PE-duck

A simple PE file parser.

Usage

Usage: pe <PE_EXEC>

Output

PE file (supports EXE and DLL, both 32 and 64 bit)

DOS Header
NT Header
- File Header
  - Verbose Machine and Characteristics
  - Symbols (Pending)
- Optional Header (32 and 64 bit)
  - Verbose Subsystem and DllCharacteristics
  - Data Directories
    - DLL Exports from IMAGE_DIRECTORY_ENTRY_EXPORT (the DLL is not loaded, RVA translation is performed)
    - DLL Imports from IMAGE_DIRECTORY_ENTRY_IMPORT (32 and 64 bit)
Section Headers
- Verbose Characteristics

Build

Compile using MSVC compiler: CL pe.c /Fe"pe.exe"