NoVirusThanks PE Export Viewer is a lightweight system utility designed to analyze Portable Executable (PE) files, such as executable applications (.exe), dynamic-link libraries (.dll), and system drivers (.sys). Developed by the Italian cybersecurity firm NoVirusThanks, the tool is primary hosted and maintained under their unified Appsvoid software portfolio.
The software serves as a diagnostic tool for developers, reverse engineers, and malware analysts who need to inspect how binary files interact with the operating system and other modules. Core Features
Export & Import Inspection: It extracts and displays the comprehensive list of functions that a binary exports (makes available to other files) and imports (calls upon from exterior Windows libraries).
Forwarded Functions Identification: The utility flags “Forwarded Functions”—routines within the PE file that act as redirects to call an API hosted inside entirely different modules.
Function Name Decoding: It provides exact function names alongside their host module name, and automatically decodes “mangled” or decorated names typically generated during compilation.
Detailed Reporting: Users can export the analyzed data to a structured, local text log file for further static analysis.
Command-Line Integration: Beyond its graphical interface, it supports command line variables like /saveto, allowing users to automate the parsing of /exports or /imports from a specified /module directly into a custom log file. Technical Design & Requirements
Zero Dependencies: The application operates without requiring the .NET Framework or external operating system packages.
User Privileges: It runs safely on Windows NT-based operating systems without needing Administrative or elevated user privileges.
Lightweight Footprint: As is standard with most Appsvoid system utilities, it features a highly responsive, single-window user interface meant to provide critical data quickly without taxing system resources. Availability
While originally released as standalone freeware, the utility is now distributed via the Appsvoid Software Platform. Instead of being sold individually, it is part of an affordable annual subscription bundle that grants access to over 24 specialized Windows utilities (such as Connections Viewer and MD5 Checksum Tool).
If you are looking to integrate this tool into a specific workflow, please let me know:
If you intend to use the Graphical User Interface (GUI) or automate it via the Command-Line Interface (CLI)
The specific types of files you are trying to analyze (e.g., system drivers or software DLLs)
I can provide the exact command-line syntax or manual extraction steps to match your goal. Imports with PE Export Viewer – Appsvoid
Leave a Reply