Stud_PE is a portable Executables (.exe) editor and features a very easy to use interface.
Stud_Pe also features an extensive list of settings and editing options.
Here are some key features of "StudPE":
· view/edit PE basic Header information (DOS also):
· header structures to hexeditor;
· view/edit Section Table:
· add new section;
· view/edit Directory Table:
· Import/Export Table viewer;
· Import adder;
· Resource viewer/editor (save/replace ico/cur/bmp);
· Pe Scanner (PEiD sig database):
· 400 packers/protectors/compilers;
· Task viewer/dumper/killer;
· PEHeader/Binary file compare;
· RVA to RAW to RVA;
· Drag'nDrop shell menu integration;
· Basic HexEditor;
What's New in This Release: [ read full changelog ]
· Fixed a bug with imported functions name lenght;
· Added external signature verifier; writed a note about signatures;
· Fixed RVA2RAW for UPACK which has EP inside PE HEADER; now imports are shown fine;
· Added basic disassembler from hexeditor right click menu;
· Fixed showing which export is in fact a forwarder to other dll; like HeapAlloc in kernel.dll;
· Added process memory dumper/viewer; right click on the process you want to inspect; you can
· use dissasambler (from right click menu inside the hexeditor) to see how the code looks at
· certain VA; the difference from other (dumpers LordPE, ProcDump, PETools) is that it can dump/view code blocks protected with PAGE_GUARD or NOACCESS flags.