0.4.0.2

PE-bear 0.4.0.2 [Qt4]

BUGFIX

• Remove width limit on the tree view (Issue #13 )
• Fixed some grammar mistakes in the labels

The Linux build requires Qt4 to be installed.

The Windows build requires Visual Studio 2010 Redistributable package.
Links:
vcredist_x64..zip
vcredist_x86.zip

PE-bear 0.4.0.1

PE-bear 0.4.0.1 [Qt4]

BUGFIX

• Fixed unreadable text in a dark mode (Issue #12)

The Linux build requires Qt4 to be installed.

The Windows build requires Visual Studio 2010 Redistributable package.
Links:
vcredist_x64..zip
vcredist_x86.zip

PE-bear 0.4.0

PE-bear 0.4.0 [Qt4]

FEATURE

• Switched the disassembly engine from Udis86 to Capstone
• Recognize referenced wide strings
• Added more colors to disassembly view
• Internal refactoring

The Linux build requires Qt4 to be installed.

The Windows build requires Visual Studio 2010 Redistributable package.
Links:
vcredist_x64..zip
vcredist_x86.zip

Mirror:
vcredist_x64..zip
vcredist_x86.zip

PE-bear 0.3.9.7

PE-bear 0.3.9.7 [Qt4]

FEATURE

• do not squeeze the rows of the PE tree view (improved readability)

BUGFIX

• Fixed crash during parsing sections if the ImageSize is 0 (Issue #7)
• Fixed null ptr dereference in RichHeader parser
• Fixed invalid offset conversion (VA/RVA) when setting a new EP (for some binaries)
• Fixed a bug with PDB being displayed as a number instead of string (for some binaries)
• Fixed calculating mapped size of the oversized sections (Issue #9)

The Linux build requires Qt4 to be installed.

The Windows build requires Visual Studio 2010 Redistributable package.
Links:
vcredist_x64..zip
vcredist_x86.zip

Mirror:
vcredist_x64..zip
vcredist_x86.zip

PE-bear 0.3.9.5

PE-bear 0.3.9.5 [Qt4]

BUGFIX

• Fixed stability issues occurring when the loaded PE was resized (i.e. application crashing after adding a new section).
• Fixed application crashing on the attempt of adding a new import at invalid address
• Fixed refreshing of the top panel when the data directory was moved into a new location
• Fixed invalid labels on the details panel bar (Exports, TLS)
• When PE-bear is added to explorer: open all the supported extension from the context menu (previously only EXE)
• Improved interpretation of the RichHeader (added more VisualStudio versions)

The Linux build requires Qt4 to be installed.

The Windows build requires Visual Studio 2010 Redistributable package.
Links:
vcredist_x64..zip
vcredist_x86.zip

Mirror:
vcredist_x64..zip
vcredist_x86.zip

PE-bear 0.3.9

PE-bear 0.3.9 [Qt4]

BUGFIX

• Fixed distinguishing between RVA/VA in Delay Load Imports panel

FEATURE

• Added Rich Header (viewing and editing), with calculated checksum
• Added support for the new fields in Load Config Directory
• In Debug Directory: parse and display RSDSI Table (including PDB path etc)

Requires Visual Studio 2010 Redistributable package.

Links:
vcredist_x64..zip
vcredist_x86.zip

Mirror:
vcredist_x64..zip
vcredist_x86.zip

PE-bear 0.3.8

BUGFIX

• Fixed bugs in parsing:

  • Delay Load Imports (64bit)
  • Load Config Directory (64bit)

• Fixed issues with adding a new section:

  • fixed virtual cave between the added section and the previous one
  • applying selected access rights on the newly added section

• Fixed invalid parsing of target RVAs in some of the calls/jumps

• Few other tiny improvements

Requires Visual Studio 2010 Redistributable package.

Links:
vcredist_x64..zip
vcredist_x86.zip

Mirror:
vcredist_x64..zip
vcredist_x86.zip

PE-bear 0.3.7.a

Removed MsgBox about the version. Small fixes.

Requires Visual Studio 2010 Redistributable package.

Links:
vcredist_x64..zip
vcredist_x86.zip

Mirror:
vcredist_x64..zip
vcredist_x86.zip

PE-bear 0.3.7

Build date: 23.03.2014
Changelog: https://hshrzd.wordpress.com/2014/03/23/pe-bear-version-0-3-7-avaliable/