taviso/loadlibrary

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

4501 stars · 392 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A library that lets native Linux programs load and call functions from Windows DLLs via a custom PE/COFF loader with a dlopen-like API. It includes a demonstration port of the Windows Defender malware scanning engine (mpengine) to Linux.

Use cases

• run windows dll on linux
• fuzz windows antivirus engine on linux
• scan files with windows defender engine on linux
• load and call windows library functions from linux program
• debug windows dll code with gdb on linux
• hook and patch windows dll at runtime
• scale up fuzzing of self-contained windows libraries in containers

When to choose

• You need to fuzz or analyze self-contained Windows libraries (codecs, decompressors, virus scanners, image decoders) on Linux without a Windows VM
• You want to run the Windows Defender mpengine scanner natively on Linux for malware research or scanning
• You need gdb debugging, ASAN/Valgrind support, or runtime hooking while testing Windows binary code on Linux

When to avoid

• You need to run full Windows applications with GUIs or complex OS dependencies rather than self-contained DLLs
• You want a general-purpose Windows compatibility layer like Wine for running end-user software
• Your target DLL requires many unimplemented Windows API imports and you cannot write the stubs yourself

Facets

library · maturity active

reverse-engineering fuzzing security parser security reverse-engineering developer-tools windows cpp pe-loader dll-compatibility windows-dll binary-compatibility malware-analysis antivirus gdb-debugging hooking linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="taviso/loadlibrary")