Dissecting managed PE file (EXE or DLL)

Hell all,

I m just curious to know whether there is any tools/utilities through which
I can open a managed EXE file and see such details as PE hader, .text and
idata section, CLR header, IL, Metadata etc. while ILASM can only show
manifests and IL code, i wonder how one can see sections like .text and
.section contained inside a managed PE file.

thanks
pradeep_tp

pradeepTP
Sun Jan 15 00:22:02 CST 2006


my apologies for making spelling mistake in the word "Hello". "Hell" should
read "Hello". I wish there was some means of editing the posts here.

"pradeep_TP" wrote:

> Hell all,
>
> I m just curious to know whether there is any tools/utilities through which
> I can open a managed EXE file and see such details as PE hader, .text and
> idata section, CLR header, IL, Metadata etc. while ILASM can only show
> manifests and IL code, i wonder how one can see sections like .text and
> .section contained inside a managed PE file.
>
> thanks
> pradeep_tp

Lloyd
Sun Jan 15 04:29:27 CST 2006

ildasm, in the SDK
or Reflector: http://www.aisto.com/roeder/dotnet/

"pradeep_TP" <pradeepTP@discussions.microsoft.com> wrote in message
news:B17E2C69-15EE-4977-A9DC-626BF64F16D7@microsoft.com...
> Hell all,
>
> I m just curious to know whether there is any tools/utilities through
> which
> I can open a managed EXE file and see such details as PE hader, .text and
> idata section, CLR header, IL, Metadata etc. while ILASM can only show
> manifests and IL code, i wonder how one can see sections like .text and
> .section contained inside a managed PE file.
>
> thanks
> pradeep_tp

Marcus
Sun Jan 15 05:36:36 CST 2006

pradeep_TP wrote:
> Hell all,
>
> I m just curious to know whether there is any tools/utilities through which
> I can open a managed EXE file and see such details as PE hader, .text and
> idata section, CLR header, IL, Metadata etc. while ILASM can only show
> manifests and IL code, i wonder how one can see sections like .text and
> .section contained inside a managed PE file.
>
> thanks
> pradeep_tp
Check out PE Explorer - http://www.heaventools.com. Not free, but works well with managed files.
Marcus

Mattias
Sun Jan 15 07:51:22 CST 2006

>I m just curious to know whether there is any tools/utilities through which
>I can open a managed EXE file and see such details as PE hader, .text and
>idata section, CLR header, IL, Metadata etc. while ILASM can only show
>manifests and IL code, i wonder how one can see sections like .text and
>.section contained inside a managed PE file.

One that I came across recently is CFF Explorer at
http://pmode.net/CFF.php. I haven't actually tried it yet but it looks
promising and it's free.

Remotesoft has a similar tool at
http://www.remotesoft.com/dotexplorer/index.html

Dumpbin.exe included with the Platform SDK and VS may also be useful.


Mattias

--
Mattias Sjögren [C# MVP] mattias @ mvps.org
http://www.msjogren.net/dotnet/ | http://www.dotnetinterop.com
Please reply only to the newsgroup.