PE Tools History

PE Tools v1.9

1.9.762.2018

4 Apr 2018

• Fixed bug in Add New Section: Virtual Address Alignment

1.9.712.2018

30 Mar 2018

Principal Changes

Fixes

Primarily, new release is about bug fixes. There are lot of things fixed including memory leaks and program logic. Be warned, sometimes new bugs are replacing old ones, but we had worked hard to bring you bug-free release without introducing new bugs (we really hope so).

New Features

Some nice new features are added to make your experience more visible and comfortable:

• Brand new Entropy View (approximately detect packing status, presence of encrypted data) with two modes: Curve and Histogram;
• New disassembler engine (previously it was CADt by Ms-Rem, then Mediana by mika0x65 and now it’s diStorm by Gil Dabah) has now resulted in x86-64 (64 bit) disasm in addition to x86 (32 bit);
• Load Config Directory (IMAGE_LOAD_CONFIG_DIRECTORY) support with new additional values and sizes (non-standard sizes);
• Display of Structured Exception Handlers in Config directory;
• Certificates (Security Directory) removal (with all certificates);
• File System Redirector (Windows-on-Windows, WoW) support;
• Edit functionality in hex-editor;
• Correct process list display in modern OS;
• Display x86-64 (64 bit) processes in process list;
• DLL Characteristics dialog;
• PE Sniffer (Signs.txt) are translated to PEiD format.

A whole bunch of small but useful features

• Link files support (.lnk);
• Debug directory info: PDB name, GUID, POGO types, VC types;
• Disasm call/jmp direction (up / down relative to current offset);
• Copy and Save menus in disasm and hex-editor dialogs;
• Copy options in hex-editor: C source, Editor display, hex values (raw bytes);
• Shortcuts in Copy menu in hex-editor;
• Fill Block dialog in в hex-editor: fill with values; XOR, OR, AND, NOT operations supported;
• Sections Editor shows zero-based section number (useful with files with many unnamed sections);
• Default action for double click: opening corresponding dialogs without context menu by default;
• Values OperatingSystemVersion and SubsystemVersion are automatically updated to conform maximum number of sections for specific OS when increasing number of sections;
• Correct calculation and fix of certain header sizes;
• Detection of many int3 opcodes to interrupt fast disasm;
• Correct relocation table removal with fix of corresponding flags;
• Serious bugs fixed in File Location Calculator (FLC);
• Import adder: fixed library name truncation bug;
• Auto close of Admin privilege warning.

Get high

High-DPI display modes supported including 192 DPI:

• DPI modes supported and tested: 96, 120, 144, 192
• Graphics redrawn:
  • Main Application Icon
  • Logo
  • Toolbar icons

Cleanup

Outdated and unnecessary features removed:

• Old update system removed;
• Plugins removed (old plugins had very basic API set with only 2 functions);
• Number of external libraries reduced;
• Modules with similar functionality merged.

PE Tools v1.8

2017 internal

• TODO: Update history

PE Tools v1.7

1.7.100 alfa 4

18 Jan 2012 internal

• Default values when adding new section: SizeOfRawData = 0x200 and VirtualSize = 0x1000
• Option to set PE Sniffer database: API SetDataFile
• PESniffer database is now loaded from PESniffer.dll location path, not from calling app path

1.7.100 alfa 3

18 July 2011 internal

• Fixed bug in import adder

1.7.100 alfa 2

28 Nov 2009 internal

• Open file in PE Editor by double click in process list
• Edit section header by double click on section name in Sections Editor.
• When adding section from zero-sized file, ‘Fill with zero’ method chosen.
• Added more predefined section names (Borland, UPX)
• Open configuration dialog from command line: /CFG option. No need to wait main PE Tools window loading.
• The /CFG parameter may be added to open configuration dialog before rebuilding file: /REBUILDPE File.exe /CFG
• “Keep file time” option for PE Rebuilder
• New manifest for modern OS

1.7.100 alfa 1

27 Nov 2009 internal

• Build using Visual Studio 2008
• Small additions and changes

PE Tools v1.6

internal

• Small bug-fixes
• Source code refactoring

PE Tools v1.5

1.5.800.2005 RC7

14 May 2006 internal

• Many bugs fixed
• PTDS SDK added

1.5.700.2005 RC6

11.10.05 internal

• Section Editor bug fixed
• Bug in resiurce handler fixed
• Small internal changed
• New version of CADt disassembler by Ms-Rem

1.5.400.2003

08 Dec 2003 Xmas Edition

• Added Generic OEP Finder
• DumpFixer added to Section Editor
• New signatures added (Tnx: .Cryorb/dyn!o/DeMoNiX/Aster!x/FEUERRADER)
• PE Sniffer code is optimized
• Ability to increment SizeOfHeaders added
• New plugin added - Recover UPX by Quantum
• Added ToolBar
• All options are saved in INI file now
• Control elements are changed a little in Sections Editor and Directory Editor
• Examples of plugins in MASM32/Delphi are added to SDK
• Signature creation utility (SignMan) is now distributed along with the main package
• PE Tools won’t allow to edit IMAGE_DOS_HEADER if offset on IMAGE_OPTIONAL_HEADER is less than size of - IMAGE_DOS_HEADER
• New version of update module (UUpdateSystem.dll)
• MMF functions are re-written
• Bug in File Location Calculator fixed (Tnx: cyberbob)
• Bug in Kill Section (from file) fixed
• Small bug in process dumper fixed
• Bug in Task Viewer removed
• Bug in Break & Enter removed
• Bug with options saving is removed
• PE Tools now works fine on Win95 (Tnx: Lepton)
• Sections processing algorithm is significantly changed

PE Tools v1.4

1.4.419.2003

21 Mar 2003

• Interface bugs fixed
• Program can now correctly dump processes protected by tElock
• uinC Update System added

PE Tools v1.3

1.3 Build 60

09 Dec 2002

• Fixed bugs in sections processing code

1.3 Build 54

24 Aug 2002

• Now program automatically chooses a method of opening of files (Full access or Read-Only)
• The program displays section which has entrypoint
• Drag-Drop support added
• Additional functions to work with sections are added
• Code for PE files processing is re-written again
• Bugs related to section processing fixed

1.3

01 June 2002

• The program is renamed to PE Tools (Thanks to NiFi)
• Now the program can edit DOS-compatible header
• New features: backup copy creation and opening of files in read-only mode
• Procedure of identification of PE-files was considerably improved
• Bug with opening files fixed

PE Tools v1.2

13 May 2002

• Some bugs fixed
• Program does not open Read-Only files
• Sources are provided with binaries

PE Tools v1.1

07 May 2002

• First public release. GUI application
• Bug with sections fixed
• Functions for working with PE files are completely re-written
• Preservation of changes warning is added
• Process of command line is added
• Additional types of processors in Advanced Information

PE Tools v1.0

03 Feb 2002

• Initial console version never distributed

back