Air14/HyperHide

Please also handle NtContinueEx

Closed this issue · 1 comments

Hello,

First of all let me say that you created here a really great peace of software, thank you very much.

But now to the issue, since windows 10 2004 MSFT added an extended version of the NtContinue sys call called NtContinueEx
And I already have seen it being used for example by the Line messager.

It would be great if you could add handling for the NtContinueEx as well

Cheers
David

Air14 commented

It's actually implemented but it isn't mentioned anywhere.
Since windows 10 2004 hyperhide hooks NtContinueEx instead of normal NtCotinue (NtContinue in newer windows versions is just a wrapper for NtContinueEx)