pelook is a comprehensive information tool for Windows EXE, DLL, driver and OBJ files (PE/COFF images).

This tool will be handy for reverse engineers or anyone needing to delve into the internals of Windows PE files. pelook may seem similar to Microsoft's dumpbin tool. However, you'll see that it has many additional features without the unnecessary verbosity of dumpbin. Rather than blindly dumping fields from the various headers and sections that comprise a PE image, pelook is designed to create an intelligent report of only the most useful information from within a compact form without sacrificing readability.

pelook enables you to see the target architecture, dependency DLLs, section list, loader flags, supported .NET framework and version resource all within the same screenful of information all within the same tool.

pelook was initially written for the virtual memory map display and pointer to image-file-offset conversions; two features that the author needed but never found in other PE dumping tools. Pelook combines the most widely used features in these popular tools in addition to other useful features:

Dumpbin - Microsoft's PE/COFF header dump tool
Depends - Microsoft's Dependency Walker imports/exports tool
filever - Microsoft's version information resource dump tool
clrver - Microsoft's CLR version tool (determine .NET Framework version needed for an EXE)

Go to the author site for a full feature list.

  Download