May 15, 2009 at 7:45 AM
Edited May 15, 2009 at 7:47 AM
>I have no thread barrier
You won't need it, since no kernel API will go through KiSystemService again. The thread barrier is only to protect you from loops in the call stack and in the special case of KiSystemService there shouldn't be any loops...
>How to you solve that in easyhook?
Not at all... You will have to look at my patchguard disabling driver