ring0--hook NtContinue+source_code ring0下面hookNtContinue 使用drx7寄存器实现的hook this code hooks ntoskrnl!NtContinue to set dr7 to 0 (no updating of dr7) so NtContinue called from ring3 cannot alter drX registers... This hook will only PREVENT dr

披露API Hook的相关技术。讲述如何监控API函数、查看操作系统内部以及如何扩充原函数的功能-Intercepting Win32 API calls has always been a challenging subject among most of the Windows developers and I have to admit, it s been one of my favorite topics. The term Hooking represents a fundament