Download
for Windows

WinAPI Search

Search Utility For Win32 Functions & Error Codes.

Version: 1.0.1.0
Size: 6.58M
Compatibility: Windows XP/Vista/7/8/10
Windows Server 2003/R2/2008/R2/2012/R2/2016

Description

App Icon WinAPI Search app was designed primarily for Windows developers, researchers and malware reverse engineers. Its original goal was to provide a utility to search for Win32 functions by name, but this app later grew to include additional functionality.

The following features are supported:

  • Search a single or multiple binary PE files by Win32 function name.
  • Support for Regular Expressions in search strings.
  • Search for specifc PE files using the following filters:
    • Bitness: 32-bit, 64-bit.
    • Search only in export table, import table, or "delay load" import table of the PE headers.
    • Ability to differentiate between C and C++ functions, as well as among ordinal function names and export table forwarded functions.
    • Support for API-Sets or Windows "umbrella" libraries.
    • Search by certain PE header subsystem, such as: boot application, console application, GUI application, native application, EFI driver, EFI ROM, Win9x, POSIX or OS/2 subsystem, Windows CE or XBox subsystem, etc.
    • Search by certain PE header characteristics, such as: use of ASLR, App Container, Control Flow Guard, Data Execution Prevention, support for Large Address Awareness, manifest isolation, no binding, no SEH, Terminal Server Awareness, buffer overrun checks, code integrity signature checks, and more.
    • Search by presence of certain PE header directories, such as: .NET & COM runtime discriptor, base relocation table, bound import directory, debug directory, delay-load import table, exception directory, export directory, import directory, import address table (IAT), load configuration directory, security directory, thread local storage (TLS), resources directory (with specific resource types) and more.
    • Search by a compilation timestamp date range.
  • Search for PE files that import a certain module (DLL) by its name.
  • Search for Win32 and HRESULT error codes using their numerical values.
  • Search for Win32 and HRESULT errors by their message text.
  • Ability to undecorate (or demangle) Microsoft-specific symbol names.
  • For each API it can retrieve the following:
    • Linear file offset, as well as the mapped offset of the function.
    • What physical module (or file on disk) the function resolves to.
    • Distinguish whether the symbol refers to an executable function or to a global variable.
    • Other details about the PE file that were given above.
  • Overall this app can be used as a replacement for Microsoft's discontinued Dependency Walker.

This utility does not require installation and can be run from any location on the disk.

Screenshots

Review the following screenshots of the WinAPI Search software:

Manual

Included in the download package, or can be viewed online.

Pricing

Totally free. Customization available.

License

You may use this software for as long as you need it, make as many copies of the downloaded package as required, and distribute it among any people and organizations at no cost.

You are NOT ALLOWED to modify or rename any parts of the downloaded package and/or the manual within it; distribute it under a different title and/or author's name; repackage or re-distribute separate components of the downloaded package; sell, rent or receive any financial gain from this software.

Disclaimer

The authors of this web site and of this particular software guarantee that this computer program does not contain any intentionally deleterious or harmful material that may somehow adversely affect your system. All software posted on this web site is custom-built computer programs that were designed primarily for our personal use. We test it for some time before posting it here. In spite of that and due to the fact that we are human, we do not exclude a possibility for this software to contain errors and unintended bugs that may present misinformation in programmatic sense and/or may temporarily affect your computer's stability. If such is the case, let us know through the feedback on this site and we will do our best to correct the problem and supply you with the latest update.

And last, by downloading and using this software you agree to do so "as is" without any implied or expressed liability from the authors and/or distributors of this software.

Social Media

Donate

Support our efforts to create better software

Adware Free

We promise that the installation package that you download from this page will not contain any adware, marketing toolbars, or other "nuisance" software not associated with the product described on this page.

Download

Windows XP/Vista/7/8/10 & Windows Server 2003/R2/2008/R2/2012/R2/2016

User Feedback