cuckoomon-modified icon indicating copy to clipboard operation
cuckoomon-modified copied to clipboard
verified publisher icon brad-sp

Problem with NtDelayExecution hook?

Open MerX1030 opened this issue 10 years ago • 1 comments

Seems like there's a problem with NtDelayExecution hook in Windows XP. It stops logging at the point where it should've logged NtDelayExecution. It logs fine in Windows 7 though but seems to cut short the logging.

This sample worked fine in previous versions (logged NtDelayExecution as well as the network APIs that followed) as compared to current version. Test sample used: SHA1 0a550e79afeba34615b0ec2bc6b761beff9d6ead

MerX1030 avatar Jun 17 '15 08:06 MerX1030

This is probably still related to the log flushing issue -- we still can't flush logs as often as we'd like.

brad-sp avatar Jun 17 '15 13:06 brad-sp