There are no reviews yet. Be the first to send feedback to the community and the maintainers!
Repository Details
Modifies the code of the RtlUserThreadStart callback and reads the arguments passed to it. Then it changes the initial execution argument for the thread to a different location, but with the same executable memory. Bypasses some generic memory integrity checks.