添加项目文件。

Etw Syscall/libpeconv-master/tests/test_case4/CMakeLists.txt

@@ -0,0 +1,19 @@
+cmake_minimum_required ( VERSION 2.8...3.21 )
+project (test_case4)
+
+set(CMAKE_CXX_FLAGS_RELEASE "${CMAKE_CXX_FLAGS_RELEASE} /MT")
+set(DELAYLOAD_FLAG "/DELAYLOAD:\"user32.dll\"" )
+
+set (srcs
+	main.cpp
+)
+
+set (hdrs
+)
+
+add_executable ( ${PROJECT_NAME} ${hdrs} ${srcs} )
+target_link_libraries(${PROJECT_NAME} "delayimp.lib" )
+set_property(TARGET ${PROJECT_NAME} APPEND_STRING PROPERTY LINK_FLAGS " ${DELAYLOAD_FLAG}")
+
+#install
+INSTALL( TARGETS ${PROJECT_NAME} DESTINATION ${CMAKE_INSTALL_PREFIX} COMPONENT ${PROJECT_NAME} )

Etw Syscall/libpeconv-master/tests/test_case4/main.cpp

@@ -0,0 +1,29 @@
+#include <windows.h>
+#include <stdio.h>
+
+int popup_message1()
+{
+    SYSTEMTIME SystemTime;
+    GetSystemTime(&SystemTime);
+
+    TCHAR pszDate[200];
+    GetDateFormatA( LOCALE_USER_DEFAULT, DATE_LONGDATE, &SystemTime, NULL, pszDate, 200 );
+
+    return MessageBoxA(NULL, pszDate, "Test Case 1", MB_OK);
+}
+
+int popup_message2()
+{
+    return MessageBoxW(NULL, L"Checking wide strings", L"Test Case 1", MB_OK);
+}
+
+int main()
+{
+    if (popup_message1() == 1337) {
+        if (popup_message2() == 1338) {
+            return MessageBoxW(NULL, L"Hooking test passed", L"Test Case 1", MB_OK);
+        }
+    }
+    printf("Test Case 4 finished\n");
+    return 0;
+}