PE Internals

PE Internals is a lightweight and portable software application that enables you to decompile executable files to view and search for hexadecimal, Unicode and ANSI strings.

Since installation is not a prerequisite, you can drop the executable file anywhere on the hard disk and just click it to run.

There is also the possibility of saving PE Internals to a USB flash disk or similar storage unit, in order to run it on any PC with minimum effort and no previous installers.

What's more important is that the Windows registry does not get updated with new entries, and no extra files are created on the disk, leaving it clean after removal.

The interface is based on a regular window with an intuitive structure, where you can open an EXE, DLL or SYS file using either the file browser or drag-and-drop support.

You can view the headers and content, use a search function for Ansi, Unicode and hex code, toggle the viewing mode between file offset, view offset, relative virtual address, and virtual address. It is possible to edit font properties (e.g. size, type) and change the colors for text, text background, selected text background, modified text, and links. Settings can be restored to default.

PE Internals runs on a very low quantity of CPU and RAM, so it does not affect the overall performance of the computer. It is very responsive to commands and works well, without causing the OS to hang, crash or pop up error dialogs. We have not come across any issues throughout our evaluation. PE Internals serves its purpose.