is it right to bypass mem corrupt ?

[YangKi1902]

hello, i want to hook something but i got auto restart, is this snippet good to bypass mem corrupt guard ? thanks

ByePgInitialize( [ ] ( CONTEXT* ContextRecord, EXCEPTION_RECORD* ExceptionRecord ) -> LONG
    {
        if ( ExceptionRecord->ExceptionCode == ( CRITICAL_STRUCTURE_CORRUPTION << 32 | KERNEL_SECURITY_CHECK_FAILURE ) )
        {
            ContextRecord->Rip++;
            return EXCEPTION_CONTINUE_EXECUTION;
        }
        return EXCEPTION_EXECUTE_HANDLER;
    }, Verbose );

[can1357]

That won't work. Putting away the fact that your code is wrong, this project is not disarming patchguard. It simply avoids it. You need to think of a way to hook whatever it is that you want using exceptions.

[YangKi1902]

That won't work. Putting away the fact that your code is wrong, this project is not disarming patchguard. It simply avoids it. You need to think of a way to hook whatever it is that you want using exceptions.

oh thank you for the answer, do you know any Exception can cause when patchguard being fire ? i dont want to disarming patchguard, i just want to catch before it being fire