Processed through Paypal
No account required.
Donate Bitcoin to this wallet:
Donate Ethereum to this wallet:
Donate Litecoin to this wallet:
|File - Download PE Anatomist v0.1.12|
FYI, always scroll to the bottom of the page to download files on OlderGeeks.com.
We don't believe in fake/misleading download buttons and tricks. The link is always in the same place.
PE Anatomist v0.1.12
PE Anatomist shows almost all known data structures inside a PE file and makes some analytics.
Headers and data structures parsing
IMAGE_DOS_HEADER, IMAGE_FILE_HEADER, IMAGE_OPTIONAL_HEADER, IMAGE_OPTIONAL_HEADER64 and the DataDirectories List with additional information about some fields
Table of COFF symbols
Sections table, supporting long section names (via symbols table) and entropy calculating
Import table (supports MS-styled names demangling)
Bound Import Table
Delayed Import Table
Export Table with additional info
Resource Table with additional info about different resource types and detailed view for all types
Base Relocation Table. Target address determining and interpretation available for all supporting architectures. It detects imports, delayed imports, exports, tables from loadconfig directory, ANSI and UNICODE strings.
Brief info about PE Authenticode Signature
LoadConfig Directory with SEH, GFID, decoded CFG bitmap, GIAT, Guard LongJumps, CHPE Metadata, Dynamic Value Reloc Table, Enclave Configuration, Volatile Metadata tables parsing and additional information about some fields
Debug Directory. It parses contents of CODEVIEW, POGO, VC FEATURE, REPRO, FPO, EXDLL CHARACTERISTICS, SPGO debug types
TLS config and callbacks table with additional information about some fields
Exceptions Data Table. x64 (including version 2 with EPILOG unwind codes), arm, arm64, ia64 architectures are support, as well as chain of unwind data for x64, language-specific handler data (C Scope, C++ FuncInfo, C++ EH4, C++ DWARF LSDA) and hexadecimal view of unwind data
Partial .NET directory pasring: IMAGE_COR20_HEADER, CORCOMPILE_HEADER, READYTORUN_HEADER with additional information about some fields
Decode Rich signature indicating the tool used, the action being taken, the full version of the tool, and the version of VisualStudio to which the tool belongs
IAT table contents
VB5 and VB6 typical structures: project info, DLLCall-imports, referenced modules, object table
FLC - file location calculator
Display settings and sorting by any column of the list
Localization of the program interface (while Russian and English options are available) via external DLL file
Explorer's context menu integration
Decoding strings of national Unicode symbols (cyrillic form CP1251 is available now)
More information here.X
This tool was designed to be used with:
Windows XP SP3 (x86)
Windows 7, Windows 8, Windows 8.1, Windows 10 (both x86 and x64)
PE Image Architectures
CHPE (x86 on ARM8-64)
Version 0.1.12.73 (2020-02-13)
PEAnatomist.exe SHA256: 5EF85D7B7A34434547086034F43D5266FB18C22735AB57762610CB5437ECA0F7
A context menu integration bug fixed
The behavior of the program when loading a new file with open resource properties window is fixed
Fixed error displaying descriptions of some characters in the Dyn.Value Relocations table
Fixed error parsing ExceptionsData table for ARM Thumb: incorrect information about stored registers in compressed form of UnwindInfo
Natural sorting added for several more lists
Fixed error populating the Catch Handlers list for UnwindInfo.EHData.CPP_EH4
Fixed a bug leading to the slow execution of the "Select All" operation on large lists
Some lists with a large number of elements are switched to virtual mode
Added navigation through the associated UNWIND_INFO elements of the ExceptionData list for x64
Click here to visit the author's website.
Continue below to download this file.
|193||1,020||RamMerLabs <img src="https://www.oldergeeks.com/downloads/gallery/thumbs/PEAnatomist7_th.png"border="0">||Feb 14, 2020 - 12:43||0.1.12||108.5KB||ZIP||, out of 3 Votes.|
|Anatomist PE v0.1.12|
→→ Download Now ←← - Click to Rate File -
Like? Share this page on Twitter → Tweet