library for importing functions from dlls in a hidden, reverse engineer unfriendly way
A modern, mostly zero-allocation C++23 library for working with low-level Windows within user-space. Iteration over loaded modules via PEB, EAT iteration, lazy imports, syscalls, and more.
Library containing Anti-RE and Anti-Debug methods.
POC of a better implementation of GetProcAddress for ntdll using binary search
Lazy Import technique implementation to call any import in the runtime
Debugger checks in 3 ways
Header-only library that can execute functions in a shared library and provides wrappers around these
GetProcAddress implementation in C# walking the PEB using only NtReadVirtualMemory
Inject DLL
Custom implementations of WinAPI functions GetProcAddress and GetModuleHandle by traversing low level Windows data structures.
A small and portable 32/64 bit C code to get windows API address without calling any API
POC of module enumeration through stack walking
Custom GetModuleHandle and GetProcAddress implementation without calling the Windows API
Minimal, source-buildable repro showing GetProcAddress fails to resolve an export by name when the Export Name Pointer Table (ENPT) is unsorted, while the same export still resolves by ordinal. Stock MSVC + Python only, Includes full provenance manifest.
To associate your repository with the getprocaddress topic, visit your repo's landing page and select "manage topics."