can1357 / ByePg

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.
828 stars 179 forks source link

Hooking SwapContext using ByePg... Can it be done ? #22

Open Victor6799 opened 1 year ago

Victor6799 commented 1 year ago

Hello all. I've got a detour for SwapContext and want to protect this detour using ByePg. Can ByePg do this with modification to the ByePg source code? I'm receiving a CRITICAL_STRUCTURE_CORRUPTION BugCheck. I'm experimenting on Windows 8.1. Any hint on what to modify would be greatly appreciated.

[UPDATE] Thanks to the nice folks at unknowncheats.me apparently its not possible mainly because KPP clears the stack so that there is no way to continue execution.