Link to home
Start Free TrialLog in
Avatar of iddo_shoham
iddo_shoham

asked on

hooking NtCreateFile - finding out what process is calling the api.

Hello experts,
I am hooking NtCreateFile and I need to know what is the process calling the api (i.e how can i find out if MsWord is trying to create a new doc)?
I am using c++ and WinXp.
ASKER CERTIFIED SOLUTION
Avatar of itsmeandnobodyelse
itsmeandnobodyelse
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of iddo_shoham
iddo_shoham

ASKER

Thanks Alex