Hm,
So I would have to enum all handles in order to check if the used handle is valid? Maybe it's easier to remove the exception that is added to the chain after a process to hide and an exception is found.
Maybe it's possible to use NtDuplicateHandle to check if the handle is valid??
I will check all this.
Greetings
|