Explanation:
PigSyscall#InternalCaller Line 52
when second call Function "CallSyscall" , stub_addr will be decrypt again by Call CryptPermute a second time it will leads to ERROR C0000005(access violation)
Possible Solution:
adding a flag to track whether the address has already been decrypted

