On Thu Sep 21 20:34:12 2023 +0000, Aidan Khoury wrote:
I can for this, but we also need to check if it's a 32-bit image since patch transforms are never applied to 64-bit images
`RtlImageNtHeader` lacks proper image boundary checks for e_lfanew, so using it in this case is not safe.