Nick Landers

Results 21 comments of Nick Landers

Holidays are a little busy, but this is on my list btw :) Ping me soon if you don't hear anything.

Appoligies for any miscommunication, I don't speak chinese and resorted to google translate. I hope I understand. Testing of any entry point hooks has been limited. However, I'd be happy...

Thanks for the report on this! I generally don't have a ton of bandwidth to look into issues like this, but I'll try to find some time to dig in.

I haven't had any issues with accessing resource sections as long as `SRDI_CLEARHEADER` **is not** passed. Otherwise the PE header validation fails and the native APIs refuse to touch it....

If it helps, here is some extracted code which can parse the PE resource section manually: ```c++ static PIMAGE_RESOURCE_DIRECTORY_ENTRY _MemorySearchResourceEntry(void* root, PIMAGE_RESOURCE_DIRECTORY resources, LPCTSTR key) { PIMAGE_RESOURCE_DIRECTORY_ENTRY entries = (PIMAGE_RESOURCE_DIRECTORY_ENTRY)(resources...

Just seeing this, I'll have to dig in a take a look, it's been a while since I've looked at the memory free option Thanks for the helpful info!

Alright, here are my thoughts based on my quick 5m walk through: 1. You're absolutely right about those function pointers not being assigned, and your code above looks like an...

Thanks for reporting, this could be related to https://github.com/monoxgas/sRDI/issues/21 as well. Off the top of my head: I know there are a few different exception handling modes you can compile...

I have played with this as well, but had similar results. I can try to find some time to take a look, I agree with your setiment that some part...

Interesting results. I might assume there is a class of core system DLLs (kernel32, user32, ntdll, etc.) which have special handling to deny loading multiple instances in one process. Other...