Click to See Complete Forum and Search --> : Detect API Calls


som1
June 13th, 2005, 08:48 AM
I would like to inject a DLL to my target process and detect any API calls that were sent to my target.

For example if someones program calls WriteProcessMemory and sets a value in my target process I would like to detect that and show what process made that call.

Is this possible in a DLL?

Can someone point me in the right direction or show me a simple example I would be greatful.

som1

Boris K K
June 13th, 2005, 12:57 PM
Check this (http://www.codeproject.com/system/hooksys.asp) article for tecniques and sample code - a DLL that is able to intercept API calls by altering the Import Address Table (IAT).

som1
June 16th, 2005, 11:53 AM
Are there any other ways or examples? I don't understand this one well.