PeStudio shows details about applications (.exe, .dll, .cpl, ocx, .ax, .sys, etc.) without starting them including:
All libraries that are used by an application.
All functions that are imported by an application.
All functions (also anonymous) that are exported by an application.
All functions that are forwarded to other libraries.
Obsolete Functions that are exported and imported by an application.
Whether the Data Execution Prevention (DEP) Windows security mechanism is used.
Whether the Address Space Layout Randomization (ASLR) Windows security mechanism is used.
Whether Structured Exception Handling - SEH Windows security mechanism is used.
Whether some sections are compressed.
License: Freeware
What's new: >> Added support of Forwarded functions discovery
Corrected Bug when reading the Resources of some images
Added Resources to the Report
Detect invalid directoires
Added filtering of Sections
Added support for Delay-loaded Libraries
Improved performance by reading dependencies from memory whenever possible
Added Core .NET information to the Report
Added Manifest to the Report
Put more details to Libraries into the Report
Put more details to Sections into the Report
Added Imported Symbols to the Report
Added Exported Symbols to the Report
Added File Header to the Report
Added Exported Symbols in Report
Added Sections in Report
Handle Imported Libraries without version information
Corrected missing path on some Imported libraries
Icon of the image sometimes not shown when PeStudio is started from the command prompt.
Distinguish between .NET and native images when gathering Evidences
Add discovery of the Directories for x64 Images
Corrected a bug when dragging an Image onto PeStudio
Resolved "Visual C++ Runtime Error"
http://www.winitor.com/