# Getting version from PE executables

**URL:** <https://www.ruby-forum.com/t/getting-version-from-pe-executables/178289>\
**Category:** Ruby\
**Created:** [November 2, 2009, 7:20am UTC](https://www.ruby-forum.com/t/getting-version-from-pe-executables/178289 "2009-11-02T07:20:50Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![fmk](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/f/ad7895/32.png) [@fmk](https://www.ruby-forum.com/u/fmk)\
**Post date:** [November 2, 2009, 7:20am UTC](https://www.ruby-forum.com/t/getting-version-from-pe-executables/178289/1 "2009-11-02T07:20:50Z")

</div>

Hi.

I’m trying to get file version from EXE or DLL files, writing a ruby  
script (to run it in Linux).

My code is:

fd = File.open(ARGV[0], “rb”)  
size = File.size(fd)

# signature VS\_VERSION\_INFO

sig = [ ?V, ?S, ?_, ?V, ?E, ?R, ?S, ?I, ?O, ?N,  
?_, ?I, ?N, ?F, ?O, ]

fd.pos=0  
data=fd.read(size)  
offset = data.find(sig)  
puts offset # =\> #Enumerable::Enumerator:0x7fe4fa164e28

I can’t understand it. I’ve tried to do it in the same way of this  
Python script (using pack and unpack), but without success too:

def getVersion(file):  
sig = struct.pack(“32s”, u"VS\_VERSION\_INFO".encode(“utf-16-le”))  
try:  
data = open(file).read()  
except IOError:  
return “Unknown”  
offset = data.find(sig)  
if offset == -1:  
return “Unknown”

```
data = data[offset + 32 : offset + 32 + (13*4)]
version_struct = struct.unpack("13I", data)
ver_ms, ver_ls = version_struct[4], version_struct[5]
return "%d.%d.%d.%d" % (ver_ls & 0x0000ffff, (ver_ms & 0xffff0000)

```

> > 16,  
> > ver\_ms & 0x0000ffff, (ver\_ls & 0xffff0000)
> 
> > 1.

Any ideas to do it?