Title:
yujinxiangqudongbanxuexibiji
Download
Description: Tulip driver class study notes, from time to time records, can help new students quickly master new knowledge
To Search:
- [cy7c68013] - CY7C68013 Chinese information, everyone
- [Hook] - In this paper, Difficulty Level 3 detail
- [CDLL_vb] - Drive-level read-write memory, can be pr
- [lianliankan] - Lianliankan-------( full plug-in code tu
- [WindowsDriverProgrammingEssentials] - Windows Driver Programming Essentials
- [UDiskfilter] - A U disk filter driver, Src is the sourc
- [FastInst] - utility wrote by walter oney to install
- [PassTP] - TP protect the integrity of the code ove
- [Source] - External video source Tulip teachers all
File list (Check if you may need any files):
郁金香驱动班学习笔记-啊冲\0前言.doc
.........................\1.1.1 安装VC++6.0 -(1课).doc
.........................\1.1.2 安装VS2003-VC++7.0 -(2课).doc
.........................\1.1.3 安装VS2008-VC++9.0 -(3课).doc
.........................\1.1.4 安装VC助手 -(4课).doc
.........................\1.1.5 安装DDK -(5课).doc
.........................\1.2.1 VC6环境编译驱动 -(6课).doc
.........................\1.2.2 VS2003环境编译驱动 -(7课).doc
.........................\1.2.3 VS2008环境编译驱动 -(8课).doc
.........................\1.3.1编写一个名为DDK_HelloWorld简单的驱动 -(9课).doc
.........................\1.3.2为DDK_HelloWorld添加卸载驱动例程 -(10课).doc
.........................\1.3.3 用工具过驱动保护(确定学习方向) -(11课).doc
.........................\1.3.4为DDK_HelloWorld添加设备例程 -(12课).doc
.........................\1.3.5VM+windbg安装 -(13课).doc
.........................\1.3.6实战用windbg调试自己驱动DDK_HelloWorld -(14课).doc
.........................\1.3.7DDK_HelloWorld卸载例程细化 -(15课).doc
.........................\1.3.8为DDK_HelloWorld添加默认派遣例程 -(16课).doc
.........................\1.4.1需要具备的理论知识 -(17课).doc
.........................\1.4.2读出SSDT表当前函数地址 -(18课).doc
.........................\1.4.3读出原函数地址 -(19课).doc
.........................\1.4.4向指定地址写入代码 -(20课).doc
.........................\1.4.5绕过SSDT驱动保护 -(21课).doc
.........................\1.6 NT式驱动的安装 -(22课).doc
.........................\1.7 NT式驱动的卸载 -(23课).doc
.........................\1.8 驱动代码中C和C++代码区别 -(24课).doc
.........................\1.9、再谈VC环境配置 -(25课).doc
.........................\2.1手动加载NT式驱动(非工具) -(26课).doc
.........................\2.2、应用程序与驱动交互访问(缓冲模式) -(27课).doc
.........................\2.2.2、实战EXE和SYS通信 -(28课).doc
.........................\2.3、应用程序与驱动交互访问(直接模式) -(29课).doc
.........................\2.4、应用程序与驱动交互访问(其它模式) -(30课).doc
.........................\2.5、再谈SSDT HOOK驱动保护原理 -(31课).doc
.........................\2.6、自写驱动保护XX进程(HOOK SSDT) -(32课).doc
.........................\2.7、驱动中的内存管理 -(33课).doc
.........................\2.8、内存管理相关内核API -(34课).doc
.........................\2.9.1在认识链表结构exe部分 -(35课).doc
.........................\2.9.2在驱动中使用链表sys部分 -(36课).doc
.........................\2.A.1驱动下的异常处理 -(37课).doc
.........................\2.A.2内核模式下的字串操作 -(38课).doc
.........................\2.A.3内核模式下的文件操作 -(39课).doc
.........................\3.1.1 IAT表 -(40课).doc
.........................\3.1.2 应用层勾子InLine HOOK -(41课).doc
.........................\3.2.2 Shadow SSDT -(42课).doc
.........................\3.2.3 绕过所有用户层HOOK -(43课).doc
.........................\3.2.4 驱动InLine HOOK实例 -(44课).doc
.........................\3.2.5 认识 IDT表 -(45课).doc
.........................\3.2.6 IDT HOOK -(46课).doc
.........................\4.1.1、XX游戏驱动保护分析（实例A） -(47课).doc
.........................\4.1.2 、XX游戏过保护分析（实例B） -(48课).doc
.........................\4.2.1 XX游戏驱动保护代码书写 -(49课).doc
.........................\4.2.2 XX游戏驱动保护代码
