Vyacheslav Legoshin
Results
1
issues of
Vyacheslav Legoshin
ArbPreprocessEntry, NtFlushInstructionCache, NtCompleteConnectPort and many other symbols are pointing to the same RVA. It leads to the following scenario: 1) NtFlushInstructionCache() hook is requested 2) Drakvuf parses ssdt, finds the...