PE info
Read a Windows PE/EXE/DLL header: machine, timestamp, subsystem, entry point, sections and imported DLL names. No disassembly.
PE info reads a Windows PE file's MZ and PE headers, machine type, link timestamp, subsystem and entry point address, plus every section's offsets. It lists DLL names from the import table, capped at 500. A missing MZ signature, or a bad e_lfanew offset or PE signature, is refused at that step. Nothing here is disassembled.
Questions
What header fields does it show?
Machine type, link timestamp, subsystem, entry point address, and the PE32 or PE32+ optional header format.
What does the section list show?
Each section's name, virtual address and size, and raw file offset and size.
How many imports does it list?
Up to 500 DLL names from the import table; beyond that it stops rather than listing more.
What if the file has no MZ signature?
The tool refuses it as not a PE file outright.
What if there is no import table?
It reports that as a statically linked, packed or minimal/synthetic PE rather than treating it as an error.
Does it disassemble any code?
No, only headers, sections and import names are read; no instructions are decoded.
Compare
| Tool | Runs on the CLI | Live as you type |
|---|---|---|
| PE info | Yes | No |
| Mach-O info | Yes | No |
| MBR / GPT partitions | Yes | No |