New answers tagged api
0
That should be rather easy to solve in IDA with IDAPython or IDC.
I remember plugins that name functions based on API calls happening inside for a quick overview, one example here:
Finding all API calls in a function
Essentially it does what you need but note there is no semantic check whatsoever. It just means these API calls appeared in the same ...
0
Detouring is more or less a patching of the .text section inside of a program. It's practically more or less hacking, you're rerouting a program to do what you want it to do with your own function. Usually by placing the opcode 0xE9 (known as JMP, also added with some 0x90 which is NOP, for alignment) inside of the memory address you're detouring, that JMPs ...
Top 50 recent answers are included
