pev - a PE analysis toolkit

风吹屁屁凉

Description
pev is a multiplatform PE analysis toolkit that includes tools to retrieve and parsing information about Windows PE files.

Features
Based in own library libpe
Support for PE32+ (64-bit) files
Formatted output in text and CSV (other formats in development)
pesec: detect presence of ASLR and DEP/NX bits
readpe: show PE headers, sections and imports
pescan: detect TLS callback functions, DOS stub modification, suspicious sections and more
pedis: disassembly a PE file section or function with support for Intel and AT&T syntax
Include tools to convert RVA from file offset and vice-versa

[AppleScript] 纯文本查看 复制代码

http://sourceforge.net/projects/pev/

405817530

沙发，呵呵····