For a school project I need to hook the function of the Windows spooler that is used to create a printing job with the path of the document to be printed.

For that I setup a function trampoline (this thing work on a test program), but it's seem to not working on the windows service. My question is, how, on x64dbg, can I watch the function that I need in order to know for checking if my hook work properly. When I use x64dbg, I don't know how I can wait for my function to be called.

Thanks in advance

  • 1
    If you want to break on a function you can use a breakpoint. Unfortunately debugging services is not very well supported with x64dbg though, so it might be tricky... – mrexodia Nov 19 '19 at 22:06

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.