I was reading through the second chapter of Advanced .NET Debugging and didn't manage to find the entry point of an executable. I wrote this web application so that a) I could understand more about the PE format and b) I wouldn't have to repeat the same basic math each time I wanted to inspect a .NET DLL.
Portable Executable CLR Vieweris a hex viewer for.NETbinaries.
At the moment it's fairly limited and only highlights:
- The bitness (
x86vsx64) - The entry point
Relative Virtual Address(search forRVAin the PE format) - The CLI flags
- The targeted
CLRversion
If you feel adventurous you can try the hosted version.
Fair warning: this is probably the ugliest web app in the world 😹.
This is very much a work in progress. If I manage to motivate myself I'll work on the cards listed in this public Trello board.
If you would like to inspect a proprietary binary I advise you to run locally (the app is self-contained). You'll need:
Then run the following commands one by one:
yarn install yarn startEach push to main triggers a GitHub Actions workflow and a deployment to Azure Static Web Apps.