Quote:
|
Originally Posted by Peter[Pan]
I was wondering if anybody has some resources about hooking api's thru ring0, i would rather not overwrite code, i was thinking about setting a page guard, and when it hits, catch it thru the driver, and go from there, anybody else has any ideas or resources ?
Thanks.
|
Take a look at:
http://www.sysinternals.com/
And use regmon95 source. you will find 2 source:
1 - sys file src. 2- application src.
By changing it you can write APIMon very easy.