A blazing fast 🔥 PE Parser written in Rust
The main goals of pe-parser
is to write something suitable for a PE Loader.
Currently no, but it wouldn't be too difficult to add from the current backbone.
As long as the PE conforms to the standard outlined in Microsoft's documentation, it should read fine. Malformed PEs would likely run into issues of either returning an error or misreading data.
- COFF Header
- Optional Header
- Data Directories
- Section Tables/Headers
- COFF Relocations
- COFF Line Numbers
- COFF Symbol Table
- COFF String Table
- Certificate Table
- Delay-Load Import Table
- .debug Section
- .drectve Section
- .edata Section
- .idata Section
- .pdata Section
- .reloc Section
- .tls Section
- Load Config Structure
- .rsrc Section
- .cormeta Section
- .sxdata Section