Description: Hook the following functions: NtUserFindWindowEx FindWindow NtUserGetForegroundWindow GetForegroundWindow NtUserQueryWindow GetWindowThreadProcessId NtUserWindowFromPoint WindowFromPoint NtUserBuildHwndList EnumWindows NtUserSetWindowLong SetWindowLong after XP/Win 2003/Vista/Win7 test available. Ways to get ShadowTable table out of their own debugging stuff, is not clear stability if the instability can go online to find a way to get ShadowTable.
To Search:
File list (Check if you may need any files):
SSDT Shadow Hook\Contorl.exe
................\Control.e
................\InstDrv.exe
................\Shadow.jpg
................\Shadow.sys
................\SSDT Shadow Hook.e
SSDT Shadow Hook
Download