MCPcopy Create free account
hub / github.com/BeneficialCode/WinArk / Unbypass

Method Unbypass

KernelLibrary/BypassAntiKernelDbg.cpp:57–67  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

55}
56
57bool BypassAntiKernelDbg::Unbypass() {
58 NTSTATUS status = DetourDetach((PVOID*)&g_pNtQuerySystemInformation, HookNtQuerySystemInformation);
59 if (!NT_SUCCESS(status))
60 return false;
61
62 status = DetourTransactionCommit();
63 if (!NT_SUCCESS(status))
64 return false;
65
66 return true;
67}

Callers

nothing calls this directly

Calls 2

DetourDetachFunction · 0.85
DetourTransactionCommitFunction · 0.85

Tested by

no test coverage detected