;masmApiCall.api
CreateToolhelp32Snapshot,dwFlags,th32ProcessID
Heap32First,lphe,th32ProcessID,th32HeapID
Heap32ListFirst,hSnapshot,lphl
Heap32ListNext,hSnapshot,lphl
Heap32Next,lphe
InitCommonControls
InitCommonControlsEx,lpInitCtrls
Module32First,hSnapshot,lpme
Module32Next,hSnapshot,lpme
Process32First,hSnapshot,lppe
Process32Next,hSnapshot,lppe
Thread32First,hSnapshot,lpte
Thread32Next,hSnapshot,lpte
VirtualAllocEx,hProcess,lpAddress,dwSize,flAllocationType,flProtect
VirtualFreeEx,hProcess,lpAddress,dwSize,dwFreeType

;masmApiConst.api
6CreateRemoteThread,NULL,CREATE_SUSPENDED
1CreateToolhelp32Snapshot,TH32CS_INHERIT,TH32CS_SNAPALL,TH32CS_SNAPHEAPLIST,TH32CS_SNAPMODULE,TH32CS_SNAPPROCESS,TH32CS_SNAPTHREAD
4VirtualAllocEx,MEM_COMMIT,MEM_RESERVE,MEM_RESET,MEM_LARGE_PAGE,MEM_PHYSICAL,MEM_TOP_DOWN,MEM_WRITE_WATCH
5VirtualAllocEx,PAGE_EXECUTE,PAGE_EXECUTE_READ,PAGE_EXECUTE_READWRITE,PAGE_EXECUTE_WRITECOPY,PAGE_NOACCESS,PAGE_READONLY,PAGE_READWRITE,PAGE_WRITECOPY,PAGE_GUARD,PAGE_NOCACHE
3VirtualFree,MEM_DECOMMIT,MEM_RELEASE
4VirtualFreeEx,MEM_DECOMMIT,MEM_RELEASE
3VirtualProtect,PAGE_EXECUTE,PAGE_EXECUTE_READ,PAGE_EXECUTE_READWRITE,PAGE_EXECUTE_WRITECOPY,PAGE_NOACCESS,PAGE_READONLY,PAGE_READWRITE,PAGE_WRITECOPY,PAGE_GUARD,PAGE_NOCACHE
4VirtualProtectEx,PAGE_EXECUTE,PAGE_EXECUTE_READ,PAGE_EXECUTE_READWRITE,PAGE_EXECUTE_WRITECOPY,PAGE_NOACCESS,PAGE_READONLY,PAGE_READWRITE,PAGE_WRITECOPY,PAGE_GUARD,PAGE_NOCACHE

Those addons could also be used with goAsm,hla,nasm and tasm. If you use FASM, simply add brackets to each API function.
FASM examples:
fasmApiCall.API -> ,dwFlags,th32ProcessID
fasmApiConst.API -> 6,NULL,CREATE_SUSPENDED

Regards,
Pegasus
Posted on 2004-02-06 05:04:29 by cu.Pegasus
Thanks cu.Pegasus

Here are the completed masmApi files.

KetilO
Posted on 2004-02-06 07:40:40 by KetilO