文件名称:SSDT-HOOK
- 所属分类:
- 钩子与API截获
- 资源属性:
- [Windows] [Visual.Net] [源码]
- 上传时间:
- 2012-11-26
- 文件大小:
- 387kb
- 下载次数:
- 0次
- 提 供 者:
- se***
- 相关连接:
- 无
- 下载说明:
- 别用迅雷下载,失败请重下,重下不扣分!
介绍说明--下载内容均来自于网络,请自行研究使用
XP下SSDT Hook ZwCreateThread的代码,仅适用于XP,由驱动和用户模式下控制程序组成,是从以前写的另一个程序修改过来的,所以代码中部分结构体的成员的定义是多余的,要写SSDT Hook的可以参考一下-XP, SSDT Hook ZwCreateThread code only applies to XP, drivers and user mode by the control program component is written in another program from the previous change over, so the code part of the structure is defined as the members of the excess to write SSDT Hook can refer to
(系统自动生成,下载前可以参看下载内容)
下载文件列表
TestHook\TestHook\BUILD
........\........\buildchk_wlh_x86.err
........\........\buildchk_wlh_x86.log
........\........\buildchk_wlh_x86.wrn
........\........\buildchk_wxp_x86.log
........\........\buildchk_wxp_x86.wrn
........\........\buildfre_wxp_x86.log
........\........\buildfre_wxp_x86.wrn
........\........\buildinc.cmd
........\........\BuildLog.htm
........\........\buildnumber.h
........\........\ddkbldenv.cmd
........\........\ddkpostbld.cmd
........\........\ddkprebld.cmd
........\........\Defs.h
........\........\drvcommon.h
........\........\drvversion.h
........\........\drvversion.rc
........\........\funcs.cpp
........\........\makefile
........\........\objchk_wxp_x86\i386\drvversion.res
........\........\..............\....\testhook.obj
........\........\..............\....\TestHook.pdb
........\........\..............\....\TestHook.sys
........\........\..............\....\vc80.pdb
........\........\..............\....\_objects.mac
........\........\...fre_wxp_x86\i386\drvversion.res
........\........\..............\....\testhook.obj
........\........\..............\....\TestHook.pdb
........\........\..............\....\TestHook.sys
........\........\..............\....\vc80.pdb
........\........\..............\....\_objects.mac
........\........\prefastchk_wlh_x86.log
........\........\PREfast_defects_chk_wlh_x86.xml
........\........\PREfast_defects_chk_wxp_x86.xml
........\........\PREfast_defects_chk_wxp_x86Sum.txt
........\........\sources
........\........\TestHook.cpp
........\........\TestHook.h
........\........\TestHook.vsprops
........\........\TestHook.WLH.vcproj
........\........\TestHook.WLH.vcproj.8.00.old
........\........\TestHook.WLH.vcproj.C79BF9D80C5A429.Administrator.user
........\........\TestHook.WLH.vcproj.LH-KFFVSLUHER5K.Administrator.user
........\........\TestHook.WLH.vcproj.sy0116-PC.sy0116.user
........\TestHook.sln
........\TestHook.suo
WinLoadTest\Release\WinLoadTest.exe
...........\.......\WinLoadTest.pdb
...........\WinLoadTest\defs.h
...........\...........\DrvInterface.cpp
...........\...........\main.cpp
...........\...........\Release\BuildLog.htm
...........\...........\.......\main.obj
...........\...........\.......\mt.dep
...........\...........\.......\vc90.idb
...........\...........\.......\vc90.pdb
...........\...........\.......\WinLoadTest.exe.intermediate.manifest
...........\...........\WinLoadTest.vcproj
...........\...........\WinLoadTest.vcproj.C79BF9D80C5A429.Administrator.user
...........\...........\WinLoadTest.vcproj.sy0116-PC.sy0116.user
...........\WinLoadTest.sln
...........\WinLoadTest.suo
TestHook\TestHook\objchk_wxp_x86\i386
........\........\...fre_wxp_x86\i386
........\........\objchk_wxp_x86
........\........\objfre_wxp_x86
WinLoadTest\WinLoadTest\Release
TestHook\TestHook
WinLoadTest\Release
...........\WinLoadTest
TestHook
WinLoadTest
........\........\buildchk_wlh_x86.err
........\........\buildchk_wlh_x86.log
........\........\buildchk_wlh_x86.wrn
........\........\buildchk_wxp_x86.log
........\........\buildchk_wxp_x86.wrn
........\........\buildfre_wxp_x86.log
........\........\buildfre_wxp_x86.wrn
........\........\buildinc.cmd
........\........\BuildLog.htm
........\........\buildnumber.h
........\........\ddkbldenv.cmd
........\........\ddkpostbld.cmd
........\........\ddkprebld.cmd
........\........\Defs.h
........\........\drvcommon.h
........\........\drvversion.h
........\........\drvversion.rc
........\........\funcs.cpp
........\........\makefile
........\........\objchk_wxp_x86\i386\drvversion.res
........\........\..............\....\testhook.obj
........\........\..............\....\TestHook.pdb
........\........\..............\....\TestHook.sys
........\........\..............\....\vc80.pdb
........\........\..............\....\_objects.mac
........\........\...fre_wxp_x86\i386\drvversion.res
........\........\..............\....\testhook.obj
........\........\..............\....\TestHook.pdb
........\........\..............\....\TestHook.sys
........\........\..............\....\vc80.pdb
........\........\..............\....\_objects.mac
........\........\prefastchk_wlh_x86.log
........\........\PREfast_defects_chk_wlh_x86.xml
........\........\PREfast_defects_chk_wxp_x86.xml
........\........\PREfast_defects_chk_wxp_x86Sum.txt
........\........\sources
........\........\TestHook.cpp
........\........\TestHook.h
........\........\TestHook.vsprops
........\........\TestHook.WLH.vcproj
........\........\TestHook.WLH.vcproj.8.00.old
........\........\TestHook.WLH.vcproj.C79BF9D80C5A429.Administrator.user
........\........\TestHook.WLH.vcproj.LH-KFFVSLUHER5K.Administrator.user
........\........\TestHook.WLH.vcproj.sy0116-PC.sy0116.user
........\TestHook.sln
........\TestHook.suo
WinLoadTest\Release\WinLoadTest.exe
...........\.......\WinLoadTest.pdb
...........\WinLoadTest\defs.h
...........\...........\DrvInterface.cpp
...........\...........\main.cpp
...........\...........\Release\BuildLog.htm
...........\...........\.......\main.obj
...........\...........\.......\mt.dep
...........\...........\.......\vc90.idb
...........\...........\.......\vc90.pdb
...........\...........\.......\WinLoadTest.exe.intermediate.manifest
...........\...........\WinLoadTest.vcproj
...........\...........\WinLoadTest.vcproj.C79BF9D80C5A429.Administrator.user
...........\...........\WinLoadTest.vcproj.sy0116-PC.sy0116.user
...........\WinLoadTest.sln
...........\WinLoadTest.suo
TestHook\TestHook\objchk_wxp_x86\i386
........\........\...fre_wxp_x86\i386
........\........\objchk_wxp_x86
........\........\objfre_wxp_x86
WinLoadTest\WinLoadTest\Release
TestHook\TestHook
WinLoadTest\Release
...........\WinLoadTest
TestHook
WinLoadTest