内核调试检测

KdPitchDebugger 1 poi[ntkrnlpa.exe + 0x11228]   nt!KdRefreshDebuggerNotPresent+0xd:
KdDebuggerEnabled 0
KiDebugRoutine = KdpStub   poi[ntkrnlpa.exe + 0xB4553]  nt!KiDispatchException+0x191:
KdDebuggerNotPresent 1
KdEnteredDebugger 0

posted @ 2016-06-18 22:32  狂客  阅读(625)  评论(0)  编辑  收藏  举报