Skip to content

Latest commit

 

History

History
24 lines (21 loc) · 1.41 KB

README.md

File metadata and controls

24 lines (21 loc) · 1.41 KB

simple-pe-parser

A simple PE(Portable Executable) parser written in C using WINAPI

This project parses multiple sections of Windows executable data format(PE) for educational purposes. It was purely written in C language with WINAPI. You can build the project with Visual Studio(by "cloning GitHub repository feature". For my case, Visual Studio Community 2022) in a Windows environment, and easily modify or suggest(by pull request) new stuff to the project!

Which sections can be parsed?

  • DOS Header
  • Rich header (and the interpretation of @comp.Id values)
  • NT Header (file and optional headers, for both 32-bit and 64-bit architecture)
  • NT File Directory Header
  • NT File Section Header
  • NT IAT(Import Address Table)
  • NT Export Directory
  • NT EAT(Export Function Table)
  • Relocation table (.reloc)

(Feel free to contribute to this project to parse more information from more parts of PE format/fix incorrectly parsed sections in this project/...!)

Preview

image image image image image