horsicq/xpeviewer

PE file viewer/editor for Windows, Linux and MacOS.

PE file viewer/editor for Windows, Linux and MacOS.

• Download: https://github.com/horsicq/XPEViewer/releases
• How to run: https://github.com/horsicq/XPEViewer/blob/master/docs/RUN.md
• How to build: https://github.com/horsicq/XPEViewer/blob/master/docs/BUILD.md
• Changelog: https://github.com/horsicq/XPEViewer/blob/master/changelog.txt

You can help with translation: https://github.com/horsicq/XTranslation

Special Thanks

• PELock Software Protection & Reverse Engineering

xpeviewer's Issues

The lower window is missing 2 records

Ask user before sending file to virustotal.

When I accidentally clicked on virustotal, I didn't want to send file to virustotal... It could be sensitive information...

crash when click in resource table.

1. download the newest release.
2. open any pe file, for example, the xpeviewer itself.
3. navigate to Resource in the left pane and click it.
4. on the right pane presenting resources, click any where in the upper table. for instance, click on "RT_ICON" field.
5. xpeviewer crashed.

Display section numbers starting from 1, rather than 0?

Hello @horsicq,

I notice that, at least on XPEViewer 0.04 on Ubuntu 22.04 amd64, sections are numbered starting from 0:

From my understanding of the official Microsoft PE specification (https://learn.microsoft.com/en-us/windows/win32/debug/pe-format), the sections given by the section headers, are considered to be numbered "starting from one (1)" — and the section number 0 has a special meaning (IMAGE_SYM_UNDEFINED).

Thus, it will be great, if you could consider changing the display of the section information to follow this.

Thank you!

Make new release on GitHub

This looks maintained but there seems to have been no release for over 2 years.

xpeviewer_win32_portable_0.01.zip detected as virus on Windows 10

Hi,

Just wanted to let you know that xpeviewer_win32_portable_0.01.zip is currently detected as Trojan:Win32/Wacatac.C!ml on Windows 10.

Is that on purpose? I wonder what does it contain that triggers Windows Defender so bad.

Thank you in advance for any feedback in case :) As well as thank you for all the awesome tools you've published. This is a gold mine for sure!

Cheers,
Julian

resource save error

The XPEViewer version is 0.02
I open an exe file, go to resource, select all and save to file.
It's so weird, beacause my file was changed, and the resource file be exported was also changed.
This is the file: Lab01-04.zip
Password is: infected

.deb dependency issue on Pop_OS 21.04

The Ubuntu 20.04 package version of the program works fine (as expected) on Pop_OS 21.04. However, the package has a dependency on qt5-default, which isn't available in the repo, so dpkg/apt thinks it's broken. Yet the binary works fine. I don't know if this issue will be present for versions of Ubuntu beyond 20.04.

Update: Also affects current XMachOViewer and XElfViewer.

Black text on dark background

Problem

Result window displays dark on dark: black text on dark background which is not readable actually.

Preview

Solution

Use contrast colours for foreground and background like in other windows and tables in XPEViewer.