Is there a way to get _stat() C runtime functions caught in ProcMon
Is there a way to get _stat() C runtime functions caught in ProcMon
Share
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
Not directly, because (as @Preet Sangha explained) it works below the CRT level. However, it does show you a call stack, and
_statdoes access a file. So if ProcMon has access to your executable symbols and you know which file to watch, you might see_statin the call stack of that file’s access.If that is not enough, further describe your scenario.
Note that there are tools for hooking at the code level – see How can I hook Windows functions in C/C++?