Skip to content

Latest commit

 

History

History
26 lines (18 loc) · 714 Bytes

README.md

File metadata and controls

26 lines (18 loc) · 714 Bytes
Raw

hide-imports

Features

  • Written in C
  • Supports both 32-bit and 64-bit
  • Supports both Unicode and Multi-Byte Character Set
  • Manual mode that allows achieve zero imports
  • Function address is fetched only once, then retrieved from the list thereafter

Usage

CALL("DbgPrint", 1, "DbgPrint Test\n");

Driver example

IDA imports view

(MANUAL_MODE disabled):

(MANUAL_MODE enabled):

Manual mode requires you to obtain the address of MmGetSystemRoutineAddress manually, for example, by passing the address in mapping parameters from user mode.