Questions again on howto hide APISPY32?

what did you do in order to modify apispy ?

e.b

[dyn!o]

I suggest to use: ***.rohitab.com/apimonitor.

Also some user level debuggers give you good API spy possibilities. If the app doesn't include telic SEHs then you can dance with it as much as you want. If someone was so bright to include them then you can disable them by configuring different exceptions handling options in your debugger.

The golden rule is: if you don't try - you won't learn.

Good luck.

[boya]

Originally Posted by dyn!o

I suggest to use: ***.rohitab.com/apimonitor.

Also some user level debuggers give you good API spy possibilities. If the app doesn't include telic SEHs then you can dance with it as much as you want. If someone was so bright to include them then you can disable them by configuring different exceptions handling options in your debugger.

The golden rule is: if you don't try - you won't learn.

^^^^^^^^^^^^^^^^yes, try and fail, fail and try......

[JMI]

boya:

I believe the word you may be looking for is "encouragement."

Regards,

[boya]

Originally Posted by JMI

boya:

I believe the word you may be looking for is "encouragement."

Regards,

yep thank you.

[boya]

Originally Posted by e.b

what did you do in order to modify apispy ?

e.b

i am a newbie in unpacking. pelock is too hard for me. so i want to use some tools to log what API is called, maybe it is useful for the IAT rebuilding.
what do you think?

but till now, i have NO success in using apispy32, apimonitor to observe pelocked target.

I'm a newbie too, so I was interested in the modifications you did ...
could you give me some ideas ?

regards e.b