Hook NtGdiBitBlt{ sub_298();}sub_298(){ EP=IoGetCurrentProcess(); sub_9cc(EP);}sub_9cc(EP){ if (MmIsAddressValid(EP)) { DB4=1; PID=sub_8d6(EP); for (i=0;i<5;i++) { if ([F30+i*8]==PID) {
Copyright © 2005-2024 51CTO.COM 版权所有 京ICP证060544号