A forum for reverse engineering, OS internals and malware analysis 

Forum for discussion about user-mode development.
 #12785  by gb_master
 Wed Apr 18, 2012 6:56 pm
Hello KernelMode guys,
this is my first post and I want to introduce to you my custom implementation of the LoadLibrary function. I know there are already a lot of re-implementation of this, but there was always something missing in them, i.e. forwarding functions support, the new-coming MinWin framework, ecc...
Probably this implementation contains a lot of bugs, but it has worked until now. You can find the source code at https://github.com/gbmaster/loadLibrary. It is very easy to use, as it is very similar to the original API. It minimizes the use of strings: in fact it is hash-oriented. Please notify every single bug you find in the code.

Don't forget to follow my blog too at http://gbmaster.wordpress.com.

Catch ya.
 #12819  by EP_X0FF
 Fri Apr 20, 2012 11:38 am
Hello,

what is the advantages of your reimplementation of this routine?
lot of re-implementation of this
Not simple lot of them - hundreds of them, including leaked Windows code. So it looks for me like reinventing the wheel.
 #12826  by gb_master
 Fri Apr 20, 2012 6:25 pm
Not really a lot of advantages indeed. It was just an excuse for me to work with the PE format and to explore it. The only differences from the other re-implementations I've found on the Internet are the support for shared sections, the support for forwarded functions and a very rough support for MinWin.

It has never been meant to be something like "the definitive reimplementation"... just an exercise for me :). And probably, yes, I re-invented the wheel :? .