I have just used detours instead of breakpoint handler in order to intercept functions in binary. It's pretty fast.
These days brekpoint handler technique is quite common in order trace execution path. Setting breakpoint on functions and then intercept them thorugh EXCEPTION_HANDLER_BREAKPOINT routine for eg. what pedram has done in pydbg.
Does anyone know of any disadvantage of using trampoline function or detour function over breakpoint handler technique?
Cheers
M






