C# Tutorials - Herong's Tutorial Examples - v3.31, by Dr. Herong Yang
CLR Based PE (Portable Executable) Files
This section provides a tutorial example on how to use the .NET Intermediate Language disassembler to view PE headers and CLR headers of the executable files generated by the .NET C# compiler.
Once a CLR based PE file is opened in the .NET IL Disassembler, we can view its headers:
1. Open HelloCLR.exe in .NET IL Disassembler.
2. Click "Headers" > "View" in the menu. You will see headers of HelloCLR.exe displayed in a text window:
----- DOS Header: Magic: 0x5a4d Bytes on last page: 0x0090 Pages in file: 0x0003 Relocations: 0x0000 Size of header (paragraphs):0x0004 ... ----- COFF/PE Headers: Signature: 0x00004550 ----- COFF Header: Machine: 0x014c Number of sections: 0x0003 Time-date stamp: 0x4cf95b45 ... ----- PE Optional Header (32 bit): Magic: 0x010b Major linker version: 0x08 Minor linker version: 0x00 Size of code: 0x00000400 ... ----- CLR Header: Header size: 0x00000048 Major runtime version: 0x0002 Minor runtime version: 0x0005 ...
The PE header and the CLR header shows that HelloCLR.exe is a PE file and requires CLR to execute.
Table of Contents