PE-duck

A simple PE file parser.

Usage

Usage: pe <PE_EXEC>

Output

PE file (supports EXE and DLL, both 32 and 64 bit)

• DOS Header
• NT Header
  • File Header
    • Verbose Machine and Characteristics
    • Symbols (Pending)
  • Optional Header (32 and 64 bit)
    • Verbose Subsystem and DllCharacteristics
    • Data Directories
      • DLL Exports from IMAGE_DIRECTORY_ENTRY_EXPORT (the DLL is not loaded, RVA translation is performed)
      • DLL Imports from IMAGE_DIRECTORY_ENTRY_IMPORT (32 and 64 bit)
• Section Headers
  • Verbose Characteristics

Build

Compile using MSVC compiler: CL pe.c /Fe"pe.exe"