wj32 466c0719e7 fixed SymbolProvider and ThreadProvider so that it is possible to view symbolic start addresses of System (PID 4) after it is unprotected ...

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@625 21ef857c-d57f-4fe0-8362-d861dc6d29cd

2009-02-14 10:56:31 +00:00

..

i386

fixed SymbolProvider and ThreadProvider so that it is possible to view symbolic start addresses of System (PID 4) after it is unprotected

2009-02-14 10:56:31 +00:00

auto.cmd

new capability for KProcessHacker: custom rewrite of NtOpenProcess, bypassing almost all types of hooks!

2009-01-25 03:52:32 +00:00

debug.h

hook non-index functions if we can't use the correct indicies

2009-01-18 10:26:48 +00:00

hooks.c

* added SSDT restoration capability

2009-01-19 03:18:07 +00:00

hooks.h

* doesn't use KphOpenProcess (too risky with BSODs)

2009-01-25 06:09:08 +00:00

kernel_types.h

KphOpenProcess and KphOpenThread work perfectly on Vista

2009-01-25 10:15:43 +00:00

kph_nt.c

* added a HACK for null process names

2009-02-13 06:13:03 +00:00

kph_nt.h

added KphSuspendProcess and KphResumeProcess

2009-01-27 03:50:00 +00:00

kprocesshacker.c

fixed SymbolProvider and ThreadProvider so that it is possible to view symbolic start addresses of System (PID 4) after it is unprotected

2009-02-14 10:56:31 +00:00

kprocesshacker.h

fixed SymbolProvider and ThreadProvider so that it is possible to view symbolic start addresses of System (PID 4) after it is unprotected

2009-02-14 10:56:31 +00:00

makefile

add preliminary kernel driver code (it compiles!)

2009-01-15 02:52:52 +00:00

sources

new capability for KProcessHacker: custom rewrite of NtOpenProcess, bypassing almost all types of hooks!

2009-01-25 03:52:32 +00:00

ssdt.c

new capability for KProcessHacker: custom rewrite of NtOpenProcess, bypassing almost all types of hooks!

2009-01-25 03:52:32 +00:00

ssdt.h

new capability for KProcessHacker: custom rewrite of NtOpenProcess, bypassing almost all types of hooks!

2009-01-25 03:52:32 +00:00