开发者

how can i hook a Api function from system dll?

i want to redirect the function calls of the real function calls from the system dll.i am working with portable-executable ,i can get IAT of the system dll(advapi32.dll),here the func开发者_JS百科tion address calls the system memory address ,i want to redirect to what i specified address..how can its possible ?....


That depends. Do you want to do it cross system or for a specific process? Do you want to pre-edit the file (and if so which one - the dll or the executable)? Or do you want to do this hooking at runtime (dynamic code injection)?

There a few good starting points in code project:

http://www.codeproject.com/KB/system/hooksys.aspx
http://www.codeproject.com/KB/threads/winspy.aspx

But this is a broad subject, so you might need to ask more specific questions.

These techniques can be abused (especially with advapi32), so I strongly urge you not to.


Use Deviare API Hook and get that working with 10 lines of code.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜