Skip to content

Instantly share code, notes, and snippets.

@eeeeeeeeeevan
Created April 14, 2025 09:03
Show Gist options
  • Save eeeeeeeeeevan/85520a2310bcb12d6150b0b4d2f7e659 to your computer and use it in GitHub Desktop.
Save eeeeeeeeeevan/85520a2310bcb12d6150b0b4d2f7e659 to your computer and use it in GitHub Desktop.
just a note for myself
unsafe fn process_detection_bypass(context: &mut CONTEXT, _symbol_name: &str, _offset: u64) {
if context.Rax != 0 && IsWindow(HWND(context.Rax as isize)).as_bool() {
let mut return_value = HWND(context.Rax as isize);
let cpid = GetCurrentProcessId();
let mut pid = 0;
GetWindowThreadProcessId(return_value, &mut pid);
if pid != cpid {
return_value = handlegrabber(current_process_id);
}
context.Rax = return_value.0 as u64;
context.Rip = context.R10;
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment