Hello,
Bochs already has two tools which able to do the things you describing.
Bochs instrumentation allows you to set callback function for memory access
occurred (it actually has a lot more capabilities) and you could write the
callbacks to monitor WinAPI calls or everything else you want.
Boc
Hi,
well, how should this be possible with the help of an emulator like
bochs? All you have is a binary image containing windows that is
executed by bochs, how do you want to find out which API functions are
called? At least you need a windows image that also contains debug
symbols so you can find
