1.恢复shadow ssdt 2.恢复 NtReadVirtualMemory NtWriteVirtualMemory NtOpenProcess NtOpenThread KiAttachProce-1.恢复shadow ssdt 2.恢复 NtReadVirtualMemory NtWriteVirtualMemory NtOpenProcess NtOpenThread KiAttachProcess

64 位系统 hook ssdt 源码，测试hook的是ntreadvirtualmemory，喜欢就下载吧-64 system SSDT hook source code, test ntreadvirtualmemory is hook, like to download it