To view the contents of a PE file gadget--clipeviewer

Clipeviewer is a WinForm applet written by Lao Liu, which can be used to view various structures in a managed PE file. Currently there are many programs that can view PE information, support. NET also has. However, the biggest difference between clipeviewer and them is that this small program is more concerned about the authenticity of the content of a PE file, especially for each structure in the file, each field, in addition to displaying its value, also shows its offset in the PE file and raw data.

Frankly speaking, Clipeviewer has not finished. Features that are missing include the IL instruction, the definition of the Managed method (method header, exception handling block, and so on), and the parsing of the metadata signature. The reason for the release of this immature version is because old Liu can't afford to wait. In 2005, Lao Liu began to learn the managed PE file format and Il language, and had the idea to write such a program, and even wrote the most original version of the program.

2006, for a variety of reasons, the matter was put down. In 2007 years, after a lot of leisure time, and then put this stall picked up. In 2008, Lao Liu was pleasantly surprised to find that since. NET 2.0, no matter how the CLR progressed, the programming language evolved, but the underlying meta data structures did not seem to have changed, and the ECMA-335 standard remained in the June 2006 version. So old Liu found this matter has a piece of work, determined to make a mess.

Not long ago, read some C # 4.0 of the information, more determined this view. All the new features in C # 4.0 are already available in the. NET 2.0 era, but have not been reflected in the upper language.

From 2005 to 2009, not short, the results of a decent version also did not write out. Has opened more than 10 projects, the name has also been changed 5, 6 times, the final is nothing. At present this clipeviewer is my most satisfactory version, is also intends to continue to follow up the version. Old Liu feel can't wait, wait until oneself satisfied,. NET is probably a historical relic.

The Code of this program (NB of many negative sentences) is bad enough, but simple enough, but a lot. So there's no source code, and if you're really interested, you can use. NET reflector peeping.

Behind old Liu may continue to revise this version, also could not overturn again. But old Liu promised to do includes: 1 write a common point of the XML file, describe the PE file structure, so that everyone (including Lao Liu himself) can write code generator to generate the definition of the file structure. 2 Let AndersLiu.CliPe.dll as much as possible for the third party to use. 3 Write some articles about PE file format.

The following screenshot is served.