Exetools  

Go Back   Exetools > General > Community Tools

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1  
Old 01-31-2019, 01:10
CodeCracker CodeCracker is offline
Family
 
Join Date: Jun 2011
Posts: 272
Rept. Given: 16
Rept. Rcvd 238 Times in 66 Posts
Thanks Given: 12
Thanks Rcvd at 899 Times in 203 Posts
CodeCracker Reputation: 200-299 CodeCracker Reputation: 200-299 CodeCracker Reputation: 200-299
LHook: Local Api Hooker coded in MASM!

LHook:
Local Api Hooker coded in MASM!

LHook.asm start contains all examples you will need on the wild:

start:
invoke Hook, ADDR UserModuleName, ADDR MsgBoxApiName, ADDR MessageBoxTypeChange
; hook MessageBoxA api, ADDR MessageBoxTypeChange is the address called

invoke UnHook, ADDR UserModuleName, ADDR MsgBoxApiName
; unhook MessageBoxA api
Attached Files
File Type: rar LHook.rar (722.4 KB, 34 views)
Reply With Quote
The Following User Gave Reputation+1 to CodeCracker For This Useful Post:
user1 (02-01-2019)
The Following 11 Users Say Thank You to CodeCracker For This Useful Post:
ahmadmansoor (01-31-2019), Apuromafo (02-01-2019), floaters (03-10-2019), Hookahice (02-11-2019), Indigo (07-19-2019), mrfearless (01-31-2019), niculaita (02-01-2019), p4r4d0x (01-31-2019), tonyweb (01-31-2019), user1 (02-01-2019), zeuscane (01-31-2019)
 

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
struct as local var in ida upb General Discussion 3 03-03-2005 17:29


All times are GMT +8. The time now is 03:23.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX