Updated Readme

README.md

@@ -13,25 +13,40 @@ Print information from a Windows CE PE header.
                            overrides --json option
   -h, --help               print help
   -v, --version            print version information
+  -b, --basic              print only WCEApp, WCEArch and WCEVersion
 
 Examples:
   wcepeinfo f.exe     Print information about file f.exe.
-  wcepeinfo -j f.exe  Print JSON formatted information about file f.exe.  
+  wcepeinfo -j f.exe  Print JSON formatted information about file f.exe.
 ```
 ### Example: JSON output
 ```bash
-wcepeinfo -j file.exe
+$ wcepeinfo -j file.exe
 ```
 
 ### Example: Single field output
 ```bash
-wcepeinfo -f MachineName file.exe
-```
-example output:
-```
+$ wcepeinfo -f WCEArch file.exe
 ARM
 ```
 
+## Useful fields
+Using the -b option prints the 3 most useful fields for identifying Windows CE software
+
+ - **WCEApp** - Indicates whether this is a Windows CE Binary, based on architecture and subsystem. Not 100% reliable for early Windows CE apps.
+ - **WCEArch** - Architecture, can be one of: "MIPS", "SH3", "SH4", "ARM", "X86"
+ - **WCEVersion** - Windows CE Core version, usually one of: "1.0", "1.01", "2.0", "2.01", "2.10", "2.11", "2.12", "3.0", "4.0", "4.10", "4.20", "5.0", "6.0", "7.0", "8.0"
+
+ Example:
+ ```bash
+$ wcepeinfo -b ./htmledit.exe
+WCEApp: 1
+WCEVersion: 2.0
+WCEArch: SH3
+ ```
+
+ DLL imports are visible when using the -j option
+
 ## JSON Output
 The tool outputs formatted JSON when used with the -j tag, ideal for being used in JS/TS apps.