Stud_PE 2.6.0.7

Major features:

1. View/edit pe basic header information (dos also):
2. Header structures to hexeditor;
3. View/edit section table:
4. Add new section;
5. View/edit directory table:
6. Import/export table viewer;
7. Import adder;
8. Resource viewer/editor (save/replace ico/cur/bmp);
9. Pe scanner (peid sig database):
10. 400 packers/protectors/compilers;
11. Task viewer/dumper/killer;
12. Peheader/binary file compare;
13. Rva to raw to rva;
14. Drag'ndrop shell menu integration;
15. Basic hexeditor;
16. Process regions' dumper/viewer/editor;

Enhancements:

• Added support for drag&drop under w7,vista on 64bit os's; there is a bug with "x86" in ishelllink:getpath for 32bit app running on 64bit os;
• Found some import's names with the lenght greater than 500 chars! See adobe cs5, the imports from the boost libs; fixed the buffers to support such situations aaaand...
• Fixed a security issue, related to the size of import/export functions' names; "the vulnerability is caused due to a boundary error when parsing the names of functions exported by an analysed portable executable. This can be exploited to cause a stackbased buffer overflow by tricking a user into processing a specially crafted ".dll" or ".exe" file." (http://secunia.com/advisories/39130)
• Fixed 3 bugs reported by snailz; unhandled situations when no pe file was loaded;
• It seems that tls dir size is ignored by windows, so let stud_pe buttons enabled on 0 size image data dirs; (http://waleedassar.blogspot.com/2012/03/ollydbgv201andtlscallbacks.html)
• Bugfix in hexeditor; when exploring large pe sections/data (mb), at the end of the vscoll, the program was stuck in an endless paint;

Requirements:

• Pentium 166, 16mb ram
• Os:winall (w98 or higher starting from 2.6.0.6) is designed to be an effective portable executable (.exe) editor