如何在内存中加载DLL

windows

内存加载

需积分: 13 14 下载量 91 浏览量更新于2023-05-21 评论收藏 248KB PDF 举报

身份认证购VIP最低享 7 折!

领优惠券(最高得80元）

试读

17页

首先介绍了windows PE文件格式，然后在此基础上，阐述了windows系统是如何加DLL的，最后描述了在内存中加载DLL的方法

资源详情

资源评论

资源推荐

Loading a DLL from memory
This tutorial describes a technique how a dynamic link library (DLL) can be loaded from memory without storing it on
the hard-disk first.
Overview
The default windows API functions to load external libraries into a program (LoadLibrary, LoadLibraryEx) only work
with files on the filesystem. It’s therefore impossible to load a DLL from memory. But sometimes, you need exactly this
functionality (e.g. you don’t want to distribute a lot of files or want to make disassembling harder). Common
workarounds for this problems are to write the DLL into a temporary file first and import it from there. When the
program terminates, the temporary file gets deleted.
In this tutorial, I will describe first, how DLL files are structured and will present some code that can be used to load a
DLL completely from memory – without storing on the disk first.
Windows executables – the PE format
Most windows binaries that can contain executable code (.exe, .dll, .sys) share a common file format that consists of
the following parts:
enter keyword...
Go
Categories
Development
spreed
Uncategorized
Links
Bugtracker
fancy.code
github
spreed.com
Wishlist
amazon.com
amazon.de
~magog/public
random::entropy
Home About me Projects Tutorials Disclaimer
Subscribe to RSS Feed
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD

DOS header
DOS stub
PE header
Section header
Section 1
Section 2
. . .
Section n
All structures given below can be found in the header file winnt.h.
DOS header / stub
The DOS header is only used for backwards compatibility. It precedes the DOS stub that normally just displays an
error message about the program not being able to be run from DOS mode.
Microsoft defines the DOS header as follows:
typedef struct _IMAGE_DOS_HEADER {      // DOS .EXE header 
    WORD   e_magic;                     // Magic number 
    WORD   e_cblp;                      // Bytes on last page of file 
    WORD   e_cp;                        // Pages in file 
    WORD   e_crlc;                      // Relocations 
    WORD   e_cparhdr;                   // Size of header in paragraphs 
    WORD   e_minalloc;                  // Minimum extra paragraphs needed 
    WORD   e_maxalloc;                  // Maximum extra paragraphs needed 
    WORD   e_ss;                        // Initial (relative) SS value 
Paypal
Archives
April 2012
March 2011
January 2011
November 2010
October 2010
August 2010
May 2010
April 2010
Meta
Log in
Entries RSS
Comments RSS
WordPress.org
Create PDF in your applications with the Pdfcrowd HTML to PDF API PDFCROWD