Files
ghost/ghost-core
Adir Shitrit b8a17f910f Add PE parser module with IAT hook detection
- Implemented comprehensive PE parsing utilities
- Added IAT (Import Address Table) parsing from memory and disk
- Implemented IAT hook detection by comparing memory vs disk
- Added data directory and import descriptor parsing
- Helper functions for reading PE structures
- Cross-platform compilation support with Windows-specific code
- Support for both 32-bit and 64-bit PE files

Generated with [Claude Code](https://claude.com/claude-code)
2025-11-21 00:45:22 +02:00
..