SIHH exhibitors member, the top watch brands in the industry with both Patek Philippe, Breguet under a high Vacheron Constantin, Audemars Piguet and Lange, and Van Cleef & Arpels and Piaget are replica watches the watchmaking and jewelry Aesthetics combined leader. On the rolex replica technical strength and the movement of manufacturing skills, few brand par with the replica watches Jaeger-LeCoultre, Parmigiani control technology to meet the people and minority tastes worldwide; Panerai and IWC as omega replica Richemont contribution classic flagship models, whether or Portugal Lumior series, table fans are replica rolex in the advanced stage of difficulty neglected works.

Portable Executable Inspector

Portable Executable Inspector is a professional software that was developed in order to make the internal structure of executables more obvious for interested users. While there is already a lot of software available for working with PE files, most of them are lacking of a feature to display their extracted values in a context, so that the user knows where the actual information is coming from. Portable Executable Inspector does not only show the user all the attributes and details about the executable, but also where this information was extracted from. Besides that PE Inspector offers useful features such as an advanced Hex View and Editor Window, Data Directories listing, Sections overview, Import/Export Manager, embedded resources and a detailed description for every byte in the file.

The application is written with Microsoft Silverlight, so regardless of the users operating system everybody can use Portable Executable Inspector in his browser. From there he has the option to install it onto the local harddrive for access without internet. The only requirement is an installed Silverlight plugin.

Start Screen

On the start screen a file could be selected to be analyzed. Optionally a file could be dropped onto the shaded area. For simple demonstrations there are two example files embedded.

Parsing Progress

Portable Executable Inspector performs different steps of parsing. The current progress is displayed for the user, since large files could take some time until they are completly parsed.

Main Window

Main Window that displays the most important information. On the left side there is a tree view that shows the different logical sections of the file. On the right there is a HEX editor and viewer to display the file's content.

Selection

Selected tree nodes are highlighted in the tree view as well as in the HEX view. A user can click directly into the HEX view and the corresponding node in the tree view is selected. This feature makes it especially easy to understand the function of each byte in the file.

Element information

On the left of the application there is a docked window which offers detailed information about the selected item. In the above image the field "Characteristics" from the "PE File Header" is an enumeration. Besides the current value, also other possible values together with descriptions are displayed.

Display Format

Every value in the file originates from an array of bytes. For every property there is a default format, which displays the value in the best way. Nevertheless the user has the option to change the format at any time.

Data Directories

Every portable executable contains data directories. These directories are groupes that contain specific data. Not every executable has to contain every directory. But if it contains a directory PE Inspector tells the user the address and size of that directory.

Section Headers

Data Directories are grouped into sections. The exactly position of these sections is described in the so called "section headers". Besides the actual address PE Inspector offers other useful information about the section.

Export Table

Executables can contain code that is intended to be consumed by other executables. Such executables are called Dynamic Link Library (DLLs). PE Inspector shows which symbols are exported and thus available for other executables.

Imports

Executables can use code from other modules. Which functions are used and from which module they come from could be seen in the Imports Window.

Resources

Often executables have resources embedded into the file. These resources could be identified and displayed in their raw structure as the above image shows.

Demonstration Video