Hello:

I have a small console application that I'm trying to reverse. I wanted to spy on what APIs that is is making at some "critical" point in code. So, I run APISpy on it but alas, APISpy Log shows nothing . Somebody tells me that APISpy kind of programs (which use Windows Message based hooks) will not work with Console mode applications. I understand the reason why.

But my question is is there any utility that can spy on Console mode applications' API calls also?

Signed,
-- FoxThree

* Edited by FoxThree *
Google search gave me a nice application called APIMonitor @ hxxp://xxx.rohitab.com Wonder why this one didn't turn up before I posted

Why not use Numega's SmartCheck?

According to some documentation I was reading, some API hooks install their DLL by injecting it using a registry key - that only works with console apps if they import USER32.DLL

So if the app isn't packed, maybe try just adding an import from USER32.dll (like messageboxa)- just throw it in the IAT table even tho it won't be used, this imports the DLL into your mem space - and then try running your APIspy again to see what happens?

Just a thought.

-nt20