WinAPI Search 1.0.5.0
|
Author:
Dennis Babkin
Date: 11/09/2022 Size: 7 MB License: Freeware Requires: 11|10|8|7 Downloads: 5232 times 
TIP:
Click Here to Repair orRestore Missing Windows Files |
 Download (ZIP) Download@MajorGeeks Download@MajorGeeks
|
MajorGeeks: Setting the standard for editor-tested, trusted, and secure downloads since 2001. |
Avast Free Antivirus Worried about finance scams?Get free antivirus with AI-powered online scam detection Download Free!
WinAPI Search is a portable app designed to search for Win32 functions by name and locate errors and development issues.
It will primarily be of use to Windows developers, researchers, and reverse malware engineers. WinAPI Search will seek out PE binary files. Various filters can be applied to expedite the search like Bitness 32/64 Bit, API sets/Umbrella libraries, and PE header subsystem, among many others.
WinAPI Search also supports search by Regular expressions (Regexp).
WinAPI Search Features:
Search single or multiple binary PE files by Win32 function name.
Support for Regular Expressions in search strings.
Search for specific PE files using the following filters:
-Search only in export table, import table, or "delay load" import table of the PE headers.
-Ability to differentiate between C and C++ functions, as well as among ordinal function names and export table forwarded functions.
-Support for API-Sets or Windows "umbrella" libraries.
-Search by certain PE header subsystem, such as boot application, console application, GUI application, native application, EFI driver, EFI ROM, Win9x, POSIX or OS/2 subsystem, Windows CE or Xbox subsystem, etc.
-Search by certain PE header characteristics, such as the use of ASLR, App Container, Control Flow Guard, Data Execution Prevention, support for Large Address Awareness, manifest isolation, no binding, no SEH, Terminal Server Awareness, buffer overrun checks, code integrity signature checks, and more.
-Search by the presence of certain PE header directories, such as .NET & COM runtime descriptor, base relocation table, bound import directory, debug directory, delay-load import table, exception directory, export directory, import directory, import address table (IAT), load configuration directory, security directory, thread-local storage (TLS), resources directory (with specific resource types) and more.
-Search by a compilation timestamp date range.
Search for PE files that import a certain module (DLL) by its name.
Search for Win32 and HRESULT error codes using their numerical values.
Search for Win32 and HRESULT errors by their message text.
Ability to undecorate (or demangle) Microsoft-specific symbol names.
For each API, it can retrieve the following:
-Linear file offset, as well as the mapped offset of the function.
-What physical module (or file on disk) the function resolves to.
-Distinguish whether the symbol refers to an executable function or a global variable.
-Other details about the PE file were given above.
Overall, this app can be used as a replacement for Microsoft's discontinued Dependency Walker.
It will primarily be of use to Windows developers, researchers, and reverse malware engineers. WinAPI Search will seek out PE binary files. Various filters can be applied to expedite the search like Bitness 32/64 Bit, API sets/Umbrella libraries, and PE header subsystem, among many others.
WinAPI Search also supports search by Regular expressions (Regexp).
WinAPI Search Features:
-Search only in export table, import table, or "delay load" import table of the PE headers.
-Ability to differentiate between C and C++ functions, as well as among ordinal function names and export table forwarded functions.
-Support for API-Sets or Windows "umbrella" libraries.
-Search by certain PE header subsystem, such as boot application, console application, GUI application, native application, EFI driver, EFI ROM, Win9x, POSIX or OS/2 subsystem, Windows CE or Xbox subsystem, etc.
-Search by certain PE header characteristics, such as the use of ASLR, App Container, Control Flow Guard, Data Execution Prevention, support for Large Address Awareness, manifest isolation, no binding, no SEH, Terminal Server Awareness, buffer overrun checks, code integrity signature checks, and more.
-Search by the presence of certain PE header directories, such as .NET & COM runtime descriptor, base relocation table, bound import directory, debug directory, delay-load import table, exception directory, export directory, import directory, import address table (IAT), load configuration directory, security directory, thread-local storage (TLS), resources directory (with specific resource types) and more.
-Search by a compilation timestamp date range.
-Linear file offset, as well as the mapped offset of the function.
-What physical module (or file on disk) the function resolves to.
-Distinguish whether the symbol refers to an executable function or a global variable.
-Other details about the PE file were given above.
Screenshot for WinAPI Search
Top Downloads In Programming
Text Editor Pro 32.2.0 [ 2025-06-01 18:50:07 | 10 MB | Freeware | 11|10|8|7 | 5 ] dnSpy 6.1.8 [ 2020-12-07 16:41:31 | 22.5 MB | Open Source | 11|10|8|7 | 5 ] Visual Studio Code 1.101.0 [ 2025-06-12 16:55:51 | 87-224 MB | Open Source | 11|10|8|7|Linux|macOS | 5 ] BowPad 2.9.4 [ 2025-02-20 14:10:50 | 4 MB | Open Source | 11|10|8|7 | 4 ] x64dbg 2025-03-15_15-57 [ 2025-03-16 12:20:59 | 34 MB | Open Source | 11|10|8|7 | 5 ] Tactical Briefings
Comment Rules & Etiquette - We welcome all comments from our readers, but any comment section requires some moderation. Some posts are auto-moderated to reduce spam, including links and swear words. When you make a post, and it does not appear, it went into moderation. We are emailed when posts are marked as spam and respond ASAP. Some posts might be deleted to reduce clutter. Examples include religion, politics, and comments about listing errors (after we fix the problem and upvote your comment). Finally, be nice. Thank you for choosing MajorGeeks.
© 2000-2025 MajorGeeks.com
Powered by Contentteller® Business Edition