wincheck rc8.58

download
mirror
Changelog:

• add support of numerous versions of windows 10 insider preview - up to 16257
• add -j option to dump jobs
• add -dwf option to dump win32k filtering bitmaps
• add support of DelegatedNtdll
• add dumping of kprocess.LdtBaseAddress &LdtTableLength (based on this paper)