A small but meaningful update for those still using the project, thanks for sticking around!
✨ Added
-
Build Number via
KUSER_SHARED_DATA
Retrieves the Windows build number directly from KUSER_SHARED_DATA. This method is significantly less prone to tampering compared to traditional sources like the registry or WMI. -
Emulator Time Check
Added a new emulator detection method that checks ifInterruptTime
andSystemTime
values inKUSER_SHARED_DATA
remain static, a behavior common in some poorly implemented emulators and sandboxes. -
Syscall Handling Cleanup
Improved the internal syscall handling logic to properly clean the allocated memory for the syscall code.