PE Information

Previous pageReturn to chapter overviewNext page


The PE Information expert enables you to examine the contents of a Portable Executable (PE) file.  Almost all Win32 EXEs and DLLs are PE format files.  Many other files are also PE files, such as Borland/CodeGear packages (DPL/BPL), Active X controls (OCX), etc.  This expert supports IDE docking and drag and drop of files from Windows Explorer.


PE Information


To view the contents of a PE format file, click the Open button and select the file or drag and drop a file from your file manager.  There are five tabs in the expert as follows:


MS-DOS Header: All windows programs contain the MS-DOS header, sometimes referred to as the MS-DOS stub.


PE Header: The portable executable header contains data such as what machine the binary is targeted for (Intel 0x86, AMD x64, Alpha, MIPS, etc.).


PE Optional Header: Contrary to its name, this header is required in PE files.  It contains information regarding the subsystem required, the version number of the OS required, etc.


Imports: This section contains a list of all files required by this file to run, including Borland packages.  Selecting a file will cause a list of all functions imported from the selected file to appear.


Exports: Exported functions are the ones that are made publicly available for other applications call.  This tab is mostly of use when examining DLLs or packages.


Note: This tool can detect 64-bit binaries, but will not be able to read all of the data from them (imports, exports, etc.).