (
SignMan) is now distributed along with the main package -
PE Toolswon't allow to editIMAGE_DOS_HEADERif offset onIMAGE_OPTIONAL_HEADERis less than size of -IMAGE_DOS_HEADER - New version of update module (UUpdateSystem.dll)
-
MMFfunctions are re-written - Bug in
File Location Calculatorfixed (Tnx: cyberbob) - Bug in
Kill Section(from file) fixed - Small bug in process dumper fixed
- Bug in
Task Viewerremoved - Bug in
Break & Enterremoved - Bug with options saving is removed
- PE Tools now works fine on
Win95(Tnx: Lepton) - Sections processing algorithm is significantly changed
21 Mar 2003
- Interface bugs fixed
- Program can now correctly dump processes protected by
tElock - uinC Update System added
09 Dec 2002
- Fixed bugs in sections processing code
24 Aug 2002
- Now program automatically chooses a method of opening of files (Full access or Read-Only)
- The program displays section which has entrypoint
- `Drag-Drop`` support added
- Additional functions to work with sections are added
- Code for PE files processing is re-written again
- Bugs related to section processing fixed
01 June 2002
- The program is renamed to PE Tools (Thanks to NiFi)
- Now the program can edit DOS-compatible header
- New features: backup copy creation and opening of files in read-only mode
- Procedure of identification of PE-files was considerably improved
- Bug with opening files fixed
13 May 2002
- Some bugs fixed
- Program does not open Read-Only files
- Sources are provided with binaries
07 May 2002
- First public release.
GUIapplication - Bug with sections fixed
- Functions for working with PE files are completely re-written
- Preservation of changes warning is added
- Process of command line is added
- Additional types of processors in Advanced Information
03 Feb 2002
- Initial
consoleversionnever distributed