OldFuncAddr = getOldFunAddress();MyFuncAddr =(ULONG)NewZwQuerySystemInformation;*((ULONG*)(hook_code+1)) = (ULONG)MyFuncAddr - ((ULONG)OldFu... 全文

2010-06-26 01:04 来自版块 - 内核编程


返回顶部