EXETOOLS FORUM  

Go Back   EXETOOLS FORUM > General > Source Code

Notices

Reply
 
Thread Tools Display Modes
  #31  
Old 08-29-2017, 01:13
espkk espkk is offline
Friend
 
Join Date: Sep 2016
Posts: 8
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 9
Thanks Rcvd at 8 Times in 5 Posts
espkk Reputation: 0
Quote:
Originally Posted by Conquest View Post
https://www.microsoft.com/en-us/download/details.aspx?id=52586
Try to download it - there is "Detours Version 3.0 Build_343" with x64 and ARM support
Previous version I had was restricted and was named "Express Version 3.0 Build_339"
Reply With Quote
The Following User Says Thank You to espkk For This Useful Post:
tonyweb (08-31-2017)
  #32  
Old 08-29-2017, 08:29
TechLord TechLord is offline
Banned User
 
Join Date: Mar 2005
Location: 10 Steps Ahead of You
Posts: 786
Rept. Given: 389
Rept. Rcvd 247 Times in 112 Posts
Thanks Given: 806
Thanks Rcvd at 1,801 Times in 478 Posts
TechLord Reputation: 200-299 TechLord Reputation: 200-299 TechLord Reputation: 200-299
Quote:
Originally Posted by espkk View Post
Try to download it - there is "Detours Version 3.0 Build_343" with x64 and ARM support
Previous version I had was restricted and was named "Express Version 3.0 Build_339"
When I download this I am getting a 512 KB file. I think that the .lib , includes and binaries folders are missing from this pack.

The "usual" Pro version should be around 8 MB in size if I recall correctly.
Reply With Quote
The Following User Says Thank You to TechLord For This Useful Post:
tonyweb (08-31-2017)
  #33  
Old 08-30-2017, 04:32
espkk espkk is offline
Friend
 
Join Date: Sep 2016
Posts: 8
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 9
Thanks Rcvd at 8 Times in 5 Posts
espkk Reputation: 0
Quote:
Originally Posted by TechLord View Post
When I download this I am getting a 512 KB file. I think that the .lib , includes and binaries folders are missing from this pack.

The "usual" Pro version should be around 8 MB in size if I recall correctly.
Detours Pro build 316(from this topic) is 218kb(rar), unpacked version is about 1MB
Express version doesn't include .lib, but includes many samples instead

The main reason why I asked is that in previous versions there were regions like
Code:
#ifdef DETOURS_X64
#error Feature not supported in this release.
#else
which are replaced by working code now, e.g.
Code:
#ifdef DETOURS_X64
    // REX.W trumps 66
    else if (m_bRaxOverride) {
        nBytesFixed = nFixedSize + ((nFlagBits & RAX) ? 4 : 0);
    }
#endif
Although it has always been this way:
Quote:
Support for 64-bit code on x64 and IA64 processors (Professional Edition only).
Support for all Windows processors (Professional Edition only).
Does this mean that these features are now supported in Detours Express?
I have no access to my working PC right now so I can't check it, can someone try to compile it?
Reply With Quote
The Following User Says Thank You to espkk For This Useful Post:
tonyweb (08-31-2017)
  #34  
Old 08-30-2017, 11:13
atom0s's Avatar
atom0s atom0s is online now
Family
 
Join Date: Jan 2015
Location: 127.0.0.1
Posts: 226
Rept. Given: 22
Rept. Rcvd 101 Times in 47 Posts
Thanks Given: 38
Thanks Rcvd at 303 Times in 117 Posts
atom0s Reputation: 100-199 atom0s Reputation: 100-199
It does appear that the newest express edition includes the 64bit features of Pro. Not sure if that is intentional or not since they did not include any info on the updates and did not update the MSDN page to include this change. Could have been an accidental release of the wrong package.
Reply With Quote
The Following 3 Users Say Thank You to atom0s For This Useful Post:
espkk (08-30-2017), tom324 (09-01-2017), tonyweb (08-31-2017)
  #35  
Old 04-16-2018, 09:37
zeffy zeffy is offline
Friend
 
Join Date: Jul 2017
Posts: 26
Rept. Given: 0
Rept. Rcvd 3 Times in 3 Posts
Thanks Given: 110
Thanks Rcvd at 66 Times in 23 Posts
zeffy Reputation: 3
Talking

Looks like Microsoft has published the Detours 4.0.1 source code and relicensed it under MIT:

https://github.com/Microsoft/Detours
Reply With Quote
The Following 5 Users Say Thank You to zeffy For This Useful Post:
chessgod101 (07-19-2018), matt (06-22-2018), nulli (04-16-2018), tonyweb (06-20-2018)
  #36  
Old 04-16-2018, 12:26
atom0s's Avatar
atom0s atom0s is online now
Family
 
Join Date: Jan 2015
Location: 127.0.0.1
Posts: 226
Rept. Given: 22
Rept. Rcvd 101 Times in 47 Posts
Thanks Given: 38
Thanks Rcvd at 303 Times in 117 Posts
atom0s Reputation: 100-199 atom0s Reputation: 100-199
Quote:
Originally Posted by zeffy View Post
Looks like Microsoft has published the Detours 4.0.1 source code and relicensed it under MIT:

https://github.com/Microsoft/Detours
Looks like this includes the 64bit code as well so seems to be intentional. Guessing they gave up trying to sell it with all the free hooking libs out now that support both 32bit/64bit.
Reply With Quote
The Following 4 Users Say Thank You to atom0s For This Useful Post:
foosaa (04-29-2018), mak (06-25-2018), TechLord (04-16-2018), tonyweb (06-20-2018)
  #37  
Old 06-20-2018, 02:55
Rikkie Rikkie is offline
Friend
 
Join Date: Jul 2016
Location: _PS_PROTECTION
Posts: 5
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 3
Thanks Rcvd at 2 Times in 1 Post
Rikkie Reputation: 1
But I guess it is still the best lib in terms of completeness and documentation.
Reply With Quote
  #38  
Old 06-21-2018, 01:42
atom0s's Avatar
atom0s atom0s is online now
Family
 
Join Date: Jan 2015
Location: 127.0.0.1
Posts: 226
Rept. Given: 22
Rept. Rcvd 101 Times in 47 Posts
Thanks Given: 38
Thanks Rcvd at 303 Times in 117 Posts
atom0s Reputation: 100-199 atom0s Reputation: 100-199
Quote:
Originally Posted by Rikkie View Post
But I guess it is still the best lib in terms of completeness and documentation.
Best is subjective and opinion based. There are a lot of detouring libraries made by various people that are free, open source, and support both 32bit and 64bit which you can find via Google. MS Detours was one of the first more or less publicly used ones for a while, but there are better ones available and for free.

MS used to charge a lot of money for the 64bit version of this library, which is why a bunch of others decided to code their own and then share them for free.

Something else to keep in mind is that MS Detours is detected by a lot of anti-cheats and other protection setups as it is a commonly used library, so you may run into detection issues depending on what you use it for. Some anti-virus' will also flag things that use it.
Reply With Quote
  #39  
Old 06-22-2018, 10:41
matt matt is offline
Friend
 
Join Date: Jan 2002
Posts: 34
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 2
Thanks Rcvd at 3 Times in 2 Posts
matt Reputation: 0
ARM/ARM64/IA64 supported, plus X86/X64 ! Marvelous!

Quote:
Originally Posted by zeffy View Post
Looks like Microsoft has published the Detours 4.0.1 source code and relicensed it under MIT:

https://github.com/Microsoft/Detours
Reply With Quote
The Following 2 Users Say Thank You to matt For This Useful Post:
chants (06-22-2018)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On


Similar Threads
Thread Thread Starter Forum Replies Last Post
SignatureToDetour: Converts IDA Pro signatures to C++ Detours sh3dow Source Code 2 01-23-2017 21:14
microsoft ddk kP^ General Discussion 3 10-20-2003 20:39


All times are GMT +8. The time now is 11:04.


��ICP��05004977��
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX