WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both 32 (PE) and 64-bit (PE+) platforms.

A stealthy PEB walker for x64 Windows. Demonstrates EDR evasion by manually parsing the PEB via assembly to resolve kernel32.dll base addresses. It bypasses IAT scanners and API hooks, and provides silent memory navigation with WinAPI calls.