dllimport


Replacing the Import Table in PE file by standart LoadLibrary


I have an executable (PE) file that load a dll file as represented in the Import table...
let say:
PEFile.exe
Modules.dll
my question is how can i remove Modules.dll's import_descriptor from the imports and do its work by loadLibrary without the rely on the import table and without destroy the file???...
My bigger problem his i could not understand exactly how the Import thing works...
after the loader read the information he needs to do the import's thing, i believe he use the LoadLibrary, GetProcAddress APIs...
but i couldn't understated what he doing with the pointers he get...
he putting them somewhere in memory... and then what just call them?!?
all the papers i found in the net explain the structure of the import table,
but i didn't found a paper that explain how it is really work and get used...
i hope you cold understand my Gibberish English...
Thank you!
Well, you will need code that can do PE file surgery.
You can investigate this library. I've never used it myself. The code I wrote for this purpose years ago is not available.
For the specific matter at hand, most likely you can remove the import table entry. Post-editing the object code, on the other hand, to call LoadLibrary, and then use the results would be a major feat of manual reassembly. Unless you have a good deal of expertise with assembly-level programming and all the calling conventions I wouldn't recommend it.

Related Links

Mangled member function name different during dllimport
how to use DllImport in metro-style app
Converting doc file to post script
How can I get a COM component which can be used on Windows phone 8 project with C#
Externs and DLL imports
Mixed native and managed code heap corruption
MarshalDirectiveException
call unmanaged C++ code from C# using pinvoke
Detecting DLL Code Splicing
WOW64 Redirection and LoadLibrary
Using C# dll in Windows phone 7
Python 2.5 Import dll AttributeError
Replacing the Import Table in PE file by standart LoadLibrary
Unresolved external symbol
Declare and <DllImport> in VB.NET have different results
how to import/export dll and use its function

Categories

HOME
cygwin
grok
azure-stream-analytics
google-cloud-platform
developer-tools
twig
flex
mysql-workbench
jwplayer
google-cloud-datalab
mvc5
banner
opengl-es-3.0
shared-libraries
flash-player
esoteric-languages
job-scheduling
microsoft-dynamics-nav
html5-appcache
soci
cgbitmapcontext
php-mysqlidb
jboss6.x
stackexchange
motion-detection
linked-data
gitlab-api
aws-codecommit
record
jbutton
playstation-portable
spring-security4
clickjacking
nested-lists
html-encode
slacktextviewcontroller
apic
google-knowledge-graph
git-rewrite-history
flatmap
filesystemwatcher
loading
mongoose-schema
comparison-operators
stringtokenizer
watchface
congestion-control
file-sharing
drupal-theming
show-hide
monkey-testing
pom.xml
magento-2.0.7
serde
java-bytecode-asm
cup
taocp
autosar
file-uri
i386
dimension
cycle2
assertion
dllimport
pypiserver
lazybones
wso2greg
cwrsync
osc
mass-assignment
delayed-execution
showdialog
webfinger
create.js
angular-carousel
grails-domain-class
functional-java
winginx
wxformbuilder
dsym
scriptaculous
mt4j
gd-graph
http-patch
code-duplication
cocoalibspotify-2.0
observium
gpars
route-provider
http-status-code-410
redis-py
pstack
jquery-blockui
dajaxice
correlated-subquery
boost-signals
usertype
virtualpathprovider
node-redis
entitydatasource
xui
luajava
drupal-fivestar
addchild
zend-rest
dsl-tools
change-management

Resources

Database Users
RDBMS discuss
Database Dev&Adm
javascript
java
csharp
php
android
javascript
java
csharp
php
python
android
jquery
ruby
ios
html
Mobile App
Mobile App
Mobile App