These are chat archives for EasyHook/EasyHook

12th
Feb 2017
Justin Stenning
@spazzarama
Feb 12 2017 22:23 UTC
@/all sorry been AFK for a while, got a few threads to catchup on.
@TinkerWorX what do you mean by empty exclusive ACL? You need to always provide at least one value in the array (e.g. 0 = current thread).
Justin Stenning
@spazzarama
Feb 12 2017 22:34 UTC
@Randshot patch size (for jump into trampoline) is 5 bytes rounded up to the next instruction. i.e. if after 5 bytes you are not on an instruction boundary, the size will include up to the end of the current instruction as well. Max size supported is 16 bytes.
@rramk if you call the original function from within the hook, it will call the original (and the thread barrier will prevent the hook getting called again). There is a new feature just committed to the Develop branch where you can retrieve a hook bypass address in order to call the original function from anywhere in your code and bypass the entire hook logic. Issue #155
Justin Stenning
@spazzarama
Feb 12 2017 22:39 UTC
@pheber16_twitter for localhooks only you need EasyHook.dll and EasyHook32/64.dll as appropriate. You can skip the Svc.exe and EasyLoad*.dll