bi7jta / PE-Explorer

PE Explorer in C++ (x86 / x64) - PE file parser, retrieve exports and imports

PE Explorer

📖 Project Overview :

This is a PE file parser, it retrieve every informations from the differents headers...

This tool is made in C++ and compiled in x86, it can parse x86 and x64 PE file.

📚 Features :

The parser retrieve several informations :

• Every fields in DOS header.
• Every fields in NT header.
• Every fields in File header.
• Every fields in Optional header (x86 / x64).
• Every sections' informations in the Section header.
• Every DLL imported with imported functions.
• Every exported functions (if the DataDirectory exists).

🚀 Getting Started :

Visual Studio :

1. Open the solution file (.sln).
2. Build the project in Realese (x86)

Every configuration in x86 (Debug and Realese) are already configured.

Note
It is not necessary to build it in x64, the x86 build can parse x86 and x64 PE file.

Other IDE using CMAKE :

This CMakeLists.txt should compile the project.

cmake_minimum_required(VERSION 3.0)
project(explorer)

set(CMAKE_CXX_STANDARD 17)

add_executable(explorer PE_Explorer.cpp)

Tested on CLion with MSVC compiler, you can get Visual Studio Build Tools here.

🧪 Usage :

How to use the program :

Use it in the command line :

explorer.exe <pe_file>

Note
You can test the parser with test files in the "Release" section.

Demonstration :

TEST FILE (EXE - x86)

Demo.EXE.x86.mp4

TEST FILE (DLL - x64)

Demo.DLL.x64.mp4