Home » Extra libraries, Code snippets, applications etc. » Applications created with U++ » Tracer
Re: Tracer [message #21896 is a reply to message #21881] |
Tue, 09 June 2009 16:33 |
gridem
Messages: 45 Registered: August 2008
|
Member |
|
|
Some comments how to start the program.
1. Execute 'trace.exe':
E:\Tracer>trace.exe
Please, find 'input.xml' file and edit it
2. Edit file 'input.xml', e.g.:
<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE input>
<input>
<hooks>
<item>CloseHandle</item>
<item>CreateThread</item>
<item>LoadLibraryExW</item>
</hooks>
<exepath>c:\windows\notepad.exe</exepath>
<exeargs></exeargs>
</input>
3. Execute 'trace.exe' again, see the result like:
E:\Tracer>trace.exe
Begin
Listen was started
Process is created
DLL was injected
Detached cave memory
Resumed process
Waiting for program ending...
Pipe was connected
The pipe has been ended.
Listen completed successfully
Program was finished successfully
|
|
|
Goto Forum:
Current Time: Wed May 15 08:09:46 CEST 2024
Total time taken to generate the page: 0.02605 seconds
|