The problem with connecting NT DLL files!

Question

What is the best tool to track NT API.

Answer 1

If you are in the desired process, you can redirect the IAT (import address table) for the DLL that you want to control. If you are not already running executable code, you will also need to find a way to load the code into the desired process.

Answer 2

Microsoft Detours can help you do this, and it's free.

Answer 3

I don't know if this is on the beam, but try this for Win32. For the Native API, I think that only about 20% of this document is documented.

• Win32 API Monitor