Skip to main content
1 vote
Accepted

How does Rohitab ApiMonitor capture API calls?

I could confirm that the assumption of Ariel is correct. I wrote a small C++ Console application to prove that ApiMonitor manipulates the Import Address Table. int _tmain(int argc, TCHAR* argv[], ...
Elmue's user avatar
  • 461
1 vote

How does Rohitab ApiMonitor capture API calls?

It is likely that ApiMonitor does a EAT/IAT hook which wouldn't require to write to the function's code. If I were you, I would put a breakpoint in the WinApi function's code and I would inspect the ...
Ariel Gadbois Roy's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible