libpe icon indicating copy to clipboard operation
libpe copied to clipboard

PE32+ format not parsed

Open ludekvodicka opened this issue 6 years ago • 4 comments

I'm trying your library but unfortunately it doesn't work for 64bit executables.

I'm testing it directly on Visual Studio cl.exe available for different platforms. But any amd64 executable doesn't show any data:

c:\Program Files (x86)\Microsoft Visual Studio 12.0\VC\bin\amd64>d:\Upload\Firefox\libpe-master\Debug\peview.exe  cl.exe
TYPE        : PE32+
IMAGE BASE  : 140000000
ENTRY POINT : 14000C19C ( 0000B59C )

SECTIONS ( 7 ):
  .text           140001000 - 140013A00 ( rsize=76288, vsize=75885 )
  .rdata          140014000 - 140026800 ( rsize=75776, vsize=75698 )
  .data           140027000 - 140028E00 ( rsize=7680, vsize=25112 )
  .pdata          14002E000 - 14002F400 ( rsize=5120, vsize=4704 )
  .tls            140030000 - 140030200 ( rsize=512, vsize=9 )
  .rsrc           140031000 - 140031800 ( rsize=2048, vsize=1772 )
  .reloc          140032000 - 140032C00 ( rsize=3072, vsize=2664 )

IMPORT TABLE ( 0 ) [140025588]:

c:\Program Files (x86)\Microsoft Visual Studio 12.0\VC\bin\amd64>

Do you have any idea what can be wrong?

ludekvodicka avatar Feb 26 '18 14:02 ludekvodicka

Nope, this library has not been tested for years, i have no idea and i'm not putting any effort in supporting this library to be honest.

evilsocket avatar Feb 26 '18 15:02 evilsocket

Thanks, I fully understand.

I just found another PE/PE+ application which seems to support also PE+ format: https://github.com/YajS/NikPEViewer

ludekvodicka avatar Feb 26 '18 15:02 ludekvodicka

@ludekvodicka Try libpe, it fully supports PE+ https://github.com/jovibor/libpe

jovibor avatar Sep 13 '19 10:09 jovibor

@jovibor can you go spam your projects somewhere else? thanks.

evilsocket avatar Sep 13 '19 11:09 evilsocket