Show the structure of portable executable (PE) files under the Windows family of operating systems.
Before watch what inside PE file we should install requirements:
python -m pip install -r requirements.txt
And now we can look for treasure in our helloworld.exe:
py peguide.py bins\C\HelloWorld.exe
- --headers - show only headers with its descrition
- --sections - show only row data of sections (binary, hex and printable symbols)
- --tables show only tables if they exist (import, export)
- --help show help message
Working with extentions:
- .EXE: PE32, PE32+
- .DLL unstable
- .ACM unstable
- .SYS
- .DVR unstable
- other ones doesn't tested or doesn't have supporting at all.