Pe Explorer 64bit Version 2 -

Version 2 introduces forwarder chain resolution. Many 64-bit Windows DLLs (like api-ms-win-core-*) forward exports to other DLLs. PE Explorer now visually traces:

KERNEL32.DLL -> GetCurrentProcessId -> api-ms-win-core-processthreads-l1-1-0.dll -> GetCurrentProcessId

One of PE Explorer’s claims to fame has always been its resource editor (Resource Hacker alternative). Version 2 extends this capability. Editing dialogs, replacing icons, or modifying version information in a 64-bit binary is now a streamlined process. It intelligently handles the increased address space of 64-bit files, ensuring that modifications don't corrupt the file structure.

The most obvious feature in the name is the most crucial one: 64-bit support.

In the past, analyzing a 64-bit executable (x64) often required switching to completely different tools like CFF Explorer or using command-line utilities that lacked a user-friendly interface. PE Explorer v2 brings the familiar, intuitive interface we know and love into the modern era. pe explorer 64bit version 2

Now, you can load up a modern x64 DLL or EXE and navigate the headers, sections, and directories without the tool crashing or throwing a "file not supported" error. It provides a seamless experience whether you are analyzing a legacy 32-bit app or a modern 64-bit system driver.

The original PE Explorer (32-bit) could open 64-bit files, but it did so through a translation layer. This led to several limitations:

PE Explorer 64bit Version 2 solves these natively. Version 2 introduces forwarder chain resolution