From 5662873f83272790ae0a1e57c1dfdcaee94a2e43 Mon Sep 17 00:00:00 2001
From: Brady McDermott <freedom7341@hotmail.com>
Date: Sun, 28 Jul 2024 00:11:25 -0600
Subject: [PATCH] yeah

---
 CscdSvc/hook.c | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/CscdSvc/hook.c b/CscdSvc/hook.c
index 2d38bb4..2752744 100644
--- a/CscdSvc/hook.c
+++ b/CscdSvc/hook.c
@@ -308,7 +308,14 @@ BOOL WINAPI UnregisterUserApiHookRemote(VOID)
 	if (hProcess == NULL)
 		return FALSE;
 
-
+	// Create a remote thread in Winlogon's process
+	//HANDLE hThread = CreateRemoteThread(hProcess, NULL, stack size, ThreadProc, &vartopass, 0, &varthreadidentifier);
+
+	// Cleanup
+	if (hProcessSnapshot)
+		CloseHandle(hProcessSnapshot);
+	if (hProcess)
+		CloseHandle(hProcess);
 
 	// ApiHook is not support on Windows
 	// 2000 or below!