DreamLoader Reborn
A tiny PE (x86 + x64) loader in pure Assembly.
![[Image: oDQYH1c.png]](https://i.imgur.com/oDQYH1c.png)
Source Code:
Features:
* Simple cross-platform PE loader compatible with both x86 and x64 in a single execution path
* Supports both Intel 386 (PE32) and AMD64 (PE32+) Portable Executable files
* Works with files that have or don't have an import table
* Works with files that have or don't have a reloc table
* Uses CRCs instead of API names/strings to reduce code size and hide imports
* Extremely small size with clever hybrid x86/x64 opcode tricks
* (NEW) Complete rewrite/refactor from scratch for better readability
* (NEW) Fixed bug: kernel32 base was incorrectly resolving to ntdll.dll on 64-bit
* (NEW) Corrected DllBase offset calculation (for both architectures)
* (NEW) Cleaner platform detection and stack handling
* (NEW) Improved comments and structure
Credits:
Original Author: hh86
Improved By: Kap0ne
A tiny PE (x86 + x64) loader in pure Assembly.
Source Code:
🔒 Content Locked
You must reply to this thread to unlock the content, or Upgrade your account here for instant access.
Features:
* Simple cross-platform PE loader compatible with both x86 and x64 in a single execution path
* Supports both Intel 386 (PE32) and AMD64 (PE32+) Portable Executable files
* Works with files that have or don't have an import table
* Works with files that have or don't have a reloc table
* Uses CRCs instead of API names/strings to reduce code size and hide imports
* Extremely small size with clever hybrid x86/x64 opcode tricks
* (NEW) Complete rewrite/refactor from scratch for better readability
* (NEW) Fixed bug: kernel32 base was incorrectly resolving to ntdll.dll on 64-bit
* (NEW) Corrected DllBase offset calculation (for both architectures)
* (NEW) Cleaner platform detection and stack handling
* (NEW) Improved comments and structure
Credits:
Original Author: hh86
Improved By: Kap0ne