Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Monitoring API calls [duplicate]

I am doing some reverse engineering and want to know which APIs are called from the executable. I am mostly interested in the APIs called on a particular Windows system DLL.

I guess one way to do that is to get all APIs exposed from the DLL using dumpbin and put breakpoints on all those from Windbg.

Any other approach? This seems like lot of time if I need to monitor many system DLLs.

BTW, I am working on Windows XP and want to monitor one executable which calls some Windows system DLL functions.

like image 580
anand Avatar asked Jun 07 '09 12:06

anand


1 Answers

http://www.rohitab.com/apimonitor/

API Monitor does exactly what you're looking for. However, there are too many API calls listed and it becomes very difficult to analyse.

Here's a downloadable screenshot.

like image 128
Agnel Kurian Avatar answered Oct 12 '22 00:10

Agnel Kurian