Please tell me method.
1.Via write a driver
2.Via use WINDBG
1.Via write a driver
2.Via use WINDBG
A forum for reverse engineering, OS internals and malware analysis
NtCl0$e wrote:http://www.kernelmode.info/forum/viewto ... =10&t=1549But, how to get the address of that variable?
myid wrote:From _KDDEBUGGER_DATA64.NtCl0$e wrote:http://www.kernelmode.info/forum/viewto ... =10&t=1549But, how to get the address of that variable?
EP_X0FF wrote:OK, i know.myid wrote:From _KDDEBUGGER_DATA64.NtCl0$e wrote:http://www.kernelmode.info/forum/viewto ... =10&t=1549But, how to get the address of that variable?