re-format-pe

What it does: - Reads the structure of Windows executable and library files to find where code starts, what functions are imported, and where special startup code runs - Identifies packing and protection by looking at the import table and special sections - Maps memory addresses to file locations so you can find code and data - Finds callbacks that run before the main program starts When to use it: - You have a Windows exe or dll file and need to understand its structure - You want to find where the program entry point is or where initialization code runs - You need to map a memory address back to a location in the file - Do not use it for Linux or Mac programs