4

SampleTraceapi

Brian Gianforcaro edited this page 2020-08-22 00:25:06 -07:00

Table of Contents

• Traceapi
• Uses

Traceapi

Win32 API tracing sample. Detours and prints tracing statements for 1401 Win32 API functions. Output from the trace is logged to the syelogd.exe daemon.

Source is located in the /samples/traceapi directory.

Uses

DetourAttach, DetourCreateProcessWithDllEx, DetourDetach, DetourFinishHelperProcess, DetourIsHelperProcess, DetourRestoreAfterWith, DetourSetIgnoreTooSmall, DetourTransactionBegin, DetourTransactionCommit, DetourTransactionCommitEx, DetourUpdateThread.

Overview

• Home
• Frequently Asked Questions
• Using Detours
• Interception of Binary Functions
• Payloads and DLL Import Editing
• Detouring 32-bit and 64-bit Processes
• Samples

API Reference

• Detouring Target Functions
• Finding Target Functions
• Accessing Loaded Binaries and Payloads
• Modifying Binaries
• Inserting DLLs and Payloads Into New Processes