Hi, in which circumstances did the crash happened? Did it happened on return from your replacement function?

Are you sure that the function that you used as a replacement has exactly the same API as the function that you was hooking? Not only parameter numbers and types have to match, but also the calling convention has to be identical ( i.e. _stdcall function cannot be use as a replacement of _cdecl function, and vice versa).
It there is mismatch, the return will not be good.

yes!
i am sure!
i modify the asm like this,it test ok!
i am not sure it will work well all of windows version!

and also there has a bug in the hexf.cpp file.
i build the asm by yasm, and there has 0xff code, the hexf.cpp will break,so when i copy these code to stubdata.h it will be error!
and i modify this file like this.

Ah, now I understand what you mean... So it is a bug in the stub. It is my old code and it wasn't tested on Windows 10.
Thank you for fixing, feel free to send me a pull request. I will test if it works on other Windows versions too.

#5

Thank you for your contribution, the new release is ready:
https://github.com/hasherezade/IAT_patcher/releases/tag/v0.3.5.4

thank you for your project.
it saves my time.