| Commit message (Collapse) | Author | Age |
|
|
|
|
|
|
| |
* added WriteToFile(...) example
* make use of Wrapper functions if ntoskrnl API function already defined and marked with dllimport
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
|
|
|
| |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
|
|
|
|
|
| |
* Note: only Win10 x64 supported at the moment
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
|
|
|
|
|
|
|
| |
ZwProtectVirtualMemory wrapper.
* Improved wrapper generator script.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
|
|
|
|
|
| |
* ExAllocatePoolWithTag allocates paged memory if size is greater than page size
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
|
* generate wrapper functions that can be retrieved via `MmGetSystemRoutineAddress`
* for now, only ZwTraceControl and ZwTraceEvent from ntdll are used
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|