mirror
Changelog:
- add some support of meltdown patched kernels. It seems that Microsoft backported from w10 InterruptObject to KPRCB on windows 8.1. so all offsets below this field were shifted downward and previous version of wincheck produced BSODs
- add dumping of SYSTEM_KERNEL_VA_SHADOW_INFORMATION
- add support of windows 10 build 17063
- add lots of new WNF IDs names from ADK version 10.1.16299
