A forum for reverse engineering, OS internals and malware analysis 

Ask your beginner questions here.
 #31999  by WhoPMi
 Thu Aug 16, 2018 8:50 pm
Okay, this is a static linking, but i want a dynamic linking.

Thanks.
 #32000  by Vrtule
 Thu Aug 16, 2018 10:10 pm
Okay, this is a static linking, but i want a dynamic linking.
It is still a dynamic linking but the system does it at driver load time.

As far as I know, there is nothing like GetProcAddress in kernel. However, this is not a big issue, since you can find exported functions manually (or find a code that does that).

Absence of LoadLibrary is a bigger issue. You can also load your DLL manually but the consequences might not be desirable for your case:
* the system does not know about the loaded DLL which restricts it from using some APIs (notify routines, registry callbacks, DPCs...) or makes their usage quite difficult,
* other drivers won't see the loaded DLL,
* you must be very careful since somebody can modify your DLL (if it is stored on disk).
 #32002  by EP_X0FF
 Fri Aug 17, 2018 8:13 am
This feature is not for general usage. What do you want to do and why you need this dlls in kernel mode, is a top and priority question.
 #32006  by Vrtule
 Sat Aug 18, 2018 3:03 pm
So? .-.
So, what problem are you trying to solve? There is possibly a way other than export drivers.