4

SampleTracereg

Brian Gianforcaro edited this page 2020-08-22 00:25:06 -07:00

Table of Contents

• Tracereg
• Uses

Tracereg

Traces activity through the registry APIs. Output from the trace is logged to the syelogd.exe daemon.

Source is located in the /samples/tracereg directory.

Uses

DetourAttach, DetourCreateProcessWithDllEx, DetourDetach, DetourEnumerateModules, DetourTransactionBegin, DetourTransactionCommit, DetourUpdateThread.

Overview

• Home
• Frequently Asked Questions
• Using Detours
• Interception of Binary Functions
• Payloads and DLL Import Editing
• Detouring 32-bit and 64-bit Processes
• Samples

API Reference

• Detouring Target Functions
• Finding Target Functions
• Accessing Loaded Binaries and Payloads
• Modifying Binaries
• Inserting DLLs and Payloads Into New Processes