m0rethan3

some explanation

2

you can add to readme that now NtOpenFile hook actually checks if dll is in system folder (SysWOW64 e.g.) and theres no checks for digital signature

mapping physical memory in system address space

9

in my previous question #25 i described how i have access to kernel functions and system (kernel) address space. is it possible to map all physical memory to system address...

improving execution performance and possibly stability

7

thx for taking attention on my previous issue also you can just look at NtUserCreateWindowStation function kernel implementation for example (or any other that match rule i described next) and...