PE (Portable Executable) binary format parser.

Medium-agnostic: accepts raw &[u8] bytes from any source — disk file, memory dump page, AFF4 stream, network capture, or carved fragment.

Quick start

use exec_pe_core::{parse_pe, PeFile};

let bytes = std::fs::read("rbcw.exe").unwrap();
let pe = parse_pe(&bytes).expect("valid PE");
println!("machine: {:#06x}", pe.machine);
println!("imports: {:?}", pe.imports);