Rdbo
Rdbo
The hook would be constant sized for x64, and would be the same size as for x86 (single 5 byte jump in the target function)
If any overriden instruction is relative to RIP (or any instruction pointer), our trampoline will give a bad result
As pointed by #280, there may be a need to easily match a process using custom rules And while we're at it, maybe modules and other things as well?
There'd be `LM_GetCommandLine()` for the current process, and `LM_GetCommandLineEx()` for remote processes Not really necessary though