purpose:
1.provide customeAPI for special operatting.
2.hook key api
3.anti sample's anti-hook, anti-debug, anti-VM
4.virtual device provide.
5.filter driver: protect important res for sandbox
6.get ready for muti-thread analyze on physical machine.
本文共 299 字，大约阅读时间需要 1 分钟。
purpose:
1.provide customeAPI for special operatting.
2.hook key api
3.anti sample's anti-hook, anti-debug, anti-VM
4.virtual device provide.
5.filter driver: protect important res for sandbox
6.get ready for muti-thread analyze on physical machine.
转载于:https://my.oschina.net/u/1777508/blog/1921524