readpe1
Displays information about pe files
Usage
readpe [OPTIONS] ...
pefile
Overview
readpe can read and display all PE file headers, fields and values. It's part of pev, the PE file analysis toolkit.
pefile is a PE32/PE32+ executable or dynamic linked library file.
Options
-
-A, --all -
Full output (default).
-
-H, --all-headers -
Show all PE headers.
-
-S, --all-sections -
Show PE section headers.
-
-f, --format <text|csv|xml|html> -
Change output format (default: text).
-
-d, --dirs -
Show data directories.
-
-h, --header <dos|coff|optional> -
Show specific header. It can be used multiple times.
-
-i, --imports -
Show imported functions.
-
-e, --exports -
Show exported functions.
-
-V, --version -
Show version.
-
--help -
Show this help.
Examples
Display the Optional file header of putty.exe:
-
$ readpe -h optional putty.exe
Display data directories and exported functions of cards.dll:
-
$ readpe -de cards.dll
Display all possible information about svchost.exe file:
-
$ readpe svchost.exe
Releases
4 releases since Debian 10 (Buster); the text changed 2 times.