{"id":20662607,"url":"https://github.com/system233/x64call","last_synced_at":"2025-10-05T22:12:26.316Z","repository":{"id":138295913,"uuid":"443303453","full_name":"System233/x64call","owner":"System233","description":"Call 64bit function in 32bit process","archived":false,"fork":false,"pushed_at":"2021-12-31T11:37:27.000Z","size":10,"stargazers_count":6,"open_issues_count":1,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2024-11-16T19:15:32.531Z","etag":null,"topics":["createremotethread","ntcreatethreadex","x64call"],"latest_commit_sha":null,"homepage":"","language":"Assembly","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/System233.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-12-31T09:04:18.000Z","updated_at":"2024-10-31T14:41:54.000Z","dependencies_parsed_at":null,"dependency_job_id":"b2295c99-6014-45f9-8c9d-73695e31dd25","html_url":"https://github.com/System233/x64call","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/System233%2Fx64call","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/System233%2Fx64call/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/System233%2Fx64call/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/System233%2Fx64call/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/System233","download_url":"https://codeload.github.com/System233/x64call/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":234360840,"owners_count":18819963,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["createremotethread","ntcreatethreadex","x64call"],"created_at":"2024-11-16T19:14:45.309Z","updated_at":"2025-09-26T23:31:29.684Z","avatar_url":"https://github.com/System233.png","language":"Assembly","funding_links":[],"categories":[],"sub_categories":[],"readme":"# x64call\n\nCall 64bit function in 32bit process;  \n32位进程调用64位函数, CPP类型安全\n## Usage\n\n32位进程远程注入64位进程示例\n\n### IN CPP\n```cpp\n\n#include \u003cWindows.h\u003e\n#include \u003cx64call\u003e\nusing PNtCreateThreadEx=DWORD64(\n    PDWORD64                 ThreadHandle,\n    ACCESS_MASK             DesiredAccess,\n    LPVOID                  ObjectAttributes,\n    HANDLE                  ProcessHandle,\n    DWORD64  lpStartAddress,\n    LPVOID                  lpParameter,\n    BOOL                    CreateSuspended,\n    DWORD64                 dwStackSize,\n    DWORD64                 dwStackCommit,\n    DWORD64                 dwStackReserve,\n    LPVOID                  lpBytesBuffer\n);\n    DWORD64 hThread;\n    x64call::x64\u003cPNtCreateThreadEx\u003e::call(\"NtCreateThreadEx\",\u0026hThread,0x1FFFFF,NULL,hProc,addr64,pParam,FALSE,0,0,0,NULL);\n\n    //or\n    char const name[]=\"NtCreateThreadEx\";\n    x64call::x64\u003cPNtCreateThreadEx\u003e::call\u003cname\u003e(\u0026hThread,0x1FFFFF,NULL,hProc,addr64,pParam,FALSE,0,0,0,NULL);\n  \n```\n\n### IN C\n```c\n#include \u003cWindows.h\u003e\n#include \u003cx64call.h\u003e\nDWORD64 hThread;\nx64call_exec(\n    11,                                //number of target function args\n    x64call_dlwalk(\"NtCreateThreadEx\"),//64bit function addr\n    (uint64_t)0x1FFFFF,                //args...\n    (uint64_t)NULL,\n    (uint64_t)hProc,\n    (uint64_t)addr64,\n    (uint64_t)pParam,\n    (uint64_t)FALSE,\n    (uint64_t)0,\n    (uint64_t)0,\n    (uint64_t)0,\n    (uint64_t)NULL,\n)\n```\n\n## Notes\n不支持浮点类型和结构体传值\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsystem233%2Fx64call","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsystem233%2Fx64call","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsystem233%2Fx64call/lists"}