typedef NTSTATUS(*T_ZwCreateKey)(
OUT PHANDLE KeyHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes,
IN ULONG TitleIndex,
IN PUNICODE_STRING Class OPTIONAL,
IN ULONG CreateOptions,
OUT PULONG Disposition OPTIONAL);
static T_ZwCreateKey Real_ZwCreateKey,Hook_ZwCreateKey;
Real_ZwCreateKey=SYSCALL(ZwCreateKey);
SYSCALL(ZwCreateKey)=(PVOID)Hook_ZwCreateKey;
hook api
最新推荐文章于 2019-11-04 15:50:24 发布