Locked PE Anatomist - PE files internals

[itsMe]

This is the hidden content, please

• Sign In
• or
• Sign Up

PE Anatomist shows almost all known data structures inside a PE file and makes some analytics
Version: 0.1.15 (2020-05-30)

Added mapping of redirects to another UNWIND_INFO between managed / unmanaged code in the ExceptionsData table for x64

Added parsing of tables and metadata of dotNET

What's new?
Version 0.1.15.344 (2020-05-30)
PEAnatomist.exe SHA256: 04D3749A5525C9D49CD0161308510507B886BC64F323ABA2064E987331B3B128

    Fixed the error in determining the minor version of VS 2017-2019 when decoding the Rich signature (regression 0.1.13 and 0.1.14)
    Fixed decoding of RT_STRING resources in the presence of incorrect data
    Added tab with detailed description of PE resource headers
    Resource tab redone to list without grouping by resource type
    Fixed sorting of the list of resources
    The procedure for parsing the resource directory has been changed, new criteria for data correctness have been added
    Fixed processing of the settings file during the first launch of the program
    Corrected the behavior of the COFF character parser in the presence of incorrect info about long symbol names
    Fixed the bug of constructing the context menu for listview in virtual mode
    Fixed saving the selected file type filter in the "Open file" dialog
    Fixed incorrect recognition of UTF16 lines in rare cases
    Added page of detected ANSI and UTF16 lines in PE file
    Added CodeView Debug Info parsing for OBJ files
    Added CodeView Debug Symbols parsing for OBJ files
    Added parsing of CodeView Types for OBJ files
    Added parsing of new CodeView Debug Symbol records up to S_REGREL32_INDIR_ENCTMP inclusive
    Added parsing of new CodeView Type leafs up to and including LF_INTERFACE2
    Added parsing of type information in OBJ files compiled by MSVC with the /GL flag or others in MS ILStore format

This is the hidden content, please

• Sign In
• or
• Sign Up