A new beta version of EasyHook 2.7 has been released with the following fixes:

• Correctly relocates RIP addresses (64-bit). Windows 8/8.1 kernel32 APIs now all use RIP addressing when passing through to kernelbase. Closes the following issues:
  • Hooking of CreateFile fails on Win 8.1 x64
  • Compatiblity With Windows Server 2012 And 8
  • Crashed Notepad in Win 8 64-bit
  • 2.7 FileMon crashes 64-bit processes
  • Do not work on Windows8 x64.
  • relative mov in EntryPoint not handled
• Correctly passes command-line arguments:
  • Command-line arguments problem in RtlCreateSuspendedProcess
• Fixes marshalling bug with RtlGetLastErrorString across managed boundary:
  • Bug in RtlGetLastErrorString
  • RtlGetLastErrorString() returns empty string for invalidate parameter
• LhWaitForPendingRemovals endless loop under certain circumstance
  • Severe bug: LhWaitForPendingRemovals hangs forever –
• Adds support for VS2012
  • Compiling 2.7 on VS 2012 fails with some issues
• Fixed crashes when unloading 64-bit hooks. This also fixes the crash within the ProcessMonitor sample
  • Host process crashes when unloading hooks

Download the new version here.