RE FORUM

[REVERSE ENGINEERING] => Tools => Topic started by: llAmElliK on June 29, 2005, 05:21:25 PM

Title: PEvoyeur
Post by: llAmElliK on June 29, 2005, 05:21:25 PM
1- What's PEvoyeur?
 --------------------------
 PEvoyeur is a PE editor and identifier.
 It works with executable files (*.exe) and libraries (*.dll).
 
 Features:
 ~~~~~~~~~
 
 - Identify compilers and executable packers (the user can add signatures
 to the database).
 
 - Summary.
     - EntryPoint (RVA).
     - EntryPoint (raw).
     - Linker version.
     - Subsystem.
     - EP section.
     - Flags.
 
 - View/modify the DOS Header.
 - View/modify the File Header.
     - Edit Flags.
     - Edit Machine.
 - View/modify the Optional Header.
     - Edit Subsystem.
 
 - View/modify the Data Directories info.
     - Export the Data Directories info to html.
     - View the exported functions.
         - Edit the Export Table.
         - Export the list of exported functions to html.
     - View the imported functions.
         - Export the list of imported libraries to html.
         - Export the list of imported functions from a certain library to html.
 
 - View/modify/dump the sections.
     - Edit Flags.
     - Identification of the EntryPoint section with an icon.
     - Open section with hex viewer.
     - Export the section headers table to html.
 
 - Support for PEiD plugins. Just place them in the PEvoyeur "plugins" folder.
 
 - It doesn't need installation.
 - It consumes little RAM.
 - Drag & drop support.
 - Command line support (pass the file name as argument).
 - Shell integration (context menu of .exe and .dll files).
 
 http://xthost.info/marciano/software.html