感谢ODAY的群主,转贴:PE-bear 0.4.0 [Qt4]FEATURESwitched the disassembly engine from Udis86 to CapstoneRecognize referenced wide stringsAdded more colors to disassembly viewInternal refactoringThe Linux build requires Qt4 to be installed.The Windows build requires Visual Studio 2010 Redistributable package._http://download.microsoft.com/download/3/2/2/3224B87F-CFA0-4E70-BDA3-3DE650EFEBA5/vcredist_x64.exe_http://download.microsoft.com/download/5/B/C/5BC5DBB3-652D-4DCE-B14A-475AB85EEF6E/vcredist_x86.exe_ https://github.com/hasherezade/pe-bear-releases/releases
_https://github.com/hasherezade/pe-bear-releases/releases/download/0.4.0/PE-bear_0.4.0_x64_win.zip
_https://github.com/hasherezade/pe-bear-releases/releases/download/0.4.0/PE-bear_0.4.0_x86_win.zip
_https://github.com/hasherezade/pe-bear-releases/releases/download/0.4.0/PE-bear_0.4.0_x64_linux.tar.xz