libPeConv
A library to load, manipulate, dump PE files.
|
A library to load and manipulate PE files.
The goal of libPEConv was to create a "swiss army knife" for custom loading of PE files. It gathers various helper functions that you can quickly integrate in your own loader. For example: remapping sections, applying relocations, loading imports, parsing resources.
Not only it allows for loading PE files, but also for customizing of some steps, i.e. IAT hooking (by providing custom IAT resolvers), and functions redirection. Yet, it is NOT focused on inline hooking and should not be confused with libraries such as MS Detours or MinHook.
LibPeConv can be used for creating PE binders, as it allows to load a PE directly from the resource, and integrate it as if it was a local code.
As well it can help you in dumping PEs from the memory, and rebuilding their IATs.
The simplest usecase: use libPeConv to manually load and run an EXE of you choice.
See also: https://github.com/hasherezade/libpeconv_tpl/blob/master/project_template/main.cpp