Fix VMP NtClose detection

This commit is contained in:
66hh
2025-12-27 19:51:29 +08:00
parent 95b17566a0
commit 2d24b4189d

View File

@@ -6,7 +6,14 @@ namespace syscalls
{ {
NTSTATUS handle_NtClose(const syscall_context& c, const handle h) NTSTATUS handle_NtClose(const syscall_context& c, const handle h)
{ {
const auto value = h.value; const auto value = h.value;
if (h.h == 0xDEADC0DE)
{
return STATUS_INVALID_HANDLE;
}
if (value.is_pseudo) if (value.is_pseudo)
{ {
return STATUS_SUCCESS; return STATUS_SUCCESS;