pe: check pe signature
pe: parse image file header