摘要：
http://bbs.pediy.com/showthread.php?t=138747&highlight=inline+hookView Code 1 #include <ntddk.h> 2 //辛苦了几周的成果 3 4 5 typedef struct ServiceDescriptorEntry { 6 PVOID *ServiceTableBase; 7 ULONG *ServiceCounterTableBase; //Used only in checked build 8 ULONG NumberOfService; //... 阅读全文
摘要：
http://www.cnblogs.com/gaozili/archive/2011/11/02/2233450.htmlkd> dd nt!KeServiceDescriptorTableShadow L88055a6c0 804e36a8 00000000 0000011c 80513eb88055a6d0 bf997600 00000000 0000029b bf998310 bf997600为KeServiceDescriptorTableShadow函数表起始地址。kd> dds bf997600 L0000029bbf997600 bf934ffe win32k!Nt 阅读全文