readpe

Display information about PE executable files

TLDR

Display all information about a PE file
$ readpe path/to/executable
Display all headers in a PE file
$ readpe --all-headers path/to/executable
Display all sections in a PE file
$ readpe --all-sections path/to/executable
Display a specific header (dos, coff, optional)
$ readpe --header dos path/to/executable
List all imported functions
$ readpe --imports path/to/executable
List all exported functions
$ readpe --exports path/to/executable

SYNOPSIS

readpe [options] file

DESCRIPTION

readpe displays information about PE (Portable Executable) files, the executable format used by Windows. It can analyze headers, sections, imports, and exports from EXE, DLL, and other PE files.This tool is useful for binary analysis, reverse engineering, and understanding executable structure.

PARAMETERS

--all-headers

Display all headers present in the PE file
--all-sections
Display all sections in the PE file
--header type
Display specific header (dos, coff, optional)
--imports
List imported functions
--exports
List exported functions

INSTALL

sudo apt install readpe
sudo apk add pev
sudo zypper install readpe
brew install readpe
nix profile install nixpkgs#pev

CAVEATS

Only works with valid PE format files. Malformed or corrupted PE files may not parse correctly.

HISTORY

Part of pev, the PE file analysis toolkit for Unix-like systems.

SEE ALSO

objdump(1), readelf(1), file(1)