admin/Microsoft-Detours
1
0
Fork 0
mirror of https://github.com/Microsoft/Detours synced 2026-06-08 11:44:51 +00:00
Code Issues Packages Projects Releases Wiki Activity
Page: DetourCopyPayloadToProcess
Pages
DetourAllocateRegionWithinJumpBounds DetourAttach DetourAttachEx DetourBinaryBywayCallback DetourBinaryClose DetourBinaryCommitCallback DetourBinaryDeletePayload DetourBinaryEditImports DetourBinaryEnumeratePayloads DetourBinaryFileCallback DetourBinaryFindPayload DetourBinaryOpen DetourBinaryPurgePayloads DetourBinaryResetImports DetourBinarySetPayload DetourBinarySymbolCallback DetourBinaryWrite DetourCodeFromPointer DetourCopyPayloadToProcess DetourCopyPayloadToProcessEx DetourCreateProcessWithDll DetourCreateProcessWithDllEx DetourCreateProcessWithDlls DetourDetach DetourEnumerateExportCallback DetourEnumerateExports DetourEnumerateImports DetourEnumerateImportsEx DetourEnumerateModules DetourFindFunction DetourFindPayload DetourFindPayloadEx DetourFindRemotePayload DetourFinishHelperProcess DetourGetContainingModule DetourGetEntryPoint DetourGetModuleSize DetourGetSizeOfPayloads DetourImportFileCallback DetourImportFuncCallback DetourImportFuncCallbackEx DetourIsHelperProcess DetourRestoreAfterWith DetourSetIgnoreTooSmall DetourSetRetainRegions DetourSetSystemRegionLowerBound DetourSetSystemRegionUpperBound DetourTransactionAbort DetourTransactionBegin DetourTransactionCommit DetourTransactionCommitEx DetourUpdateThread FAQ Home OverviewHelpers OverviewInterception OverviewPayloads Reference SampleCommem SampleCping SampleDisas SampleDtest SampleDumpe SampleDumpi SampleDynamicAlloc SampleEinst SampleExcep SampleFindFunc SampleImpmunge SampleMember SamplePayload SampleRegion SampleSetdll SampleSimple SampleSlept SampleSyelog SampleTraceapi SampleTracebld SampleTracelnk SampleTracemem SampleTracereg SampleTraceser SampleTracetcp SampleTryman SampleWithdll Samples Using Detours
Clone
7
DetourCopyPayloadToProcess
Brian Gianforcaro edited this page 2021-03-06 00:51:42 -08:00
Table of Contents

DetourCopyPayloadToProcess

Copy a payload into a target process.

Definition

BOOL DetourCopyPayloadToProcess(
    _In_                     HANDLE hProcess,
    _In_                     REFGUID rguid,
    _In_reads_bytes_(cbData) LPCVOID pvData,
    _In_                     DWORD cbData
);

Parameters

hProcess
Process into which payload should be copied.
rguid
GUID of the specified payload.
pvData
Pointer to payload data.
pcbData
Size in bytes of payload data.

Return value

Returns TRUE if the payload was successfully copied to the target process; otherwise, returns FALSE.

Error codes

On failure, DetourCopyPayloadToProcess will return FALSE. Extended error code information may be retrieved by calling GetLastError.

Remarks

DetourCopyPayloadToProcess allocated a region of memory in the target process using the VirtualAllocEx API. It then uses the WriteProcessMemory API to create an artificial PE binary module in the target memory. In the artificial module, DetourCopyPayloadToProcess creates a .detours section with the specified payload data.

Code in the target process can find the payload by enumerating through all modules using the DetourEnumerateModules API and querying each module for the payload using the DetourFindPayload API.

Related Samples

Tracebld, WithDll.

Overview

API Reference