6 ms·
There's a million and one ways to do it, here's just some of the ones I remember: - https://www.mdsec.co.uk/2022/04/resolving-system-service-numbers-using-the-
by e4m2 1y ago
There's a million and one ways to do it, here's just some of the ones I remember:
- https://www.mdsec.co.uk/2022/04/resolving-system-service-numbers-using-the-exception-directory https://www.mdsec.co.uk/2022/04/resolving-system-service-num...
- https://klezvirus.github.io/RedTeaming/AV_Evasion/NoSysWhisper https://klezvirus.github.io/RedTeaming/AV_Evasion/NoSysWhisp...
- https://whiteknightlabs.com/2024/07/31/layeredsyscall-abusing-veh-to-bypass-edrs https://whiteknightlabs.com/2024/07/31/layeredsyscall-abusin...
Though I'm not sure which of these techniques, if any, would be most favored by a game DRM as I've never looked into it.