From 21efd60b45ac20c8d5b31016dea1be4be6e45172 Mon Sep 17 00:00:00 2001 From: Alberto Ortega Date: Mon, 28 Dec 2015 16:21:38 +0100 Subject: [PATCH] Disabled check_hook_DeleteFileW_m1 because it causes FP in Win 8 --- pafish/hooks.c | 1 + pafish/main.c | 4 ---- 2 files changed, 1 insertion(+), 4 deletions(-) diff --git a/pafish/hooks.c b/pafish/hooks.c index 0f1e964..0af4cd3 100644 --- a/pafish/hooks.c +++ b/pafish/hooks.c @@ -10,6 +10,7 @@ static int check_hook_m1(DWORD * dwAddress) { return (*b == 0x8b) && (*(b+1) == 0xff) ? FALSE : TRUE; } +/* Causes FP in Win 8 */ int check_hook_DeleteFileW_m1() { return check_hook_m1((DWORD *)DeleteFileW); } diff --git a/pafish/main.c b/pafish/main.c index c92b359..041f811 100644 --- a/pafish/main.c +++ b/pafish/main.c @@ -153,10 +153,6 @@ int main(void) /* Hooks detection tricks */ print_check_group("Hooks detection"); - exec_check("Checking function DeleteFileW method 1", - &check_hook_DeleteFileW_m1, - "Hooks traced using DeleteFileW method 1", - "hi_hooks_deletefilew_m1"); exec_check("Checking function ShellExecuteExW method 1", &check_hook_ShellExecuteExW_m1, "Hooks traced using ShellExecuteExW method 1",