附DLL源代码如下：
//////////////////////////////////////////////////////////////////////////////
//
// Detours Test Program (simple.cpp of simple.dll)
//
// Microsoft Research Detours Package, Version 3.0.
//
// Copyright (c) Microsoft Corporation. All rights reserved.
//
// This DLL will detour the Windows SleepEx API so that TimedSleep function
// gets called instead. TimedSleepEx records the before and after times, and
// calls the real SleepEx API through the TrueSleepEx function pointer.
//
#include <stdio.h>
#include <windows.h>
#include <atlstr.h>
#include "detours.h"
static LONG dwSlept = 0;
static CString flag="wrong";
static DWORD (WINAPI * TrueSleepEx)(DWORD dwMilliseconds, BOOL bAlertable) = SleepEx;
static BOOL (WINAPI* TrueTextOut)(HDC hdc,int nXStart,int nYStart,LPCWSTR lpString,int cchString)=TextOut;
static int (WINAPI* TrueDrawText)(HDC hdc,LPCTSTR lpchText,int nCount,LPRECT lpRect,UINT uFormat)=DrawText;
DWORD WINAPI TimedSleepEx(DWORD dwMilliseconds, BOOL bAlertable)
{
DWORD dwBeg = GetTickCount();
DWORD ret = TrueSleepEx(dwMilliseconds, bAlertable);
DWORD dwEnd = GetTickCount();
InterlockedExchangeAdd(&dwSlept, dwEnd - dwBeg);
flag="right";
return ret;
}
BOOL WINAPI SaveTextOut(HDC hdc,int nXStart,int nYStart,LPCWSTR lpString,int cchString){
BOOL b= TrueTextOut(hdc,nXStart,nYStart,lpString,cchString);
flag="right+wrong";
return b;
}
int WINAPI NewDrawText(HDC hdc,LPCTSTR lpchText,int nCount,LPRECT lpRect,UINT uFormat){
int b=TrueDrawText(hdc,lpchText,nCount,lpRect,uFormat);
flag="right 3";
return b;
}
BOOL WINAPI DllMain(HINSTANCE hinst, DWORD dwReason, LPVOID reserved)
{
LONG error;
(void)hinst;
(void)reserved;
if (DetourIsHelperProcess()) {
return TRUE;
}
if (dwReason == DLL_PROCESS_ATTACH) {
DetourRestoreAfterWith();
printf("simple" DETOURS_STRINGIFY(DETOURS_BITS) ".dll:"
" Starting.\n");
fflush(stdout);
DetourTransactionBegin();
DetourUpdateThread(GetCurrentThread());
DetourAttach(&(PVOID&)TrueSleepEx, TimedSleepEx);
DetourAttach(&(PVOID&)TrueTextOut,SaveTextOut);
DetourAttach(&(PVOID&)TrueDrawText,NewDrawText);
error = DetourTransactionCommit();
if (error == NO_ERROR) {
printf("simple" DETOURS_STRINGIFY(DETOURS_BITS) ".dll:"
" Detoured SleepEx().\n");
}
else {
printf("simple" DETOURS_STRINGIFY(DETOURS_BITS) ".dll:"
" Error detouring SleepEx(): %d\n", error);
}
}
else if (dwReason == DLL_PROCESS_DETACH) {
DetourTransactionBegin();
DetourUpdateThread(GetCurrentThread());
DetourDetach(&(PVOID&)TrueSleepEx, TimedSleepEx);
DetourDetach(&(PVOID&)TrueTextOut,SaveTextOut);
DetourDetach(&(PVOID&)TrueDrawText,NewDrawText);
error = DetourTransactionCommit();
printf("simple" DETOURS_STRINGIFY(DETOURS_BITS) ".dll:"
" Removed SleepEx() (result=%d), slept %d ticks.\n" , error, dwSlept);
printf("%S\n",flag);
fflush(stdout);
}
return TRUE;
}
__declspec(dllexport) void ExportFunc(void)
{
}
//
///////////////////////////////////////////////////////////////// End of File.
