Hi!

Anybody have idea? Which API Should I used?

Thx, Bruce Lee

There are 2 ways that I can think of... the easy way and the good way..

* easy way

write a program that single-step debugs your target until the EIP reaches a certain address (range).

* good way

same as above, but emulate 'dangerous' instructions that might take control away from your program.


Both have been done before.. OllyDbg has a tracer that can even log each and every instruction executed.

For the second case.. have a look at the IceDump source.

It's not only about 'taking control away' but also about 'detection of being traced'.

Last time i checked, icedump could do that too.