Closed yifanlu closed 7 years ago
If a function includes a conditional branch in the first 8 bytes, libsubstitute can't hook it. We need an alternative way of patching these functions or stuff like the patch for 0xD514BB56 won't work.
0xD514BB56
I'd suggest hijacking the export/import func tables. This method would not heavily modify code.
Unfortunally that won't work in this case.
If a function includes a conditional branch in the first 8 bytes, libsubstitute can't hook it. We need an alternative way of patching these functions or stuff like the patch for
0xD514BB56
won't work.