Microsoft Detours Pro v3.0

[atom0s]

Here is an example of hooking Win32 API without a trampoline since they are not always needed:
(Error checking code omitted for ease of reading.)

PHP Code:

extern "C"
{
    HWND (WINAPI *Real_CreateWindowExA)(DWORD, LPCSTR, LPCSTR, DWORD, int, int, int, int, HWND, HMENU, HINSTANCE, LPVOID) = CreateWindowExA;
};

/**
 * user32!CreateWindowExA detour callback.
 */
HWND __stdcall Mine_CreateWindowExA(DWORD dwExStyle, LPCSTR lpClassName, LPCSTR lpWindowName, DWORD dwStyle, int x, int y, int nWidth, int nHeight, HWND hWndParent, HMENU hMenu, HINSTANCE hInstance, LPVOID lpParam)
{
    // Do your personal alterations and such here..
    
    return Real_CreateWindowExA(dwExStyle, lpClassName, lpWindowName, dwStyle, x, y, nWidth, nHeight, hWndParent, hMenu, hInstance, lpParam);
}

// Attach the detour..
DetourTransactionBegin();
DetourUpdateThread(::GetCurrentThread());
DetourAttach(&(PVOID&)Real_CreateWindowExA, Mine_CreateWindowExA);
DetourTransactionCommit(); 


[WhoCares]

so good.

I got detours 3 source code from the open source .net framework code, but there is a nasty typo bug...and finally microsoft removed the leaked code form their open source site.

[Newbie_Cracker]

Is it the password? It is not working for me

01110010 00111001 00101011 01001100 01001101 00101011 01010000 01010111 01101000 01100011 01010010 01101011 00111110 00100111 01010001 00100010 01001011 01100111 01101000 01100101

[niculaita]

use this online site to decode bin to text

http://www.roubaixinteractive.com/PlayGround/Binary_Conversion/Binary_To_Text.asp

[Newbie_Cracker]

Originally Posted by niculaita

use this online site to decode bin to text

http://www.roubaixinteractive.com/PlayGround/Binary_Conversion/Binary_To_Text.asp

r9+LM+PWhcRk>'Q"Kghe

What is the correct password? It didn't work too !

I don't understand why he made it complicated. It seems b30wulf likes puzzles so much !

[xobor]

Originally Posted by Newbie_Cracker

r9+LM+PWhcRk>'Q"Kghe

What is the correct password? It didn't work too !

I don't understand why he made it complicated. It seems b30wulf likes puzzles so much !

complicated? not so much I guess

[niculaita]

r9+LM+PWhcRk>'Q"Kghe is corect for me
use winrar v5.xx to desarchive from www.rarlab.com

[Newbie_Cracker]

Originally Posted by niculaita

r9+LM+PWhcRk>'Q"Kghe is corect for me
use winrar v5.xx to desarchive from www.rarlab.com

Oh, mine was v5.00 beta 8.
Now the file was decompressed.

[CryptXor]

Yeah that is the password, but rather a different form of the password.

Hint: A solid, liquid or gas are just different forms of a substance

I am also pretty sure this is incomplete, going by what is in the express package. Thanks for the share anyway.

[CryptXor]

Here is a bit of a Frankenstein package. I combined the pro from here with bits out of the express package to get a "more complete" pro version (i.e including syelog).

Hopefully it will be useful, and is the 2nd best thing to a full pro package .

Download:

https://userscloud.com/ib0jgs2z7x1h
https://1fichier.com/?94rxfs3b86
https://openload.co/f/zW4nT6tvWAg/Detours_Pro_v3.0.7z
https://clicknupload.link/ttu6umlr8xkx

Password attached. Please don't just mirror the file/password.

[ragdog]

Hello

Any chance to download it without password?
I have no permission to access to donwloads.

Regards,

[mrfearless]

MinHook - The Minimalistic x86/x64 API Hooking Library for Windows
https://github.com/TsudaKageyu/minhook

Might be useful for someone looking for something similar to detours.

[mak]

Detours Version 3.0 Build 341

https://www.microsoft.com/en-us/down....aspx?id=52586

Date Published:
6/12/2017

[espkk]

What happened to Detours? Now there is Detours Version 3.0 Build_343 which seems to include Pro features (and there is no mention of the Express version)

[Conquest]

Originally Posted by espkk

What happened to Detours? Now there is Detours Version 3.0 Build_343 which seems to include Pro features (and there is no mention of the Express version)

https://www.microsoft.com/en-us/download/details.aspx?id=52586