readme.txt

微软提供的截取Win32 API函数的开发包和例子detours-src-1.2.rar

BUILDING:
=========
To build the sample applications, type "nmake".


COMMENTS:
=========
The Detours package contains the following sample programs:

cping:    Detours multiple functions in the DCOM/RPC stacks to measure
          the overhead of sending DCOM messages.

disas:    Tests the Detours disassembler.

dtest:    Detours the Win32 Sleep function.

dumpe:    Dumps the list of all functions exported from a binary.

einst:    Find payloads compiled into binary files.

excep:    Uses the first-chance exception filter to toggle VM permissions
          on a page; enabling writes after catching the first write to a
          page.

injdll:   Inject a DLL into a running process.

setdll:   Add a DLL to any binary (a .DLL or .EXE for example).

traceapi: Win32 API tracing tool.  Contains a DLL which detours and prints
          tracing statements for 1401 Win32 API functions.  The traceapi
          program will attach to the DLL to any arbitrary Win32 binary.

withdll:  CreateProcessWithDll test program.  Effectively calls CreateProcess
          and injects a named DLL into the new process.