Monitor WriteProcessMemory...

c++ / delphi package - dll injection and api hooking
Post Reply
Blinder
Posts: 1
Joined: Sun Mar 06, 2005 7:17 pm

Monitor WriteProcessMemory...

Post by Blinder »

Hi guys,

I dont want to perform an injection using WriteProcessMemory, I want to monitor the actual call in the same way that the sample does for TerminateProcess - do I need to do anything different from the Sample? Or just translate it for a different call......
madshi
Site Admin
Posts: 10764
Joined: Sun Mar 21, 2004 5:25 pm

Post by madshi »

Well, do you want to show a message box for each API call like TerminateProcess demo does? If not, you need to change the demo obviously. Otherwise I guess you mainly just need to change the hooked API.

However, please note that madCodeHook's DLL injection does use WriteProcessMemory itself. So hopefully you won't catch madCodeHook's calls...
Post Reply