MCPcopy Create free account
hub / github.com/BeneficialCode/WinArk / Unbypass

Method Unbypass

KernelLibrary/BypassObCallback.cpp:36–46  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

34}
35
36bool BypassObjectCallback::Unbypass() {
37 NTSTATUS status = DetourDetach((PVOID*)&g_pObpCallPreOperationCallbacks, ObpCallPreOperationCallbacks);
38 if (!NT_SUCCESS(status))
39 return false;
40
41 status = DetourTransactionCommit();
42 if (!NT_SUCCESS(status))
43 return false;
44
45 return true;
46}

Callers

nothing calls this directly

Calls 2

DetourDetachFunction · 0.85
DetourTransactionCommitFunction · 0.85

Tested by

no test coverage detected