Abstract: An executable file in Windows operating system is usually a PE (Portable Executable) format file. It can be analyzed by some ways. We take a PE file as a subject, and detailedly analyze its structure. We further devise and realize a 32bit PE file analyzer. It can analyze PE format of an executable file, including its MSDOS head, PE header, import and export tables, resource table, etc. It lays the foundation for file split, bundled Trojan, cracked program, encryption and decryption, etc.

Key words: Visual Studio2010, Windows system, PE file, PE analyzer, 32 bits