[exelist] No Subject

[<acpizer@...>]

Hi guys,

 this is a little off-topic but interesting anyway,

 I'm interested in a way of hooking API's under NT, 4.0 to be exact.
 API's from kernel32.dll, and I'd like the hook to apply to every program
 which uses the API's I hook, globally.

 physical patch is, out of the question.

 but I had an idea, why don't I do a little memory patch in the exe loader
 so every time an exe/dll is loaded, I'll patch the address of the API's I
 want.

 but I'd like to hear your opinions, or if you have a better way of doing
 it.


bye.

-------------------------------------------------------------------------------
"Probably you've only really grown up, when you can bear not being understood."

                              Marian Gold /Alphaville



------------------------------------------------------------------------
Free Web-based e-mail groups -- http://www.eGroups.com