do_not_forget2008

عملت تنقيح بالvc++ byte *tempvar=((byte *)GetProcAddress(hmod,"ZwCreateFile")+1); int funid=*(tempvar); يودى نفس الوظيفة شكر خاص لمن يتابع الموضوع وشكرا جزيلا لGamingMaster

معلش يبدو ان فهمى ثقيل نوعا ما ولكن فى هذا السطر dword id=*(PDWORD)(ZwCreateFile+1); هنا نضيف 1بايت الى العنوان مفهومة ولكن ان نعمل كاست(cast)الى pointer to Dword ثم ناتى بمحتويات هذا العنوان what is pointed to by this address

اخى الفاضل يعجز لسانى عن الشكر

هل هناك احد مازال لديه اهتمام بالموضوع لا ارى اى تعليقات الا من الاخ GamingMaster

اخى الفاضل لو تعلم عذابى للكتابة بالعربية ولكن ما رايك فيما كتبت

اخوتى بعد طول بحث وجدت الاتى كمثال نريد عمل hooking to native API Like NtCreateFile() التى هى interface for CreateFile API لعمل hooking على الدالة الNative نجلب العنوان من الملف ntdll.dll 1-step 1 API GetModuleHandle function returns a module handle for the sp…

الى الاخ addict or gamingMaster انا فهمت الاسمبلى والشرح الاكثر من رائع الذى يليها ولكن اريد شرح الماكرو المكتوب بالسى بالتفصيل لو سمحتم

thank you bro i know i'am asking too many dump question but truely i wanna learn about your final answer i understood the part of asm but the code in c he tries to reach SSDT right to the pointer that holds the address of specific function then he got this add…

thank you dear brother i want to ask about IRP that device work with i read them alot and i did not understand also when writing the driverEntry which opposite to the main what is the difference between pointer to device and pointer to driver also the followin…

Thank you addict but i have another question to make sure that i understood you mean when it is running on client machine if there is a debug statments they can not see it with debugView

thank you for answering me,currently i'am writing in a keyboard that does not support arabic sorry for that and where i can go to read the basics you talked about?? what is the use of the following micro #if DBG #define DbgPrint(arg) DbgPrint arg #else #define…

i'am a new programmer To GamingMaster and all who can please somebody tries to explain the code of regmon and filemon where is kernel experts?