PE Explorer [commercial]
Posted: Tue Oct 16, 2007 5:06 pm
PE Explorer
Designed for inspection and editing of Windows executable files, PE Explorer offers powerful static analysis and editing tools for working with EXE, DLL, ActiveX controls, and other executable file formats that run on MS Windows 32-bit platforms.
Whether you are an advanced computer user just wondered what makes an executable file tick, or software developer suffered from hard-to-find program bugs, PE Explorer is the software solution that will make it easy to find the answers.
See what's inside an executable
Customize GUI elements of your favorite Windows programs
Track down what a program accesses and which DLLs are called
Understand the way a program works and interacts
Special support for Delphi applications
Automatic UPX and Upack unpacking
Sometimes you need to look inside of a Windows program or DLL to figure out what's going on. Sometimes you need to inspect the inner workings of your own software, and more importantly, third party applications and libraries for which you do not have source code. PE Explorer is a program for doing just such looking on Windows Portable Executable (PE) files.
PE Explorer allows you to perform static analysis, reveal a lot of information about the function of the executable, and collect as much information about the executable file as possible, without executing it.
Get the Power to Look Inside PE Files
A PE file ("Portable Executable") is the native format of executable binaries (programs, dll's and drivers) for the Microsoft Windows® 9x/NT/2000/XP/CE 32-bit operating systems. PE Explorer can handle a variety of different PE file types: EXE, DLL, SYS, MSSTYLES, CPL, OCX, BPL, DPL, SCR and more (including executable files that run on MS Windows CE platform).
PE Explorer gives you the power to look inside these PE binary files. PE Explorer contains a whole host of powerful analysis and editing tools: PE Header Viewer, Section Editor, Exported/Imported API Function List Viewer, Syntax Lookup, Digital Signature Viewer, Resource Viewer/Editor, Dependency Scanner, and Disassembler.
On top of all that, PE Explorer has one of the best UPX Unpackers built in. The open API allows custom plug-ins to be integrated.
PE Explorer unfolds each header, section and table found in the current PE file to reveal the values stored inside those structures. If you want to write an interface to a DLL without having a documentation at hand, PE Explorer Disassembler is the solution.
With PE Explorer you can view, edit and repair the internal structures of PE files with the click of a button. Use it for serious development projects, for restoring lost information, for keeping damaged files intact, to reverse engineer projects with missing source code, to view the imports/exports of the standard dll's, or to simply reduce the numerous internal information sources of PE files into a more convenient viewing format.
The possibilities are up to you. PE Explorer gives you an easy to use point and click approach from which to operate.
PE Explorer: Features & Benefits
Convenience was and is our number one design goal when developing PE Explorer. IT professionals worldwide choose PE Explorer for exceptional file analysis and robust editing tools. There are many benefits to using PE Explorer, but here is a top 5 list of the most powerful advantages for you:
Enjoy the comfort of being able to have all the necessary tools in one simple, clean interface.
It is easy and fun for new users to get started with digging into any executable.
An important and widely recognized one is its stability. Works very well, reasonable price, combined they equal a stunning value.
PE Explorer opens problem EXE files that the other programs don't. PE Explorer takes care of the things the other programs don't cover. Your choice.
FREE upgrade to PE Explorer version 2.00 when it is released.
Not only is our feature list impressive, PE Explorer has many different uses and substantially improves software quality and increase productivity for Windows developers.
GENERAL FEATURES
exe, dll, sys, drv, win32
All details about the binary are collected without executing the file. Automatically unpacks and decompresses files packed with UPX, NSPack or WinUpack. You can work with damaged files (e.g. compressed files). If opening a file produces an error, PE Explorer opens that file in Safe mode.
ADVANCED FEATURES
Visual Resource Viewer and Editor is one of the most convenient, safe and easy-to-use resource editors available for Windows.
Exported/Imported Function List Viewers provide you with the information on entry points, numbers, names, and calling syntax of exported and imported functions.
* Quick Function Syntax Lookup displays the calling syntax for the found functions.
* Digital Signature Viewer lets you view a certificate-based digital signature of an executable file, validate the identity of the software publisher, and verify that the signature is valid and has been applied properly.
* Peeks inside Delphi applications and edit the properties of controls on Delphi forms within the file.
* Makes it easy to diagnose file problems, analyze, repair and restore the damaged section headers settings of PE files, examine PE file headers and correct checksums, repair damaged resources.
* Application Manifest Wizard helps your legacy applications take advantage of the new common control styles and appearances featured in Windows XP and Vista, and mark them with a requested execution level on Vista.
POWER CODER TOOLS
PE Explorer Disassembler reconstructs the assembly language source code of target files. The output of strings found in the binary gives you a good knowledge of what some of the functions and subroutines called by this binary are.
* Dependency Scanner helps you learn the minimum set of DLL files required for the EXE file to load and run.
* Automatic unmangling of C++ external entity names and exported symbols back to human-readable names.
* Strips the various types of information (Debug Information and Relocations) stored in the file.
* TimeDate Stamp Adjuster modifies all the TimeDate Stamps to one uniform value.
With those features, you have plenty of reasons to want to include PE Explorer in your toolbox.
Executable File Forensics
PE Explorer is a great tool for analyzing what procedures and libraries an executable uses without ever activating the executable itself - a great advantage over debuggers where malicious code needs to be run to be analyzed.
PE Explorer will let you open up any .exe, .dll, or .ocx file and plunge right into the belly of the program. Once inside, file structure can be analyzed, problems diagnosed, changes made and resources repaired.
Visual Resource Editor
PE Explorer offers one of the most convenient, safe and easy-to-use resource editors available for Windows. Visual editing features let you quickly view, extract, modify, rebuild, delete, customize, or translate executable file resources from within the file without having to write any scripts. Dialog boxes, menus, string tables, icons, typelib and more are right at your fingertips. The only product that can work with PNG, embedded XML manifest files, and Image Lists
* Rebrand your applications by replacing icons and logos
* Customize GUI elements of your favorite Windows programs
* Translate third party applications
* Extract images, icons, sounds, animations
* Inject application manifests into the executable files
PE Explorer is also available as a resource-only edition! If you want to edit resources only but don't need debugging functionality, Resource Tuner is the right product for you. Resource Tuner is available for $39.95 only.
Win32 PE Disassembler
The PE Explorer disassembler is designed to be easy to use compared with other disassemblers. If your daily work involves reverse engineering of software and exploiting code, source code reviews, testing and evaluation of vulnerabilities, PE Explorer will save you hours of time!
The disassembler utilizes a qualitative algorithm designed to reconstruct the assembly language source code of target files with the highest degree of accuracy possible.
Digital Signature Viewer
PE Explorer examines the signature block and obtain the developer's public key from the certificate. Then PE Explorer decrypts the message digest with the public key, and the same hash algorithm that was used to create the message digest is run on the code again, to create a second message digest (Real File Hash). Then PE Explorer compares the second digest (Real File Hash) to the original (Signed File Hash).
Quick DLL Function Syntax Lookup
Say good bye to digging through bloated help files and slogging through multiple archive volumes just to hash out an API reference. Now, when reviewing functions with the Imports, Exports and Delay Imports viewers, clicking a function entry instantly displays the calling syntax for that function. Dealing with a Delphi file? It will show you imported function prototypes in Pascal syntax! Parameters, return values, calling conventions are conveniently displayed for you in the window below. Double clicking an entry launches Syntax Description DLL Editor for adding comments or changing details.
Debug Software Problems
PE Explorer is simply made to order for those who have a broken program. Programmers and support technicians can use PE Explorer to find out what went astray. Pinpoint vulnerabilities through source code analysis, test and validate your applications in development, facilitate lifecycle collaboration between development and operations.
Ever witnessed an application crash? Run into program problems? PE Explorer's Section Editor lets you facilitate a solution to these problems such as lost original values of sections' offsets to real data in the file or broken sections' characteristics.
Dependency Scanner
The Dependency Scanner tool allows you to recursively scan all modules statically linked to by a particular PE file and view a list of the files that are required for an application to run or for a DLL to load. Dependency Scanner also shows missing modules and detects delay-load dependencies.
Unpacking Malicious Software
PE Explorer ships with the UPX, Upack, and NSPack Unpacker plug-ins for unpacking files compressed with UPX, Upack, and NSPack. The plug-ins check whether your file is packed with UPX, NSPack or WinUpack, and then uncompress it automatically.
The Unpacker plug-ins re-create an executable file in its original form, before it was packed. This allows you to perform static analysis on the now unpacked data.
The UPX Unpacker plug-in works on packed malware executables and can handle a file even if it has been packed with UPX and modified manually so that UPX cannot be used directly to unpack the file.
PE Explorer runs on all versions of Windows from 95 through Server 2003 and Vista.
Minimum hardware requirements:
ntel Pentium® or AMD K5 processor with 166 MHz
16 MB RAM
15 MB free hard disk space
Users working with large file sizes will benefit from system requirements that exceed those listed above. This will ensure a faster disassembling.
Personal License: $129.00
Business License: $199.00
Free Upgrade to version 2 when released
30 Day Trial Available
Designed for inspection and editing of Windows executable files, PE Explorer offers powerful static analysis and editing tools for working with EXE, DLL, ActiveX controls, and other executable file formats that run on MS Windows 32-bit platforms.
Whether you are an advanced computer user just wondered what makes an executable file tick, or software developer suffered from hard-to-find program bugs, PE Explorer is the software solution that will make it easy to find the answers.
See what's inside an executable
Customize GUI elements of your favorite Windows programs
Track down what a program accesses and which DLLs are called
Understand the way a program works and interacts
Special support for Delphi applications
Automatic UPX and Upack unpacking
Sometimes you need to look inside of a Windows program or DLL to figure out what's going on. Sometimes you need to inspect the inner workings of your own software, and more importantly, third party applications and libraries for which you do not have source code. PE Explorer is a program for doing just such looking on Windows Portable Executable (PE) files.
PE Explorer allows you to perform static analysis, reveal a lot of information about the function of the executable, and collect as much information about the executable file as possible, without executing it.
Get the Power to Look Inside PE Files
A PE file ("Portable Executable") is the native format of executable binaries (programs, dll's and drivers) for the Microsoft Windows® 9x/NT/2000/XP/CE 32-bit operating systems. PE Explorer can handle a variety of different PE file types: EXE, DLL, SYS, MSSTYLES, CPL, OCX, BPL, DPL, SCR and more (including executable files that run on MS Windows CE platform).
PE Explorer gives you the power to look inside these PE binary files. PE Explorer contains a whole host of powerful analysis and editing tools: PE Header Viewer, Section Editor, Exported/Imported API Function List Viewer, Syntax Lookup, Digital Signature Viewer, Resource Viewer/Editor, Dependency Scanner, and Disassembler.
On top of all that, PE Explorer has one of the best UPX Unpackers built in. The open API allows custom plug-ins to be integrated.
PE Explorer unfolds each header, section and table found in the current PE file to reveal the values stored inside those structures. If you want to write an interface to a DLL without having a documentation at hand, PE Explorer Disassembler is the solution.
With PE Explorer you can view, edit and repair the internal structures of PE files with the click of a button. Use it for serious development projects, for restoring lost information, for keeping damaged files intact, to reverse engineer projects with missing source code, to view the imports/exports of the standard dll's, or to simply reduce the numerous internal information sources of PE files into a more convenient viewing format.
The possibilities are up to you. PE Explorer gives you an easy to use point and click approach from which to operate.
PE Explorer: Features & Benefits
Convenience was and is our number one design goal when developing PE Explorer. IT professionals worldwide choose PE Explorer for exceptional file analysis and robust editing tools. There are many benefits to using PE Explorer, but here is a top 5 list of the most powerful advantages for you:
Enjoy the comfort of being able to have all the necessary tools in one simple, clean interface.
It is easy and fun for new users to get started with digging into any executable.
An important and widely recognized one is its stability. Works very well, reasonable price, combined they equal a stunning value.
PE Explorer opens problem EXE files that the other programs don't. PE Explorer takes care of the things the other programs don't cover. Your choice.
FREE upgrade to PE Explorer version 2.00 when it is released.
Not only is our feature list impressive, PE Explorer has many different uses and substantially improves software quality and increase productivity for Windows developers.
GENERAL FEATURES
exe, dll, sys, drv, win32
All details about the binary are collected without executing the file. Automatically unpacks and decompresses files packed with UPX, NSPack or WinUpack. You can work with damaged files (e.g. compressed files). If opening a file produces an error, PE Explorer opens that file in Safe mode.
ADVANCED FEATURES
Visual Resource Viewer and Editor is one of the most convenient, safe and easy-to-use resource editors available for Windows.
Exported/Imported Function List Viewers provide you with the information on entry points, numbers, names, and calling syntax of exported and imported functions.
* Quick Function Syntax Lookup displays the calling syntax for the found functions.
* Digital Signature Viewer lets you view a certificate-based digital signature of an executable file, validate the identity of the software publisher, and verify that the signature is valid and has been applied properly.
* Peeks inside Delphi applications and edit the properties of controls on Delphi forms within the file.
* Makes it easy to diagnose file problems, analyze, repair and restore the damaged section headers settings of PE files, examine PE file headers and correct checksums, repair damaged resources.
* Application Manifest Wizard helps your legacy applications take advantage of the new common control styles and appearances featured in Windows XP and Vista, and mark them with a requested execution level on Vista.
POWER CODER TOOLS
PE Explorer Disassembler reconstructs the assembly language source code of target files. The output of strings found in the binary gives you a good knowledge of what some of the functions and subroutines called by this binary are.
* Dependency Scanner helps you learn the minimum set of DLL files required for the EXE file to load and run.
* Automatic unmangling of C++ external entity names and exported symbols back to human-readable names.
* Strips the various types of information (Debug Information and Relocations) stored in the file.
* TimeDate Stamp Adjuster modifies all the TimeDate Stamps to one uniform value.
With those features, you have plenty of reasons to want to include PE Explorer in your toolbox.
Executable File Forensics
PE Explorer is a great tool for analyzing what procedures and libraries an executable uses without ever activating the executable itself - a great advantage over debuggers where malicious code needs to be run to be analyzed.
PE Explorer will let you open up any .exe, .dll, or .ocx file and plunge right into the belly of the program. Once inside, file structure can be analyzed, problems diagnosed, changes made and resources repaired.
Visual Resource Editor
PE Explorer offers one of the most convenient, safe and easy-to-use resource editors available for Windows. Visual editing features let you quickly view, extract, modify, rebuild, delete, customize, or translate executable file resources from within the file without having to write any scripts. Dialog boxes, menus, string tables, icons, typelib and more are right at your fingertips. The only product that can work with PNG, embedded XML manifest files, and Image Lists
* Rebrand your applications by replacing icons and logos
* Customize GUI elements of your favorite Windows programs
* Translate third party applications
* Extract images, icons, sounds, animations
* Inject application manifests into the executable files
PE Explorer is also available as a resource-only edition! If you want to edit resources only but don't need debugging functionality, Resource Tuner is the right product for you. Resource Tuner is available for $39.95 only.
Win32 PE Disassembler
The PE Explorer disassembler is designed to be easy to use compared with other disassemblers. If your daily work involves reverse engineering of software and exploiting code, source code reviews, testing and evaluation of vulnerabilities, PE Explorer will save you hours of time!
The disassembler utilizes a qualitative algorithm designed to reconstruct the assembly language source code of target files with the highest degree of accuracy possible.
Digital Signature Viewer
PE Explorer examines the signature block and obtain the developer's public key from the certificate. Then PE Explorer decrypts the message digest with the public key, and the same hash algorithm that was used to create the message digest is run on the code again, to create a second message digest (Real File Hash). Then PE Explorer compares the second digest (Real File Hash) to the original (Signed File Hash).
Quick DLL Function Syntax Lookup
Say good bye to digging through bloated help files and slogging through multiple archive volumes just to hash out an API reference. Now, when reviewing functions with the Imports, Exports and Delay Imports viewers, clicking a function entry instantly displays the calling syntax for that function. Dealing with a Delphi file? It will show you imported function prototypes in Pascal syntax! Parameters, return values, calling conventions are conveniently displayed for you in the window below. Double clicking an entry launches Syntax Description DLL Editor for adding comments or changing details.
Debug Software Problems
PE Explorer is simply made to order for those who have a broken program. Programmers and support technicians can use PE Explorer to find out what went astray. Pinpoint vulnerabilities through source code analysis, test and validate your applications in development, facilitate lifecycle collaboration between development and operations.
Ever witnessed an application crash? Run into program problems? PE Explorer's Section Editor lets you facilitate a solution to these problems such as lost original values of sections' offsets to real data in the file or broken sections' characteristics.
Dependency Scanner
The Dependency Scanner tool allows you to recursively scan all modules statically linked to by a particular PE file and view a list of the files that are required for an application to run or for a DLL to load. Dependency Scanner also shows missing modules and detects delay-load dependencies.
Unpacking Malicious Software
PE Explorer ships with the UPX, Upack, and NSPack Unpacker plug-ins for unpacking files compressed with UPX, Upack, and NSPack. The plug-ins check whether your file is packed with UPX, NSPack or WinUpack, and then uncompress it automatically.
The Unpacker plug-ins re-create an executable file in its original form, before it was packed. This allows you to perform static analysis on the now unpacked data.
The UPX Unpacker plug-in works on packed malware executables and can handle a file even if it has been packed with UPX and modified manually so that UPX cannot be used directly to unpack the file.
PE Explorer runs on all versions of Windows from 95 through Server 2003 and Vista.
Minimum hardware requirements:
ntel Pentium® or AMD K5 processor with 166 MHz
16 MB RAM
15 MB free hard disk space
Users working with large file sizes will benefit from system requirements that exceed those listed above. This will ensure a faster disassembling.
Personal License: $129.00
Business License: $199.00
Free Upgrade to version 2 when released
30 Day Trial Available