ring0--hook NtContinue+source_code ring0下面hookNtContinue 使用drx7寄存器实现的hook this code hooks ntoskrnl!NtContinue to set dr7 to 0 (no updating of dr7) so NtContinue called from ring3 cannot alter drX registers... This hook will only PREVENT dr

DLL+劫持技术（内存补丁技术），这种补丁方法，适合制作被ASProtect,Armadillo,Themida等各类强壳保护软件的补丁。-DLL+ hijacking Technology (memory patch technology), this patch method, suitable for the production of ASProtect, Armadillo, Themida and other kinds of strong shell protection soft