search

can1357 / ByePg

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.
804 stars 182 forks source link

SEH handler does not handle external calls #3

Open can1357 opened 4 years ago

nicholaskunes commented 4 years ago

Isn't this by design? More of an enhancement to include external calls? From my brief (30 minute) read-over of the project, the SEH enabling is local to the image that initializes it.

can1357 commented 4 years ago

Isn't this by design? More of an enhancement to include external calls? From my brief (30 minute) read-over of the project, the SEH enabling is local to the image that initializes it.

I still should be unwinding in a loop instead of just once as it will not work with simple code like

__try
{
    NonInlinedCall()
}