will you implement support user self add api breaks

[cxj98]

if yes will be great.

[mrexodia]

Just change https://github.com/x64dbg/SlothBP/blob/master/SlothBP.ini to add your own APIs.

[gguaiker]

[Process Creation]
CreateProcessA="kernel32.CreateProcessA"
NtCreateProcess="ntdll.NtCreateProcess"
ShellExecute="shell32.ShellExecute"
ShellExecuteEx="shell32.ShellExecuteEx"

[Memory]
VirtualAlloc="kernel32:VirtualAlloc"
VirtualFree="kernel32:VirtualFree"
HeapAlloc="kernel32:HeapAlloc"
HeapFree="kernel32:HeapFree"
GlobalAlloc="kernel32:GlobalAlloc"
GlobalFree="kernel32:GlobalFree"
WriteProcessMemory="kernel32:WriteProcessMemory"
ReadProcessMemory="kernel32:ReadProcessMemory"
RtlDecompressBuffer="ntdll.RtlDecompressBuffer"

[Code Injection]
SetWindowsHookEx="user32:SetWindowsHookEx"
CreateRemoteThread="kernel32:CreateRemoteThread"
VirtualAllocEx="kernel32:VirtualAllocEx"
QueueUserAPC="kernel32.QueueUserAPC"

[Networking]
UrlDownloadToFile="urlmon.UrlDownloadToFile"

[Crypt]
CryptGenKey="advapi32.CryptGenKey"
CryptDecrypt="advapi32.CryptDecrypt"
CryptAcquireContext="advapi32.CryptAcquireContext"

[Resource]
LoadResource="kernel32.LoadResource"
FindResource="kernel32.FindResource"

[Process Creation]
CreateProcessA="kernel32."CreateProcessA"
NtCreateProcess="ntdll.NtCreateProcess"
ShellExecute="shell32.ShellExecute"
ShellExecuteEx="shell32.ShellExecuteEx"

[Dialog box]
DialogBoxParamA="user32.DialogBoxParamA"
EndDialog="user32.EndDialog"
SendMessageA="user32.SendMessageA"
MessageBoxA="user32.MessageBoxA"
MessageBoxW="user32.MessageBoxW"
MessageBoxExA="user32.MessageBoxExA"
MessageBoxExW="user32.MessageBoxExW"
DialogBox ="user32.DialogBox"
DialogBoxIndirect="user32.DialogBoxIndirect"
CreateDialogIndirect="user32.CreateDialogIndirect"
MessageBoxIndirectA="user32.MessageBoxIndirectA"
MessageBoxIndirectW="user32.MessageBoxIndirectW"
CreateWindow="user32.CreateWindow"
CreateWindowExA="user32.CreateWindowExA"
CreateWindowExW="user32.CreateWindowExW"
ShowWindow="user32.ShowWindow"
UpdateWindow="user32.UpdateWindow"
GetWindowTextA="user32.GetWindowTextA"
GetWindowTextW="user32.GetWindowTextW"
GetDlgItemTextA="user32.GetDlgItemTextA"
GetDlgItemTextW="user32.GetDlgItemTextW"
GetDlgItemInt="user32.GetDlgItemInt"
[limit]
EnableWindow="user32.EnableWindow"
EnableMenuItem="user32.EnableMenuItem"
[File processing]
CreateFileA="kernel32.CreateFileA"
CreateFileW="kernel32.CreateFileW"
OpenFile="kernel32.OpenFile"
ReadFile="kernel32.ReadFile"
WriteFile="kernel32.WriteFile"
GetFileSize="kernel32.GetFileSize"
lcreat="kernel32.lcreat"
lopen ="kernel32.lopen"
lread="kernel32.lread"
lwrite="kernel32.lwrite"
hread="kernel32.hread"
hwrite="kernel32.hwrite"
OpenFileMappingA="kernel32.OpenFileMappingA"
OpenFileMappingW="kernel32.OpenFileMappingW"
OpenMutexA="kernel32.OpenMutexA"
OpenMutexW="kernel32.OpenMutexW"
LoadLibraryA="kernel32.LoadLibraryA"
LoadLibraryExA="kernel32.LoadLibraryExA"
LoadLibraryW="kernel32.LoadLibraryW"
LoadLibraryExW="kernel32.LoadLibraryExW"
CreateFileMappingA="kernel32.CreateFileMappingA"
CopyFileA="kernel32.CopyFileA"
CopyFileW="kernel32.CopyFileW"
CopyFileExA="kernel32.CopyFileExA"
GetPrivateProfileStringA="kernel32.GetPrivateProfileStringA"
CopyFileExW="kernel32.CopyFileExW"
SetFilePointer="kernel32.SetFilePointer"
MoveFileA="kernel32.MoveFileA"
MoveFileW="kernel32.MoveFileW"
MoveFileExA="kernel32.MoveFileExA"
MoveFileExW="kernel32.MoveFileExW"
DeleteFileA="kernel32.DeleteFileA"
DeleteFileW="kernel32.DeleteFileW"
LoadCursorFromFileA="user32.LoadCursorFromFileA"
rtcFileLen="user32.rtcFileLen"
[Pangolin]
GetModuleHandleA="kernel32.GetModuleHandleA"
OpenMutexA="kernel32.OpenMutexA"
GetSystemTime="kernel32.GetSystemTime"
VirtualProtect="kernel32.VirtualProtect"
CreateFileMappingA="kernel32.CreateFileMappingA"
CreateThread="kernel32.CreateThread"
[Self validation]
rtcFileLen="kernel32.rtcFileLen"
FindFirstFileA="kernel32.FindFirstFileA"
ExitProcess="kernel32.ExitProcess"
GetStartupInfoA="kernel32.GetStartupInfoA"
GetFileSize="kernel32.GetFileSize"
[Process function]
CreateToolhelp32Snapshot="kernel32.CreateToolhelp32Snapshot"
Process32First="kernel32.Process32First"
Process32Next="kernel32.Process32Next"
Process32FirstW="kernel32.Process32FirstW"
Module32First="kernel32.Module32First"
Module32Next="kernel32.Module32Next"
Module32FirstW="kernel32.Module32FirstW"
Module32NextW="kernel32.Module32NextW"
Toolhelp32ReadProcessMemory="kernel32.Toolhelp32ReadProcessMemory"
Heap32ListFirst="kernel32.Heap32ListFirst"
Heap32ListNext="kernel32.Heap32ListNext"
Heap32First="kernel32.Heap32First"
Heap32Next="kernel32.Heap32Next"
OpenProcess="kernel32.OpenProcess"
TerminateProcess="kernel32.TerminateProcess"
ExitProcess="kernel32.ExitProcess"
ExitThread="kernel32.ExitThread"
PostQuitMessage="kernel32.PostQuitMessage"
IsDebuggerPresent="kernel32.IsDebuggerPresent"
ZwQueryInformationProcess="ntdll.ZwQueryInformationProcess"
WriteProcessMemory="kernel32.WriteProcessMemory"
CreateThread="kernel32.CreateThread"
CreateRemoteThread="kernel32.CreateRemoteThread"
CreateProcessA="kernel32.CreateProcessA"
[Disk processing]
GetDiskFreeSpaceA="kernel32.GetDiskFreeSpaceA"
GetDriveTypeA="kernel32.GetDriveTypeA"
[send]
sendto="ws2_32.sendto"
WSASend="ws2_32.WSASend"
recv="ws2_32.recv"
send="ws2_32.send"
WSARecv="ws2_32.WSARecv"
recvfrom="ws2_32.recvfrom"
WSARecvFrom="ws2_32.WSARecvFrom"
WSASendTo="ws2_32.WSASendTo"

[cxj98]

你好，大牛，不错啊，谢谢！

[gavz]

Thanks mrexodia for this plugin