文件列表:

plugins\kanal.dll (104448, 2005-01-27)
plugins\SecFix.dll (41472, 2005-05-13)
plugins\StringViewer.dll (19456, 2005-01-30)
plugins (0, 2005-06-10)
16Edit.dll (18944, 2002-02-05)
changelog.txt (8815, 2005-06-10)
signs.txt (95204, 2005-05-25)
PEvoyeur.exe (290816, 2005-06-10)

--------------------------------------------------- PEvoyeur v0.8.7 10/Jun/2005 Copyright 2005 marciano. e-mail: marcianito@gmail.com Web: http://xthost.info/marciano --------------------------------------------------- 1- What's PEvoyeur?. 2- License. 3- How to install PEvoyeur. 4- Adding signatures. 5- Adding plugins. 6- Greetings. 7- Contact. 1- What's PEvoyeur? -------------------------- PEvoyeur is a PE editor and identifier. It works with executable files (*.exe) and libraries (*.dll). Features: ~~~~~~~~~ - Identify compilers and executable packers (the user can add signatures to the database). - Summary. - EntryPoint (RVA). - EntryPoint (raw). - Linker version. - Subsystem. - EP section. - Flags. - View/modify the DOS Header. - View/modify the File Header. - Edit Flags. - Edit Machine. - View/modify the Optional Header. - Edit Subsystem. - View/modify the Data Directories info. - Export the Data Directories info to html. - View the exported functions. - Edit the Export Table. - Export the list of exported functions to html. - View the imported functions. - Export the list of imported libraries to html. - Export the list of imported functions from a certain library to html. - View/modify/dump the sections. - Edit Flags. - Identification of the EntryPoint section with an icon. - Open section with hex viewer. - Export the section headers table to html. - Support for PEiD plugins. Just place them in the PEvoyeur "plugins" folder. - It doesn't need installation. - It consumes little RAM. - Drag & drop support. - Command line support (pass the file name as argument). - Shell integration (context menu of .exe and .dll files). 2- License -------------------------- - PEvoyeur is FREEWARE: it is provided "AS IS" without any warranty, either expressed or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. The author will not be liable for any special, incidental, consequential or indirect damages due to loss of data or any other reason. USE IT AT YOUR OWN RISK. You can use this program free-of-charge and you can distribute it freely. 3- How to install PEvoyeur -------------------------- - PEvoyeur doesn't need installation; just unzip the original zip file to any folder you like. - It's necessary to keep the file '16edit.dll' in the PEvoyeur folder. - In the "plugins" folder you can add PEiD plugins, so you will can use them with PEvoyeur. - The file named 'Signs.txt' contains the compilers/exe packers signatures database. You can add signatures as explained in this document. - To uninstall this program, just delete the files included in the original zip file. 4- Adding signatures -------------------------- - You can make PEvoyeur to detect new compilers/exe packers. You should edit the file called 'signs.txt', and add the new signatures at the end of file, using the following format: [=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx] Replace with the name of the new signature. Replace 'xxxx..' with the hex values of the firsts bytes of the EntryPoint, without spaces. You can also use the byte wildcard '::'. Blank lines and lines beginning with a '#' character are ignored. - Example: The hex values of the firsts bytes of Dev-C++ 4.0 are: 55 89 E5 83 EC 08 83 C4 F4 6A :: A1 :: :: :: 00 FF D0 E8 :: FF FF FF So the signature will be: [Dev-C++ 4.0=5589E583EC0883C4F46A::A1::::::00FFD0E8::FFFFFF] 5- Adding plugins -------------------------- - PEvoyeur includes support for PEiD plugins. Just place them in the PEvoyeur 'plugins' folder, so they will be available for use. 6- Greetings -------------------------- - Thanks to NEOx from uinC Team, the developer of PE Tools (http://www.uinc.ru), for sending me the updated version of his great signatures database. - Thanks to dila (http://dila.mine.nu/) for his String Viewer plugin. - The 16Edit module was developed by yoda (http://y0da.cjb.net). - The Krypto ANALizer plugin was developed by snaker and igNorAMUS (http://peid.has.it) 7- Contact -------------------------- This program was developed by . Please send suggestions, comments, bugs report to marcianito@gmail.com. Please visit mi web site (in spanish): http://xthost.info/marciano .

近期下载者：

相关文件：

评论：[我要评论] [举报此文件]

收藏者：