Unknown error when running process from impersonated account

Jan 23, 2015 at 1:28 PM

I'm trying to use EasyHook to hook into process started from impersonated account. I'm using ImpersonateLoggedOnUser function (with all environment/loadprofile etc.), CreateProcessAsUser to create process, and then EasyHook to hook into that process.

I'm getting only "STATUS_INTERNAL_ERROR: Unknown error in injected assembler code. (Code: 5)" error with the latest version (5292). Previous version (5159) is working fine this way, but has some bugs and I wanted to run the latest version.