i am instrumenting xigncode module using PinTools
after Loadlibrary("x3.xem");
pintools meet RETF instruction and exit with message pin dosen't support RETF
so, i trying to insert code do same action at empty spot like as api hook
stack
address
33
i listen CS=33 mean x64
when executing RETF using f7 at ollydbg, i don't know exact action it do
how to detour RETF at pintools then how to instrument the rest instruction ?
plz advice me !
Last edited by minsung; 07-24-2017 at 01:25 AM.