PolyHook2 update github.com/microsoft/vcpk! Brings improvements to x64 trampoline allocation to try safer allocation strategies first before falling back to hackier schemes. And also rudimentary linux/mac support, not via vcpkg though (yet)!
Conversation
Fun fact - doing x64 detours generally is HARD. The address range is huge but prologues usually have instructions in them with displacements limited to +- sizeof(uint8_t) to sizeof(uint32_t). Trampoline spot has to be carefully chosen to preserve these
1
5
