27 Commits

Author SHA1 Message Date
BeneficialCode 51a57fb6ef fix the inline hook scan bug 2026-05-09 21:56:28 +08:00
BeneficialCode bc4bc23be0 Implemented the BuildNewImportTable. 2025-02-06 20:06:54 +08:00
BeneficialCode af7637e72d Added the ability to dump x86 process. 2025-02-05 21:29:16 +08:00
BeneficialCode f5cd80faac Bugs fixed. 2025-02-05 17:05:48 +08:00
BeneficialCode 5a57678ffc Bugs fixed. 2025-02-05 16:40:54 +08:00
BeneficialCode 6f35e5b52e PE dump bugs fixed. 2025-02-05 16:18:26 +08:00
BeneficialCode a9dd48b7fd Added PE dump. 2025-02-03 20:48:05 +08:00
BeneficialCode 077ef7a5f3 Added the ability to find IAT start addres and size. 2025-01-31 22:50:43 +08:00
BeneficialCode cc34499d55 fixup the HexEdit bug. 2025-01-29 19:56:45 +08:00
BeneficialCode 37824dabf5 Fixed bugs in the RegistryManager 2025-01-17 16:21:20 +08:00
BeneficialCode 91c418fa97 Implement the IATReferenceScan and IATSearcher. 2025-01-12 10:57:56 +08:00
BeneficialCode 477cb30c95 Implement the ApiReader class. 2025-01-08 17:39:09 +08:00
BeneficialCode 35c09a5f66 Implement the ProcessAccessHelper class. 2025-01-04 19:41:30 +08:00
BeneficialCode 12c026a089 Fixup the kernel module list error on Windows 7 x64. 2024-03-23 17:29:08 +08:00
BeneficialCode 1dc741e8f8 Optimize the kernel hook scan. 2023-11-18 11:23:05 +08:00
BeneficialCode 51db016fca Reduced the false x64 inline hook results. 2023-10-15 14:58:31 +08:00
BeneficialCode 1b677c8d7c Add more checks on inline hook scan. 2023-10-13 16:09:11 +08:00
CORP\zengquan 37450dbe93 Update the code from work computer 2022-12-06 19:13:18 +08:00
CORP\zengquan 915640859a improve the iat hook scan method 2022-11-05 19:47:02 +08:00
CORP\zengquan 64306c752e Add IAT hook scan 2022-11-03 18:31:08 +08:00
CORP\zengquan 4619ab228c Support scan the EAT hook 2022-11-02 18:31:22 +08:00
CORP\zengquan 7f6b32201e Add the module bit analysis 2022-04-27 18:04:17 +08:00
BeneficialCode 37b2ac2063 Add the manifest xml file 2022-01-09 15:25:01 +08:00
BeneficialCode 7b392889cf Unknow bug 2022-01-04 21:29:31 +08:00
BeneficialCode 5b2ec478c4 Add the PiDDBCacheTable and UnloadedDrivers Information Display 2022-01-01 15:47:39 +08:00
CORP\zengquan e45bb192ac Delete some old source code 2021-11-14 12:27:47 +08:00
CORP\zengquan 69f727e8d1 Add symbol download 2021-11-03 11:03:43 +08:00