PEguide

Show the structure of portable executable (PE) files under the Windows family of operating systems.

About

Before watch what inside PE file we should install requirements:

python -m pip install -r requirements.txt

And now we can look for treasure in our helloworld.exe:

py peguide.py bins\C\HelloWorld.exe

Options

• --headers - show only headers with its descrition
• --sections - show only row data of sections (binary, hex and printable symbols)
• --tables show only tables if they exist (import, export)
• --help show help message

Extentions

Working with extentions:

• .EXE: PE32, PE32+
• .DLL unstable
• .ACM unstable
• .SYS
• .DVR unstable
• other ones doesn't tested or doesn't have supporting at all.