wincheck rc8.16

Download mirror
Changelog:

• add -rdata option for checking .rdata sections. These sections must be non-discardable and their names cannot begin with PAGE. Kernel-mode only
• add checking of kernelbase!KernelBaseGlobalData functions pointers (windows 7 only)
• add checking of SSPI dispatcher tables (called from SECPKG_FUNCTION_TABLE.CallPackage function)
  
• add checking of dxg!gaDxgFuncs table
• fixed function names in W32pServiceTable for windows 8 64bit