Skip to content

A small and portable 32/64 bit C code to get windows API address without calling any API

License

Notifications You must be signed in to change notification settings

mp81ss/get_api_address

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

ARCHIVED - Moved to gitlab

This mini-library allows to retrieve API address in loaded modules without calling standard API GetProcAddress.

Usually this code is found in assembly-written malware to avoid detection and to bypass other PE-format restrictions on functions export.

This code is written in C with some extension to the standard specification and can be compiled in both 32-bit and 64-bit without modifying anything.

Actually VisualStudio and Digitalmars compiler support this code.

The code just export a single api:

FARPROC get_api_address(LPCSTR name, LPCVOID its_page, LPCVOID* found_page);

See code for technical details

All this code is released in public domain

About

A small and portable 32/64 bit C code to get windows API address without calling any API

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages