Skip to content

Commit 76fade4

Browse files
committed
assets
1 parent 5a50262 commit 76fade4

File tree

2 files changed

+31
-1
lines changed

2 files changed

+31
-1
lines changed

.assets/loadthatpe_demo.png

400 KB
Loading

README.md

Lines changed: 31 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,32 @@
11
# LoadThatPE
2-
A simple PE Loader tool that loads a PE from memory, decrypt it, resolve its imports, relocate its sections, and redefine its entry point to execute seamlessly from memory
2+
3+
![LoadThatPE](.assets/loadthatpe_demo.png)
4+
5+
> A simple PE Loader tool that loads a PE from memory, decrypt it, resolve its imports, relocate its sections, and redefine its entry point to execute seamlessly from memory.
6+
7+
## 🚀 Features
8+
9+
- **In-memory decryption**: Decrypts and loads PE files directly from memory.
10+
- **Imports resolution**: Dynamically resolves imports even for complex executables.
11+
- **Section relocation**: Updates section locations based on adjusted memory offsets.
12+
- **Flexible entry point redirection**: Executes the PE with its redefined entry point.
13+
14+
> **⚠️ Disclaimer:**
15+
This tool is strictly for **educational and research purposes**. Misuse of this tool for malicious or unauthorized activities is strictly prohibited. Respect the laws and ethical guidelines of your jurisdiction.
16+
17+
---
18+
19+
## 🛠️ Installation
20+
21+
### Prerequisites
22+
Make sure you have the following installed:
23+
24+
- `Windows` operating system (recommended for PE file handling).
25+
- `Visual Studio` or `GCC` for compiling the project.
26+
- `C/C++` compiler for maximum performance.
27+
28+
### Clone the Repository
29+
30+
```bash
31+
git clone https://github.com/ProcessusT/LoadThatPE.git
32+
cd LoadThatPE

0 commit comments

Comments
 (0)