一种获取Shadow SSDT服务函数原始地址的思路\ShadowSSDT\GetNativeAddress.cpp
.........................................\..........\GetNativeAddress.h
.........................................\..........\LIB\ntdll.lib
.........................................\..........\ReadMe.txt
.........................................\..........\res\ShadowSSDT.ico
.........................................\..........\...\ShadowSSDT.rc2
.........................................\..........\resource.h
.........................................\..........\ShadowSSDT.aps
.........................................\..........\ShadowSSDT.clw
.........................................\..........\ShadowSSDT.cpp
.........................................\..........\ShadowSSDT.dsp
.........................................\..........\ShadowSSDT.dsw
.........................................\..........\ShadowSSDT.h
.........................................\..........\ShadowSSDT.ncb
.........................................\..........\ShadowSSDT.opt
.........................................\..........\ShadowSSDT.plg
.........................................\..........\ShadowSSDT.rc
.........................................\..........\ShadowSSDTDlg.cpp
.........................................\..........\ShadowSSDTDlg.h
.........................................\..........\StdAfx.cpp
.........................................\..........\StdAfx.h
.........................................\..........\LIB
.........................................\..........\res
.........................................\ShadowSSDT
一种获取Shadow SSDT服务函数原始地址的思路