MinHook Library Performance Issue

Question

4.00/5 (2 votes)

See more: (untagged)

Hello there. I hope this question finds you well.

I'm looking into using your MinHook library as a replacement for the NtHookEngine library for 64 bit use of my JauntePE project's api hooking requirements. I'd like to use your library instead since it solves the two problems I ran into and you mentioned in your MinHook article, i.e., NtHookEngine not using 5 byte jumps and not addressing the need to fixup moved code relative addresses.

But I'm having a problem with performance. With the same app, the 32 bit version takes only 4 milliseconds to apply the 64 hooks it needs. But the 64 bit version takes 5000 milliseconds or worse. I was wondering if you had any idea where the performance bottleneck might be? I'm assuming it's somewhere within the memory block allocation where it's attempting to locate a usable "relay" block, but I'm not sure since I can't debug the 64 bit app.

Any help you could give me in this area would be greatly appreciated!

Best regards,

Darrell L (aka redllar)

Posted 17-Oct-11 6:02am

pillbug99

Updated 17-Oct-11 6:04am

v2

Add a Solution

Comments

Manfred Rudolf Bihy 19-Oct-11 6:18am

Please document the problem area including the workaround you've found. Do this in the message area of the article as well as here in your question. For your question it would suffice if you add a link to the message board post of the article where you documented your findings. Please also mark your question as solved.

Thanks for your cooperation!

2 solutions

Solution 2

Please post this in the message board of the MinHook - The Minimalistic x86/x64 API Hooking Library[^] article. The author Tsuda Kageyu[^] will help you if you have any problems with the code of that article.

Thanks for your cooperation!

Posted 17-Oct-11 6:13am

Manfred Rudolf Bihy

Comments

Manfred Rudolf Bihy 19-Oct-11 6:15am

[Moved from OP's non-answer]
Sorry guys, that is the article in question. I'm new to CodeProject posting and I thought I had posted to its author's "private Q&A" area.
Anyway, I found the problem area as well as a workaround so I'm good to go now.

Thanks for your help.

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Sergey Alexandrovich Kryukov · Accepted Answer · 2011-10-17T06:10:00

Solution 1

Do you mean this article, MinHook - The Minimalistic x86/x64 API Hooking Library[^]?

Is so, you should better load the referenced page and click "New Message" below the article page to ask your questions. The author of the article will get e-mail notification and a chance to answer them.

—SA

Posted 17-Oct-11 6:10am

Sergey Alexandrovich Kryukov

Comments

Manfred Rudolf Bihy 17-Oct-11 12:14pm

Beat me to it! 5+

Sergey Alexandrovich Kryukov 17-Oct-11 12:38pm

Thank you, Manfred.
We're not competing for minutes... :-) you got my 5, too.
--SA

Manfred Rudolf Bihy 19-Oct-11 6:15am

[Moved from OP's non-answer]
Sorry guys, that is the article in question. I'm new to CodeProject posting and I thought I had posted to its author's "private Q&A" area.
Anyway, I found the problem area as well as a workaround so I'm good to go now.

Thanks for your help.

Sergey Alexandrovich Kryukov 21-Oct-11 13:01pm

Manfred, thank you bringing this post here.

@pillbug: helping you is just a pleasure.
Good luck,
--SA