secretsquirrel/SigThief ? reverse-engineered prompt

Build me a simple Python command line tool for Windows PE files that lets a security tester work with embedded code signing data for research. I want to be able to point it at a signed executable, detect whether a signature blob is present, rip that signature out and save it to disk, append that saved signature or a signature taken from another signed PE onto a target PE, and also remove an existing signature by truncating it and fixing the certificate table entry. The tool should make it clear that this does not create a real valid signature, it only copies the signature data so people can test how antivirus or other products react.

Please keep it straightforward, one script is fine, with clear help text and simple flags for input file, target file, output file, signature file, check signature, rip, add, and truncate. Include a few example commands in the README and basic guardrails so it is obviously for defensive security testing and AV research. Look up current PE format docs online if you need to.