30 Mar 2018
Primarily, new release is about bug fixes. There are lot of things fixed including memory leaks and program logic. Be warned, sometimes new bugs are replacing old ones, but we had worked hard to bring you bug-free release without introducing new bugs (we really hope so).
Some nice new features are added to make your experience more visible and comfortable:
- Brand new Entropy View (approximately detect packing status, presence of encrypted data) with two modes: Curve and Histogram;
- New disassembler engine (previously it was CADt by Ms-Rem, then Mediana by mika0x65 and now it's diStorm by Gil Dabah) has now resulted in x86-64 (64 bit) disasm in addition to x86 (32 bit);
- Load Config Directory (
IMAGE_LOAD_CONFIG_DIRECTORY
) support with new additional values and sizes (non-standard sizes); - Display of Structured Exception Handlers in Config directory;
- Certificates (Security Directory) removal (with all certificates);
- File System Redirector (Windows-on-Windows, WoW) support;
- Edit functionality in hex-editor;
- Correct process list display in modern OS;
- Display x86-64 (64 bit) processes in process list;
- DLL Characteristics dialog;
- PE Sniffer (Signs.txt) are translated to PEiD format.
- Link files support (.lnk);
- Debug directory info: PDB name, GUID, POGO types, VC types;
- Disasm call/jmp direction (up / down relative to current offset);
- Copy and Save menus in disasm and hex-editor dialogs;
- Copy options in hex-editor: C source, Editor display, hex values (raw bytes);
- Shortcuts in Copy menu in hex-editor;
- Fill Block dialog in в hex-editor: fill with values; XOR, OR, AND, NOT operations supported;
- Sections Editor shows zero-based section number (useful with files with many unnamed sections);
- Default action for double click: opening corresponding dialogs without context menu by default;
- Values
OperatingSystemVersion
andSubsystemVersion
are automatically updated to conform maximum number of sections for specific OS when increasing number of sections; - Correct calculation and fix of certain header sizes;
- Detection of many int3 opcodes to interrupt fast disasm;
- Correct relocation table removal with fix of corresponding flags;
- Serious bugs fixed in File Location Calculator (FLC);
- Import adder: fixed library name truncation bug;
- Auto close of Admin privilege warning.
High-DPI display modes supported including 192 DPI:
- DPI modes supported and tested: 96, 120, 144, 192
- Graphics redrawn:
- Main Application Icon
- Logo
- Toolbar icons
Outdated and unnecessary features removed:
- Old update system removed;
- Plugins removed (old plugins had very basic API set with only 2 functions);
- Number of external libraries reduced;
- Modules with similar functionality merged.
2017
internal
- TODO: Update history
18 Jan 2012
internal
- Default values when adding new section:
SizeOfRawData = 0x200
andVirtualSize = 0x1000
- Option to set
PE Sniffer
database: APISetDataFile
-
PESniffer
database is now loaded fromPESniffer.dll
location path, not from calling app path
18 July 2011
internal
- Fixed bug in
import adder
28 Nov 2009
internal
- Open file in
PE Editor
by double click in process list - Edit section header by double click on section name in
Sections Editor
. - When adding section from zero-sized file, 'Fill with zero' method chosen.
- Added more predefined section names (
Borland
,UPX
) - Open configuration dialog from command line:
/CFG
option. No need to wait mainPE Tools
window loading. - The
/CFG
parameter may be added to open configuration dialog before rebuilding file:/REBUILDPE File.exe /CFG
- "Keep file time" option for
PE Rebuilder
- New manifest for modern OS
27 Nov 2009
internal
- Build using
Visual Studio 2008
- Small additions and changes
internal
- Small bug-fixes
- Source code refactoring
14 May 2006
internal
- Many bugs fixed
-
PTDS SDK
added
11.10.05
internal
-
Section Editor
bug fixed - Bug in resiurce handler fixed
- Small internal changed
- New version of CADt
disassembler
by Ms-Rem
08 Dec 2003
Xmas Edition
- Added
Generic OEP Finder
-
DumpFixer
added toSection Editor
- New signatures added (Tnx: .Cryorb/dyn!o/DeMoNiX/Aster!x/FEUERRADER)
-
PE Sniffer
code is optimized - Ability to increment
SizeOfHeaders
added - New plugin added -
Recover UPX
by Quantum - Added
ToolBar
- All options are saved in
INI
file now - Control elements are changed a little in
Sections Editor
andDirectory Editor
- Examples of plugins in
MASM32/Delphi
are added toSDK
- Signature creation utility (
SignMan
) is now distributed along with the main package -
PE Tools
won't allow to editIMAGE_DOS_HEADER
if offset onIMAGE_OPTIONAL_HEADER
is less than size of -IMAGE_DOS_HEADER
- New version of update module (UUpdateSystem.dll)
-
MMF
functions are re-written - Bug in
File Location Calculator
fixed (Tnx: cyberbob) - Bug in
Kill Section
(from file) fixed - Small bug in process dumper fixed
- Bug in
Task Viewer
removed - Bug in
Break & Enter
removed - Bug with options saving is removed
- PE Tools now works fine on
Win95
(Tnx: Lepton) - Sections processing algorithm is significantly changed
21 Mar 2003
- Interface bugs fixed
- Program can now correctly dump processes protected by
tElock
- uinC Update System added
09 Dec 2002
- Fixed bugs in sections processing code
24 Aug 2002
- Now program automatically chooses a method of opening of files (Full access or Read-Only)
- The program displays section which has entrypoint
- `Drag-Drop`` support added
- Additional functions to work with sections are added
- Code for PE files processing is re-written again
- Bugs related to section processing fixed
01 June 2002
- The program is renamed to PE Tools (Thanks to NiFi)
- Now the program can edit DOS-compatible header
- New features: backup copy creation and opening of files in read-only mode
- Procedure of identification of PE-files was considerably improved
- Bug with opening files fixed
13 May 2002
- Some bugs fixed
- Program does not open Read-Only files
- Sources are provided with binaries
07 May 2002
- First public release.
GUI
application - Bug with sections fixed
- Functions for working with PE files are completely re-written
- Preservation of changes warning is added
- Process of command line is added
- Additional types of processors in Advanced Information
03 Feb 2002
- Initial
console
versionnever distributed