Ring3

  类似PChunter的内核工具。本工具是应用层的源码。适合内核新手(Similar PChunter core tools. This tool is the source application layer. Suitable for novice kernel)

应用层
......\ipch
......\....\safecheck-69abd48b
......\....\..................\safecheck-48027c63.ipch,17104896,2014-04-11
......\Release
......\.......\SafeCheck.exe,263168,2014-03-30
......\.......\SafeCheck.pdb,977920,2014-03-30
......\SafeCheck

......\.........\bitmap2.bmp
......\.........\Dllhook.cpp,30924,2010-09-07
......\.........\Dllhook.h,408,2010-08-28
......\.........\DriProOther.sys,37632,2010-09-06
......\.........\Driver.cpp,6781,2010-09-07
......\.........\Driver.h,290,2010-08-18
......\.........\FilePrase.cpp,55026,2010-09-05
......\.........\FilePrase.h,22322,2010-09-03
......\.........\HookView.cpp,21776,2010-09-05
......\.........\HookView.h,3384,2010-08-18
......\.........\IDTAndKernel.cpp,27204,2010-09-07
......\.........\Ioctls.h,5501,2010-08-28
......\.........\KerHookSSDTIDT.sys,18944,2010-09-06
......\.........\LoadNtDriver.cpp,3720,2010-09-06
......\.........\LoadNtDriver.h,124,2010-09-06
......\.........\openfile.txt,4277,2010-08-19
......\.........\process.cpp,18813,2010-09-07
......\.........\process.h,1573,2010-08-28
......\.........\RAWSDTaddress.cpp,9856,2010-09-06
......\.........\RAWSDTaddress.H,28670,2010-09-03
......\.........\ReadMe.txt,1969,2010-05-26
......\.........\Release
......\.........\.......\CL.read.1.tlog,22518,2014-03-30
......\.........\.......\CL.write.1.tlog,1792,2014-03-30
......\.........\.......\Dllhook.obj,86595,2014-03-30
......\.........\.......\FilePrase.obj,81989,2014-03-30
......\.........\.......\link-cvtres.read.1.tlog,2,2014-03-30
......\.........\.......\link-cvtres.write.1.tlog,2,2014-03-30
......\.........\.......\link.read.1.tlog,3924,2014-03-30
......\.........\.......\link.write.1.tlog,860,2014-03-30
......\.........\.......\LoadNtDriver.obj,9108,2014-03-30
......\.........\.......\mt.read.1.tlog,676,2014-03-30
......\.........\.......\mt.write.1.tlog,204,2014-03-30
......\.........\.......\rc.read.1.tlog,2786,2014-03-30
......\.........\.......\rc.write.1.tlog,162,2014-03-30
......\.........\.......\SafeCheck.exe.intermediate.manifest,381,2014-03-30
......\.........\.......\SafeCheck.lastbuildstate,52,2014-03-30
......\.........\.......\SafeCheck.log,6955,2014-03-30
......\.........\.......\SafeCheck.obj,384802,2014-03-30
......\.........\.......\SafeCheck.pch,4325376,2014-03-30
......\.........\.......\SafeCheck.res,151580,2014-03-30
......\.........\.......\stdafx.obj,177635,2014-03-30
......\.........\.......\vc100.pdb,421888,2014-03-30
......\.........\.......\xde.obj,53039,2014-03-30
......\.........\Resource.h,5248,2010-09-06
......\.........\SafeCheck.aps,157344,2014-03-30
......\.........\SafeCheck.cpp,65630,2010-09-07
......\.........\SafeCheck.h,94,2010-07-05

......\.........\SafeCheck.rc,8294,2010-09-06
......\.........\SafeCheck.vcproj,5794,2010-09-07
......\.........\SafeCheck.vcproj.ASM-1475037415F.asm.user,1427,2010-06-15
......\.........\SafeCheck.vcproj.ASM-KERNEL.asmkernel.user,1417,2010-07-01
......\.........\SafeCheck.vcproj.ASMKERNE-60DF6F.asm.user,1426,2010-09-07
......\.........\SafeCheck.vcxproj,6670,2014-03-30
......\.........\SafeCheck.vcxproj.filters,2892,2014-03-30
......\.........\SafeCheck.vcxproj.user,143,2014-03-30
......\.........\ShowOrHide.cpp,5851,2010-09-05
......\.........\ShowOrHide.h,576,2010-08-19
......\.........\SlickOS2.ssk,78515,2005-10-25

......\.........\stdafx.cpp,214,2010-05-26
......\.........\stdafx.h,423,2010-09-07
......\.........\targetver.h,1026,2010-05-26
......\.........\xde.c,16248,2010-08-23
......\.........\xde.h,8419,2010-08-27
......\.........\xde.vsprops,145,2010-08-20
......\.........\xdetbl.c,25607,2004-10-04
......\.........\内核钩子.doc,10240,2010-08-05
......\.........\函数特征.txt,1086,2010-08-27
......\.........\新建 文本文档.txt,5235,2010-07-29
......\SafeCheck.ncb,4623360,2010-09-07
......\SafeCheck.sdf,26955776,2014-04-11
......\SafeCheck.sln,894,2014-03-30
......\UpgradeLog.XML,1329,2014-03-30
......\_UpgradeReport_Files
......\....................\UpgradeReport.css,3348,2014-03-30
......\....................\UpgradeReport.xslt,12505,2010-05-04
......\....................\UpgradeReport_Minus.gif
......\....................\UpgradeReport_Plus.gif