目录
- 01-HelloWorld驱动
- 02-设备对象DeviceObject
- 03-设备例程DispatchRoutine
- 04-读取SSDT函数当前地址
- 05-读取SSDT函数原地址
- 06-修改当前SSDT地址
- 07-EXE与SYS交互(缓冲模式)
- 08-EXE与SYS交互(直接模式)
- 09-EXE与SYS交互(其它模式)
- 10-简单进程保护
- 11-驱动内存管理
- 12-异常处理
- 13-字符串操作
Table of Contents
- 01 - HelloWorld Driver
- 02 - Device Object (DeviceObject)
- 03 - Dispatch Routine
- 04 - Reading the Current Address of an SSDT Function
- 05 - Reading the Original Address of an SSDT Function
- 06 - Modifying the Current SSDT Address
- 07 - EXE and SYS Interaction (Buffered Mode)
- 08 - EXE and SYS Interaction (Direct Mode)
- 09 - EXE and SYS Interaction (Other Modes)
- 10 - Simple Process Protection
- 11 - Driver Memory Management
- 12 - Exception Handling
- 13 - String Operations