很久以前,朋友问我如何在没有钩子的情况下 100% 确定地修改时间和滴答数。 我想出了这段代码,它通过替换目标进程的 PDE/PTE 来挂钩 KUSER_SHARED_DATA。 它在我的硬盘上放置了很长时间,因此我决定发布它
(Long time ago friend asked me how to fake time and tickcount 100% sure without hooks. I came up with this code which hook KUSER_SHARED_DATA by replacing it's PDE/PTE for targeted process. It was laying on my hdd long long time, thus I've decided to publish it) 1625201598381.rar