Skip to content

Latest commit

 

History

History
14 lines (10 loc) · 627 Bytes

README.md

File metadata and controls

14 lines (10 loc) · 627 Bytes

pe-image-for-delphi

This is Delphi library to work with Portable Executable Image files. The main purpose is to make parsing image structures of 32/64 bit image easy. Now it can parse most used things, like: sections, imports, exports, resources and tls.

Also it can write image, but that was not primary goal.

ToDo:

  • There must be introduced sparsed/paged virtual memory concept (just like Windows does) Currently all section data is loaded into memory. Some virus samples tested can crash loading because of using too big virtual address range. With normal compiler generated images you won't have such problem.