Introduction - If you have any usage issues, please Google them yourself
Rootkit detection program, not change sysenter address, but through direct jump inside original sysenter address write code to achieve, which is actually the general function header inlinehook of the same so that the rootkit detection tools would not think sysenter has changed (in fact, is not changed).