News:

Masm32 SDK description, downloads and other helpful links
Message to All Guests
NB: Posting URL's See here: Posted URL Change

Main Menu

Retrieving the address of the 'LoadLibraryA' api function ?

Started by AssemblyBeginner, March 07, 2015, 05:56:59 AM

Previous topic - Next topic

AssemblyBeginner

Hi all,

I am trying to write masm code to dynamically retrieve the kERNEL32  LoadLibraryA api function address (or the address of  GetModuleHandleA api that serves the same purpose as LodlibraryA)

Normally, one can obtain the address of an api by first using LoadLibrary to load the library where the api is located then using GetProcAddress .. but the problem here is that the target api function (whose address we want to retrieve) is LoadlibraryA itself  therefore we seem to be caught in a vicious circle !

Any thougts anyone ?

Regards.

ragdog

For writing a loader stub or shellcode?

I think you have bad cards for find a solution here ;)

Vortex

Hi AssemblyBeginner,

What's the exact purpose? You could try to get the base of kernel32.dll

AssemblyBeginner

Quote from: ragdog on March 07, 2015, 05:59:27 AM
For writing a loader stub or shellcode?

I think you have bad cards for find a solution here ;)

In fact, I am trying to simply learn how to display a simple MessageBox (nothing malicious) as per the thechnic described here : (See Example 2 - A Message to say "Hey")
http://althing.cs.dartmouth.edu/local/shellcode.html#win32ex2

Vortex

Shellcode and similar methods are prohibited in our forum.

AssemblyBeginner

Quote from: Vortex on March 07, 2015, 06:14:07 AM
Shellcode and similar methods are prohibited in our forum.

Ok Vortex - Fair enough and I do apologize .

Can you or anybody else kindly suggest a place where I can ask this question? I have searched the internet for question forums but with no much luck so far .. There seems to be very little documentation on the inetrnet about the subject.

Regards. 

ragdog

QuoteThere seems to be very little documentation on the inetrnet about the subject.

The net i full with this theme