ajkhoury/ApiSet

Stars
115
Rank 305,916 (Top 7 %)
Language
C
License
MIT License
Created almost 5 years ago
Updated almost 5 years ago

ajkhoury/ApiSet

ajkhoury

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

API Set resolver for Windows

ApiSet

API Set resolver written in C. This implementation supports API Set versions V2 to V6.

The intended purpose of this tool is to resolve Windows API Set stub libraries for assisting in reverse engineering forwarded Windows API exports.

I wrote this to quickly resolve API Set libraries on different Windows OSes (Windows 7 - Windows 10 1909).

Usage: apiset.exe ext-some-api-set-library-l1-1-0.dll

Thanks to lucasg for a great starting point for this little project.

ReClassEx

SigMaker-x64

IDA Pro 7 compatible SigMaker plugin

UEFI-Bootkit

A small bootkit which does not rely on x64 assembly.

JetBrains-NASM-Language

Plugin that adds NASM assembly language support for the IntelliJ Platform IDEs

Errata1337

pdbfetch

Fetch PDB symbols directly from Microsoft's symbol servers

LLVM-Build-Windows

Windbg2Struct

Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure

Dude-Loader

Class implementation of PowerLoader injection technique

pubg_internal

IDA_Signsrch-7.0

RemoteCode-Kernel

Simple code generation library developed in C intended for code generation in Kernel mode

CpuInfo

Small user-mode utility for identifying and determining CPU features

IDA_WaitBoxEx-7.0

CertDump

Small utility to dump certificate information from a Portable Executable file.

OpenBSP-MinGW

MakeUSB

Quick program to copy contents directly to a removable device's raw sectors

OOLua

Biggest pain in the ass to generate project files. EVER.

TestDll

unpyclib27

unpyclib updated with opcodes for Python 2.7 (will only work with 2.7 bytecode)

vscode-beautiful-light-theme

IDAPython-DumpTable

Dump tables in IDA

uncompyle-all

Decompile all python bytecode files in a directory recursively using uncompyle2

Schily-Patches

Patches for building Schily Tools for Windows

msbuild-llvm

Fixes a small bug in the LLVM MSBuild targets

TheDiviShun

vscode-beautiful-dark-theme

preprocessor_def_guard

Adds guards for preprocessor definitions.

MakeSpriteFont

MakeSpriteFont edit to add support for TTF files.

partcopy

Bringing back the 'partcopy' standalone program to copy contiguous ranges of raw data between files and/or disks.

ubuntu-kernel

LoL-Uncompress

bochs-clang

Bochs set up to compile using the clang/mingw toolchain

ARRadar

C-Style-To-IDA