dllimport


Replacing the Import Table in PE file by standart LoadLibrary


I have an executable (PE) file that load a dll file as represented in the Import table...
let say:
PEFile.exe
Modules.dll
my question is how can i remove Modules.dll's import_descriptor from the imports and do its work by loadLibrary without the rely on the import table and without destroy the file???...
My bigger problem his i could not understand exactly how the Import thing works...
after the loader read the information he needs to do the import's thing, i believe he use the LoadLibrary, GetProcAddress APIs...
but i couldn't understated what he doing with the pointers he get...
he putting them somewhere in memory... and then what just call them?!?
all the papers i found in the net explain the structure of the import table,
but i didn't found a paper that explain how it is really work and get used...
i hope you cold understand my Gibberish English...
Thank you!
Well, you will need code that can do PE file surgery.
You can investigate this library. I've never used it myself. The code I wrote for this purpose years ago is not available.
For the specific matter at hand, most likely you can remove the import table entry. Post-editing the object code, on the other hand, to call LoadLibrary, and then use the results would be a major feat of manual reassembly. Unless you have a good deal of expertise with assembly-level programming and all the calling conventions I wouldn't recommend it.

Related Links

Cannot create automation object - lotusscript
DllImport is not found C++
Mangled member function name different during dllimport
how to use DllImport in metro-style app
Converting doc file to post script
How can I get a COM component which can be used on Windows phone 8 project with C#
Externs and DLL imports
Mixed native and managed code heap corruption
MarshalDirectiveException
call unmanaged C++ code from C# using pinvoke
Detecting DLL Code Splicing
WOW64 Redirection and LoadLibrary
Using C# dll in Windows phone 7
Python 2.5 Import dll AttributeError
Replacing the Import Table in PE file by standart LoadLibrary
Unresolved external symbol

Categories

HOME
phantom-dsl
cobalt
android-studio-2.2
case
components
sitecore
telegram-bot
babeljs
python-multithreading
data-visualization
p2p
jquery-ui-sortable
openbugs
frequency-distribution
plink
coin3d
keytool
aws-sdk
wolframalpha
git-extensions
mapstruct
breadth-first-search
qliksense
onload
surveymonkey
bulletphysics
exchangewebservices
ceylon
tizen-tv
jaws
mql
scrollview
aws-codecommit
zend-debugger
glib
memory-address
spring-security4
android-maps-extensions
fiware-cygnus
roblox
playframework-2.1
reactivekit
sim-card
bc
comparison-operators
xv6
apriori
contract
show-hide
stylecop
getchar
clarifai
robomongo
facebook-pixel
rserve
wpas
check-mk
payload
rxtx
mongodb-php
lean
stream-processing
createprocess
nupic
jparsec
asyncdisplaykit
relativelayout
custom-errors
fuelcms
zen-cart
typemock
google-refine
shopizer
cross-join
rapidsvn
angular-gettext
jbake
ghcjs
easyrtc
nsmenu
mdichild
memset
vsx
koala
conditionaltagsupport
android-icons
pagedown
server-administration
cascadingdropdown
mysql-error-2013
qtconcurrent
wcf-configuration
objectquery
ilasm
promotion-code
instantiationexception
facebook-iframe
object-database
hbm2java
technical-debt
business-model
ifilter

Resources

Mobile Apps Dev
Database Users
javascript
java
csharp
php
android
MS Developer
developer works
python
ios
c
html
jquery
RDBMS discuss
Cloud Virtualization
Database Dev&Adm
javascript
java
csharp
php
python
android
jquery
ruby
ios
html
Mobile App
Mobile App
Mobile App