-
Here is code,
```cpp
size_t v_size = 0;
LPCTSTR pe_path = "C:\\windows\\notepad.exe";
BYTE* my_pe = peconv::load_pe_executable(pe_path, v_size);
if (!my_pe) {
return -1…
-
Hi there, Ron here.
Jak sie masz?
Great work hasherezade.. girl power.
### scan own working set
When your pe-sieve (static lib) is used to scan the process it is embedded in (current process), t…
-
Hello hasherezade,
I believe there's a bug in libpeconv where a malware that doesn't have any relocation blocks returns the status: -1 in pe-sieve (with /jlvl 2) and thus is not processed.
I f…
-
any idea ??
ghost updated
2 years ago
-
Hello, hasherezade! I'm not sure if it's right place for this question, but still...
I tried to use your tool as it intended to be used. 2 dll dumped from memory are successfully converted. But 1 o…
-
I tried including both `peconv.h` and compiled `libpeconv.lib` but I keep getting linker errors. Did I miss something?
-
I try to use with Fedora 33 Linux distro.
this is the result of build ... without Uses library: PE-sieve (the DLL version).
```
[ 96%] Building CXX object CMakeFiles/hollows_hunter.dir/util/suspe…
-
Hi there,
I am trying to load a DLL from a byte array with the load_pe_module function. I tried replicating the methods in https://github.com/hasherezade/libpeconv/blob/master/tests/test_load_ntdll.…
-
I am trying to cross-build libpeconv (and eventually pe-sieve) on a Debian/buster system using
`x86_64-w64-mingw32-g++ (GCC) 8.3-win32 20190406` and am getting the following error:
```
$WORK/libpec…
hillu updated
4 years ago
-
I found another `reinterpret_cast`-related compile error when cross-building with `x86_64-w64-mingw32-g++ (GCC) 8.3-win32 20190406`:
```
$WORK/libpeconv/src/exports_lookup.cpp: In function ‘INT_PT…
hillu updated
4 years ago