首页
社区
课程
招聘
[ZT]WinAPIOverride32 v 3.0 by Jacquelin POTIER
发表于: 2007-1-24 15:07 2461

[ZT]WinAPIOverride32 v 3.0 by Jacquelin POTIER

2007-1-24 15:07
2461
Description
This software allows you to monitor and/or override any function of a process.
This can be done for API functions or executable internal functions.

WinAPIOverride is more than a standard API monitoring software.
It can break targeted application before or after a function call, allowing memory or registers changes; and it can directly call functions of the targeted application.

These features allows to fill the gap between classical API monitoring softwares and debuggers.

Main differences between other API hookers :
  - You can define filters on parameters or function result
  - You can define filters on dll to discard calls from windows system dll
  - You can hook functions inside the target process not only API
  - You can hook asm functions with parameters passed through registers
  - Double and float results are logged
  - You can easily override any API or any process internal function
  - You can break process before or/and after function call to change memory or registers
  - You can call functions which are inside the remote processes
  - All is is done like modules : you can log or override independently for any function

History
Version 3.0    December 9 2006
  - New hooking algorithms (hook in 5 opcodes, asm registers integrity)
  - Parameter filters
  - Function return filters
  - Optionnal break before or after the function call
  - Can hook asm functions with args passed through registers
  - Failure code support
  - More types supported (including floating return)
  - Monitoring files generation
  - Call Comparison
  - Search through results
  - Remote Call Interface
  - Statistics
  - Export to CVS and HTML added

Down:

http://jacquelin.potier.free.fr/winapioverride32/

[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!

收藏
免费 1
支持
分享
最新回复 (1)
雪    币: 4560
活跃值: (1002)
能力值: ( LV4,RANK:50 )
在线值:
发帖
回帖
粉丝
2
开源的非顶不可了
2007-1-24 15:17
0
游客
登录 | 注册 方可回帖
返回
//