9 Commits

Author	SHA1	Message	Date
BeneficialCode	ce25143812	The win32k system call numbers start with 0x1000	2024-07-07 10:34:16 +08:00
Beneficial	41cfa78af9	Move the inline hook scan in the kernel module view.	2023-11-17 09:38:26 +08:00
BeneficialCode	da3487e97f	Add some kernel inline hook detect code.	2023-05-30 15:21:09 +08:00
BeneficialCode	cb3fbee703	fixup a fatal bug in khook.	2023-05-28 21:39:46 +08:00
BeneficialCode	60ee70445c	Add the driver module dump interface. But it still has memory access violation.	2023-01-08 21:37:56 +08:00
CORP\zengquan	6481124870	Bypass the vmp3.6 kernel debugger dectect.	2022-09-22 15:58:16 +08:00
BeneficialCode	79cd254a5e	Fixup the ssdt table display	2022-01-02 11:16:00 +08:00
CORP\zengquan	85d736fe4c	Add shadow ssdt function hook dected	2021-11-16 17:47:46 +08:00
CORP\zengquan	e45bb192ac	Delete some old source code	2021-11-14 12:27:47 +08:00