StudyPE+ v2.0.4 Public Beta

StudyPE+ (x86) / (x64)
[Integrated PE32 & PE64 Viewing and Analysis Tool]

🛡 VirusTotal Scan Report:
(https://www.virustotal.com/gui/file/5cbc360d7414aedcdf28adda59fa2a51b792cd06ab68b8d2e3d8b245b9799705/detection)

[Software Overview]
Core Features:

• Modern Framework: Rebuilt on the Qt framework, supporting High-DPI displays and multi-tab operations.
• High Performance: Utilizes Lazy Loading technology for instant opening of large files with no size limitations.
• Broad Compatibility: Supports PE32/64, ARM/ARM64, and .NET architectures.
• Integrated Intelligence: Built-in Detect It Easy (DIE) engine for packer/protector identification.
• Comprehensive Parsing: Deep analysis of Exception Tables, Relocations, Load Config, Rich Header, and .NET Metadata.
• Visual Section Management: Interactive section manipulation (Add, Delete, Merge, and Offset Correction).
• Advanced Data Operations: Supports Export Table editing, TLS Callback management, and Overlay data handling.
• Resource Management: Full parsing of resources including Icons, Bitmaps, Menus, String Tables, and Manifest previews.
• Disassembly Engine: Integrated Capstone engine for assembly code viewing and binary diffing.
• Search Power: High-performance search for Patterns (Signatures), Assembly Instructions, and Strings.
• Process Manager: Built-in tool to view module lists, memory maps, and perform Memory Dumping.
• Hex Editor: Feature-rich hex editor with view linkage/synchronization.
• Swiss Army Knife: Integrated toolbox including RSA (p, q, n, d, e), Radix conversion, Hash/HMAC calculators, and Base64 encoding/decoding.
• Address Translation: Seamless conversion between RVA, FOA, and VA.
• UI Customization: Dark/Light theme switching and multi-language support (Simplified Chinese, Traditional Chinese, English).

【Contact Me】
If you encounter any bugs or have suggestions, please feel free to contact me.
Email: zaas2015@163.com
QQ Group: 790980160 (StudyPE Improvement Group)

【Update History】
ver 2.00 beta 4 (2025.12.20)

• Compiler Update: Switched to Qt 5.15 for better Windows 7 compatibility.
• File Filtering: Added default filters for common PE formats like .grx, .src, .ocx in the open file dialog.
• Settings: Added a "Restore Defaults" button in the Settings window.
• Brief Page: Displays ".NET Framework" specifically for .NET programs.
• Update Checker: Added a "Don't Remind Me" checkbox.
• RSA Tool: Improved RSA calculation page to display p, q, n, d and allow custom e.
• Bug Fix: Resolved an issue where a single-item Relocation Table failed to display details.
• UI Memory: Added memory for main window size and position.
• Plugin Management: Added setting to specify the DIE folder location; if set, the "Plugins" folder is bypassed.
• Status Bar: Added RVA display.
• Disassembly: Updated the assembly view to x64dbg-style.
• Code Identification: Added recognition of Import/Export functions in the assembly view and added filtering.
• String Search: Improved encoding detection and added "Xref" for strings.
• Stability: Fixed a crash occurring when switching themes after using the Hash calculator.
• Shell Integration: Added "Send To" and "Context Menu" support for Windows Explorer.
• Localization: Fixed an issue where the search page could not handle Chinese characters.
• Compatibility: Corrected potential garbled text in Chinese section names and function names.
• Optimization: Fixed memory leaks and other minor bugs.

ver 2.00 beta 3 (2025.12.10)

• Arm Analysis: Optimized Arm PE disassembly logic to correctly handle constant data in code segments.
• Relocation Logic: Improved relocation display logic and BSS section boundary checks.
• Section Editor: Fixed an issue where certain fields in the section editor were not editable.
• Bug Fix: Fixed an error when modifying section names containing Chinese characters.
• UI Performance: Fixed sluggish response in the file selection dialog.
• Relocation Detection: Added a relocation address validation feature.
• Export Table: Fixed display errors for Forwarded Export Tables.
• External Integration: Added support for external tool calls (one-click open with IDA, x64dbg/x32dbg, dnSpy, Resource Hacker).

ver 2.00 beta 2 (2025.12.06) - [Major Qt Rebuild]

• Framework Migration: Complete migration to Qt with High-DPI support and modern UI.
• Lazy Loading: Implemented Lazy Loading to remove the 100MB file size limit.
• Architecture Support: Added support for ARM/ARM64 and multi-tab analysis.
• Engine Upgrade: Upgraded to Capstone 6.0.
• New Parsers: Added full analysis for TLS and Exception directories.
• Security Tools: Integrated OpenSSL for new RSA helper functions.
• Resource Overhaul: Rewrote the icon replacement feature for much higher compatibility.
• Symbol Handling: Added C++ Name Demangling for export functions.
• Diffing: Enhanced assembly comparison and added binary file comparison.
• String Search: Added a high-speed string search engine capable of filtering millions of records in milliseconds.

StudyPE+ (x86) / (x64) [ PE32 & PE64 查看/分析集成工具] 【软件说明】 主要功能： ■基于 Qt 框架重构，支持 High-DPI 及多标签页操作。 ■采用懒加载技术，秒开大文件，PE大小无限制。 ■支持 PE32/64、ARM/ARM64 及 .NET 架构。 ■内置 Detect It Easy (DIE) 查壳引擎。 ■支持解析异常表、重定位表、Load Config、Rich Header 及 .NET 元数据。 ■提供可视化的区段操作（新增/删除/合并/偏移修正）。 ■支持导出表、TLS 回调处理、附加数据的多种数据操作。 ■支持解析资源段，支持图标、位图、菜单、字符串表及 Manifest 预览。 ■集成 Capstone 引擎，支持汇编代码与二进制差异对比。 ■提供 特征码 (Pattern)、汇编指令及高性能字符串搜索。 ■内置进程管理器，支持查看模块列表、内存区域映射与转存。 ■内置 Hex 编辑器 (视图联动)。 ■集成 RSA 、大数进制转换、Hash/HMAC 计算及 Base64 编解码工具箱。 ■支持 RVA/FOA/VA 地址转换。 ■深色/浅色主题切换及简/繁/英多语言界面。

【更新历史】
ver 2.00 beta 4 2025.12.20
■ 改为 QT5.15 编译，以支持 Win7。
■ 打开PE文件默认过滤.grx .src . ocx等常用PE格式 。
■ 设置窗口增加恢复默认按钮 。
■ Brief页面文件类型显示.net framework（如果是.net程序的话）
■ 检查更新页面增加 [不再提示] Checkbox。
■ 完善Rsa计算页面，显示 p q n d，并可自设 e。
■ 修正重定位表如果只有一项的时候无法显示详情的bug。（感谢 MonKeyDu(杜敏俊)）
■ 增加主窗口尺寸位置记忆。（感谢 xie83544109）
■ 设置页面增加指定 Die 文件夹的位置。如有，则取消Plugins文件夹。（感谢 plusv）
■ 状态栏增加显示Rva。（感谢 plusv）
■ 查看汇编代码页面，改为 x64dbg 风格。
■ 汇编代码页面增加识别导入、导出函数，新增过滤功能。
■ 完善字符串搜索页面编码识别，以及字符串的查找引用功能。（感谢 plusv）
■ 修复了使用 hash 计算器后切换软件主题会崩溃的 bug。
■ 增加系统发送到和右键菜单。（感谢 csjwaman）
■ 修正了搜索页面无法搜索中文的错误。
■ 修正了潜在的中文区段名、函数名识别为乱码的问题。（感谢 Bug yosen2001）
■ 修正了忘记释放的内存以及其他一些小型bug。
ver 2.00 beta 3 2025.12.10 发布
■ 优化Arm PE反汇编逻辑，遇到代码段的常量数据不会反汇编错误了。
■ 完善了重定位表的显示逻辑及BSS区段边界检查。
■ 修正编辑区段页面部分内容不可编辑的错误。（感谢@名字不好取 ）。
■ 顺带修复了修改不支持中文区段名以及刷新的错误。
■ 修复打开选择文件对话框响应迟缓的问题。
■ 增加重定位地址检测功能。
■ 修复扩大末尾区段函数的指针调用错误。（感谢 MonKeyDu(杜敏俊)）
■ 修复了中转输出表的显示错误。（感谢 MonKeyDu(杜敏俊)）
■ 修正了打开文件控件无法拖拽文件的错误。（感谢 Bug yosen2001）
■ 修正了Hash计算中的某些缺项和显示逻辑。（感谢 Bug yosen2001）
■ 修正了保存overlay按钮的错误。（感谢Bug yosen2001）
■ 修正了关闭tab信号发射错误导致关闭两个tab的错误。（感谢 Bug yosen2001）
■ 丰富状态栏功能。（感谢 白小轩）
■ 增加编辑区段界面的辅助计算功能。（感谢 白小轩）
■ 增加外部调用功能，设置后可以一键 Ida、x64dbg/X32dbg 和DnSpy、Resourse Hacker打开。
■ 完善了其他ui交互内容，限于篇幅不再一一致谢。
ver 2.00 beta 2 2025.12.06，Qt 重构预览版。
■ 全面迁移至 Qt 开发，支持高 DPI 显示，界面现代化。
■ 采用懒加载模式 (Lazy Loading)，秒开大文件，移除 100MB 文件大小限制。
■ 支持多标签页同时分析多个 PE 文件；新增 ARM/ARM64 架构支持。
■ 引擎升级至 Capstone 6.0；优化视图布局。
■ 新增 TLS (Thread Local Storage)、异常表 (Exception) 等目录的完整解析。
■ 集成 OpenSSL 库，新增 RSA 加密/解密辅助功能。
■ 优化资源表解析逻辑；重写 PE 图标替换功能，大幅提升兼容性。
■ 修复增加导出函数时的逻辑错误，增加 C++ 函数名反修饰功能。
■ PE汇编对比功能加强，增加文件二进制对比功能。
■ 优化十六进制编辑器的交互逻辑，它可以和所有表格联动。
■ 移除了cximage、Beaengine等过时内容，调用Detect-It-Easy查壳。
■ PE头现在也可以视作正常的Rva了。
■ 增加了PE文件字符串搜索和过滤功能，支持百万数据毫秒级过滤。
■ 支持Tls表回调函数操作。
■ 修复了增加区段时的对齐错误及其他累积 Bug。
■ 支持在线检查更新。

---

Keywords for search indexing:
#PEAnalyzer #ReverseEngineering #ARM64 #DotNetMetadata #Qt5 #BinaryDiffing #HexEditor #MalwareAnalysis #StudyPE #CapstoneEngine

StudyPE+ Evolution: Reimagined PE Analysis Platform (v2.0.2 Public Beta)

StudyPE+ (x86) / (x64)
[Integrated PE32 & PE64 Viewing and Analysis Tool]
【Software Overview】
Core Features:

• Modern Framework: Rebuilt on the Qt framework, supporting High-DPI displays and multi-tab operations.
• High Performance: Utilizes Lazy Loading technology for instant opening of large files with no size limitations.
• Broad Compatibility: Supports PE32/64, ARM/ARM64, and .NET architectures.
• Integrated Intelligence: Built-in Detect It Easy (DIE) engine for packer/protector identification.
• Comprehensive Parsing: Deep analysis of Exception Tables, Relocations, Load Config, Rich Header, and .NET Metadata.
• Visual Section Management: Interactive section manipulation (Add, Delete, Merge, and Offset Correction).
• Advanced Data Operations: Supports Export Table editing, TLS Callback management, and Overlay data handling.
• Resource Management: Full parsing of resources including Icons, Bitmaps, Menus, String Tables, and Manifest previews.
• Disassembly Engine: Integrated Capstone engine for assembly code viewing and binary diffing.
• Search Power: High-performance search for Patterns (Signatures), Assembly Instructions, and Strings.
• Process Manager: Built-in tool to view module lists, memory maps, and perform Memory Dumping.
• Hex Editor: Feature-rich hex editor with view linkage/synchronization.
• Swiss Army Knife: Integrated toolbox including RSA (p, q, n, d, e), Radix conversion, Hash/HMAC calculators, and Base64 encoding/decoding.
• Address Translation: Seamless conversion between RVA, FOA, and VA.
• UI Customization: Dark/Light theme switching and multi-language support (Simplified Chinese, Traditional Chinese, English).

【Contact Me】
If you encounter any bugs or have suggestions, please feel free to contact me.
Email: zaas2015@163.com
QQ Group: 790980160 (StudyPE Improvement Group)

【Update History】
ver 2.00 beta 4 (2025.12.25)

• Compiler Update: Switched to Qt 5.15 for better Windows 7 compatibility.
• File Filtering: Added default filters for common PE formats like .grx, .src, .ocx in the open file dialog.
• Settings: Added a "Restore Defaults" button in the Settings window.
• Brief Page: Displays ".NET Framework" specifically for .NET programs.
• Update Checker: Added a "Don't Remind Me" checkbox.
• RSA Tool: Improved RSA calculation page to display p, q, n, d and allow custom e.
• Bug Fix: Resolved an issue where a single-item Relocation Table failed to display details.
• UI Memory: Added memory for main window size and position.
• Plugin Management: Added setting to specify the DIE folder location; if set, the "Plugins" folder is bypassed.
• Status Bar: Added RVA display.
• Disassembly: Updated the assembly view to x64dbg-style.
• Code Identification: Added recognition of Import/Export functions in the assembly view and added filtering.
• String Search: Improved encoding detection and added "Find References" for strings.
• Stability: Fixed a crash occurring when switching themes after using the Hash calculator.
• Shell Integration: Added "Send To" and "Context Menu" support for Windows Explorer.
• Localization: Fixed an issue where the search page could not handle Chinese characters.
• Compatibility: Corrected potential garbled text in Chinese section names and function names.
• Optimization: Fixed memory leaks and other minor bugs.

ver 2.00 beta 3 (2025.12.10)

• Arm Analysis: Optimized Arm PE disassembly logic to correctly handle constant data in code segments.
• Relocation Logic: Improved relocation display logic and BSS section boundary checks.
• Section Editor: Fixed an issue where certain fields in the section editor were not editable.
• Bug Fix: Fixed an error when modifying section names containing Chinese characters.
• UI Performance: Fixed sluggish response in the file selection dialog.
• Relocation Detection: Added a relocation address validation feature.
• Export Table: Fixed display errors for Forwarded Export Tables.
• External Integration: Added support for external tool calls (one-click open with IDA, x64dbg/x32dbg, dnSpy, Resource Hacker).

ver 2.00 beta 2 (2025.12.06) - [Major Qt Rebuild]

• Framework Migration: Complete migration to Qt with High-DPI support and modern UI.
• Lazy Loading: Implemented Lazy Loading to remove the 100MB file size limit.
• Architecture Support: Added support for ARM/ARM64 and multi-tab analysis.
• Engine Upgrade: Upgraded to Capstone 6.0.
• New Parsers: Added full analysis for TLS and Exception directories.
• Security Tools: Integrated OpenSSL for new RSA helper functions.
• Resource Overhaul: Rewrote the icon replacement feature for much higher compatibility.
• Symbol Handling: Added C++ Name Demangling for export functions.
• Diffing: Enhanced assembly comparison and added binary file comparison.
• String Search: Added a high-speed string search engine capable of filtering millions of records in milliseconds.

StudyPE+ (x86) / (x64) [ PE32 & PE64 查看/分析集成工具]
【软件说明】
主要功能：
■基于 Qt 框架重构，支持 High-DPI 及多标签页操作。
■采用懒加载技术，秒开大文件，PE大小无限制。
■支持 PE32/64、ARM/ARM64 及 .NET 架构。
■内置 Detect It Easy (DIE) 查壳引擎。
■支持解析异常表、重定位表、Load Config、Rich Header 及 .NET 元数据。
■提供可视化的区段操作（新增/删除/合并/偏移修正）。
■支持导出表、TLS 回调处理、附加数据的多种数据操作。
■支持解析资源段，支持图标、位图、菜单、字符串表及 Manifest 预览。
■集成 Capstone 引擎，支持汇编代码与二进制差异对比。
■提供 特征码 (Pattern)、汇编指令及高性能字符串搜索。
■内置进程管理器，支持查看模块列表、内存区域映射与转存。
■内置 Hex 编辑器 (视图联动)。
■集成 RSA 、大数进制转换、Hash/HMAC 计算及 Base64 编解码工具箱。
■支持 RVA/FOA/VA 地址转换。
■深色/浅色主题切换及简/繁/英多语言界面。

Full Changelog: https://github.com/zaas2/StudyPE_2026/commits/v2.0.2