PsRemoveLoadImageNotifyRoutine ...

链接 NTSTATUS codes 00000000 STATUS_SUCCESS 00000000 STATUSWAIT0 00000001 STATUSWAIT1 00000002 STATUSWAIT2 00000003 STATUS_WA ...

5.9 Windows驱动开发：内核InlineHook挂钩技术 5.10 Windows驱动开发：摘除InlineHook内核钩子 #include ...

VirtualKD-Redux下载地址：https://toscode.gitee.com/wangwanfeng520/VirtualKD-Redux > windbg preview 从微软商店下载 > windgb 在安装wdk时自带 > 虚拟机安装target64 宿主机配置windgb preview路经 基本就可以了 [参考链接](https://xia0ji233.pro/ ...

参考链接 /** This routine is called by the operating system when a process or thread handle operation occurs. */ OBPREOPCALLBACK_ ...