Loading system and loading method for DLL (Dynamic Link Library) file

A dynamic link library and file loading technology, applied in the field of communication, can solve problems such as difficult to block and difficult to achieve module concealment, and achieve the effect of concealment

Inactive Publication Date: 2017-01-18
WUHAN DOUYU NETWORK TECH CO LTD
View PDF2 Cites 14 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] By calling the system LoadLibrary function, it is easy to enumerate the DLL modules loaded in the application process through the method of module scanning, but for those who want to hide the modules, it is difficult to achieve the concealment of the modules, and it is difficult to prevent the automation of the Windows system Test(API) detected the existence of this dynamic link library file

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Loading system and loading method for DLL (Dynamic Link Library) file
  • Loading system and loading method for DLL (Dynamic Link Library) file
  • Loading system and loading method for DLL (Dynamic Link Library) file

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0035] The present invention will be described in further detail below in conjunction with the accompanying drawings and embodiments.

[0036] see figure 1 As shown, the embodiment of the present invention provides a method for loading a dynamic link library file, a loading system of a dynamic link library file, including: a read-write module 1, and the read-write module 1 is used to read the dynamic link library file into In memory; Analysis module 2, described analysis module 2 is used for analyzing the file header of dynamic link library file, judges whether the file of analysis is a legal dynamic link library file; Relocation module 3, described relocation module 3 is used for Obtain the address of its relocation table by the format of dynamic link library file, according to the address of relocation table, relocation item is relocated; Import address table filling module 4, described import address table filling module 4 is used for by dynamic link library The format of ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a loading system for a DLL (Dynamic Link Library) file and relates to the technical field of communication. The loading system comprises a read-write module, a resolving module, a re-positioning module, an address table-loading filling module and an inlet function execution module, wherein the read-write module is used for reading the DLL file into a memory; the resolving module is used for resolving a file header of the DLL file and judging whether the DLL file is a legal DLL file or not; the re-positioning module is used for acquiring the address of the re-positioning table through a format of the DLL file, and re-positioning the re-positioning items according to the address of the re-positioning table; the address table-loading filling module is used for acquiring the loaded address table through the format of the DDL file, and filling a real address of a to-be-loaded function; and the inlet function execution module is used for acquiring an inlet function through the formation of the DLL file, and executing the inlet function. The invention discloses a method for loading the DLL file based on the loading system for the DLL file.

Description

technical field [0001] The invention relates to the technical field of communication, in particular to a loading system and a loading method of a dynamic link library file. Background technique [0002] A dynamic link library file (DLL) is a type of executable file (PE file) on a Windows system, such as an EXE file. The DLL file cannot run independently, but is loaded into the application process through the dynamic linker of the Windows system during the running process of the process corresponding to the DLL file so that it can run. The method of displaying and loading the DLL in the application is generally to load a certain DLL file into the application process by calling the LoadLibrary function. [0003] By calling the system LoadLibrary function, it is easy to enumerate the DLL modules loaded in the application process through the method of module scanning, but for those who want to hide the modules, it is difficult to achieve the concealment of the modules, and it i...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F9/445
CPCG06F9/44521
Inventor 杨亮
Owner WUHAN DOUYU NETWORK TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap