Samuel Tulach comments

Repositories
Issues
Comments

Results 43 comments of


                                            Samuel Tulach

Will not work on functions with jmp/cmp/nearcall/ any relative offset in the first 14 bytes

Yeah it's not really fixable. I have modified the `README` to state that more clearly.

LH incorrectly hooks DLLs that transition into ARM64

a.) `KernelBase.sys` does not exist, `KernelBase.dll` does. That's a usermode module. b.) I have no idea how x86 emulation for ARM (Prism?) works on Windows. My best bet is that...

LH incorrectly hooks DLLs that transition into ARM64

If minhook works, then there could be some issue with figuring out the correct instruction length. If that's the case, please dump the function start bytes before and after hook...