Timestop by deroko of ARTeam
很久以前，朋友问我如何在没有钩子的情况下 100% 确定地修改时间和滴答数。 我想出了这段代码，它通过替换目标进程的 PDE/PTE 来挂钩 KUSER_SHARED_DATA。 它在我的硬盘上放置了很长时间，因此我决定发布它(Long time ago friend asked me how to fake time and tickcount 100% sure without hooks. I came up with this code which hook KUSER_SHARED_DATA by replacing it's PDE/PTE for targeted process. It was laying on my hdd long long time, thus I've decided to publish it)
页:
[1]