Samples: Tracemem

Microsoft Research Detours

Tracemem

Traces all calls to the Windows HeapAlloc API. Output from the trace is logged to the syelogd.exe deamon.

Uses

DetourAttach, DetourCreateProcessWithDllEx, DetourDetach, DetourTransactionBegin, DetourTransactionCommit, DetourUpdateThread.