Thread: Loading a DLL from memory

Okay, so this issue is confusing me.

Does anybody know of a way to load an dll file from memory?

What I am trying to accomplish is storing the plugin for my server on the hard drive in an encrypted form. Then I could load the file where the encrypted data is stored into memory and decrypt it. That way the decrypt version would never exist on the disk.

I found something that does almost exactly what I want at http://www.joachim-bauch.de/tutorial...l-from-memory/
But it only works using FILE classes and is rather stick with winapi, not to mention it throws an error at the end.

Does anybody have any ideas or source?

What do you mean it only works using FILE classes?
From what i see, you can just read your encrypted dll to say a byte *(malloc'd or whatever you use) then decrypt it and pass it to MemoryLoadLibrary

pseudocode

Code:

  HANDLE hFile =   CreateFile(_T("yourfile.ext"),GENERIC_READ,FILE_SHARE_READ,NULL,OPEN_EXISTING,FILE_ATTRIBUTE_NORMAL,0);

  DWORD dwSizeofFile = GetFileSize(hFile,NULL);

  byte *lpMem = (byte *)malloc(dwSizeofFile);

  ReadFile_To_ByteArray(lpMem);

  Decrypt_Bytes(lpMem);

  void *lpLibraryMem = MemoryLoadLibrary(lpMem);
  /* do things with lpLibraryMem such as walk the EAT or call GetProcAddress, and free the mem once you are done with it*/

You must spread some Reputation around before giving it to mjrod5 again.

I gave reputation?

Originally Posted by Lost One

I gave reputation?

you make me lol everytime with your statements. xD

Executer, you are confusing me...

Originally Posted by Lost One

Executer, you are confusing me...

What he said was the message the forum gave him when he tried giving me some rep

Did you ever try what i told you?

Oh yeah lol. Sorry I forgot to reply.
It worked fine with you way. My problem was I tried to read the file to a char[] instead of a BYTE[] lol

Originally Posted by Lost One

Oh yeah lol. Sorry I forgot to reply.
It worked fine with you way. My problem was I tried to read the file to a char[] instead of a BYTE[] lol

Lol glad it worked out
btw get on msn more often

I'm on almost every night. Be more nocturnal...