flat assembler
Message board for the users of flat assembler.
Index
> Projects and Ideas > [FASM] No Imports Macro |
Author |
|
JohnFound 05 Dec 2011, 22:09
If I understand you correctly, you are talking about loading .dll dynamically in runtime.
So, It is matter of API calls. In Windows it is GetProcAddress and LoadLibrary API functions. To use macro in order to replace one easy API call is strange and dirty solution IMHO. What you actually want to achieve with this solution? |
|||
05 Dec 2011, 22:09 |
|
sphaaz 05 Dec 2011, 22:25
What i want to achieve is type of api call obfuscation, so calls i make with specific command dont get into imports table but get loaded dinamically...
If there is a better method im all ears |
|||
05 Dec 2011, 22:25 |
|
JohnFound 05 Dec 2011, 22:56
As I already said, you need to import directly only two functions from kernel32.dll - "LoadLibrary" and "GetProcAddress". Then use them with simple: invoke GetProcAddress, [dll_handle], strFunctionName
You simply do not need to develop new macros for this task. |
|||
05 Dec 2011, 22:56 |
|
AsmGuru62 06 Dec 2011, 16:05
If the obfuscation is a target of this exercise, how exactly it will work? If in debugger we simply can load a module with the API names and set a breakpoint onto an API entry (which returned by GetProcAddress) and debugger will stop there.
|
|||
06 Dec 2011, 16:05 |
|
< Last Thread | Next Thread > |
Forum Rules:
|
Copyright © 1999-2024, Tomasz Grysztar. Also on GitHub, YouTube.
Website powered by rwasa.