Recently has been trying to A problem: intercepting application parameters passed to the dynamic library, for example, A program called A1 dynamic correlation function in the library, how to get A transfer to the A1 parameters in the process information, study for A long time, don't come out, I hope masters to help give directions, I will here

CodePudding user response:

Dll replacement!

Such as A1 dynamic library function func1 (a: integer)

You write a DLL, new inside write function func1

Procedure func1 (a: integer)
The begin
Showmessage (inttostr (a));

CallLibAFunc1 (a);//to call A1 dynamic library (LibAOther. DLL) have function func1

End

And then put the new DLL named LibA. DLL, the DLL named LibAOther. DLL

CodePudding user response:

The thought I thought, the key is the function prototype is unknown in dynamic library, how to replace

CodePudding user response:

Prototype is unknown, the disassembly the first prototype,
One way is to replace the DLL cutting parameters, the upstairs said, there is another method is to hook, this two methods all need prototype method, of course don't have to declare the same, such as Pointers, you ShenMingCheng Integer/Cardinal is no problem,

CodePudding user response:

Have the disassembly tool, would you please comment on it

CodePudding user response:

Dynamic Ollydbg
Static IDA