system233 / x64call

Call 64bit function in 32bit process

x64call

Call 64bit function in 32bit process;
32位进程调用64位函数, CPP类型安全

Usage

32位进程远程注入64位进程示例

IN CPP

#include <Windows.h>
#include <x64call>
using PNtCreateThreadEx=DWORD64(
    PDWORD64                 ThreadHandle,
    ACCESS_MASK             DesiredAccess,
    LPVOID                  ObjectAttributes,
    HANDLE                  ProcessHandle,
    DWORD64  lpStartAddress,
    LPVOID                  lpParameter,
    BOOL                    CreateSuspended,
    DWORD64                 dwStackSize,
    DWORD64                 dwStackCommit,
    DWORD64                 dwStackReserve,
    LPVOID                  lpBytesBuffer
);
    DWORD64 hThread;
    x64call::x64<PNtCreateThreadEx>::call("NtCreateThreadEx",&hThread,0x1FFFFF,NULL,hProc,addr64,pParam,FALSE,0,0,0,NULL);

    //or
    char const name[]="NtCreateThreadEx";
    x64call::x64<PNtCreateThreadEx>::call<name>(&hThread,0x1FFFFF,NULL,hProc,addr64,pParam,FALSE,0,0,0,NULL);
  

IN C

#include <Windows.h>
#include <x64call.h>
DWORD64 hThread;
x64call_exec(
    11,                                //number of target function args
    x64call_dlwalk("NtCreateThreadEx"),//64bit function addr
    (uint64_t)0x1FFFFF,                //args...
    (uint64_t)NULL,
    (uint64_t)hProc,
    (uint64_t)addr64,
    (uint64_t)pParam,
    (uint64_t)FALSE,
    (uint64_t)0,
    (uint64_t)0,
    (uint64_t)0,
    (uint64_t)NULL,
)

Notes

不支持浮点类型和结构体传值

x64call's Issues

请问这个项目可以用于32位exe调用64位的dll吗？（dll是自己写的）

我有个exe项目是32位的（开发工具比较老，无法编译成64位），但是某个功能为了提升效率，需要调用一个64位dll中的函数，不知道能不能满足这种需求，谢谢