-
有时候,我们遇到的情况时,我们需要一些内核函数钩子…
Sometimes, we run into a situation when we badly need to hook some kernel function, but are unable to do it via conventional PE-based hooking. This article explains how kernel functions can be directly hooked. As a sample project, we are going to present a removable USB storage device as a basic disk to the system, so that we can create and manage multiple partitions on it (for this or that reason, Windows does not either allow or recognize multiple partitions on removable storage devices, so we are going to cheat the system). On this particular occasion, we will hook only one function, but the approach described in this article can be extended to handle multiple functions (for example, one of my projects required direct hooking of quite a few functions from the NDIS library). You should clearly realize that this article is about direct hooking and not about dealing with USB storage, so please don t tell me that the sample problem may have been solved differently.
- 2022-08-15 21:57:18下载
- 积分:1
-
BM 算法是一个较优的模式匹配算法。一般,如果不考虑模式串的长度,一个具有时间复杂度O(n)的算法应该是最优的了,但是事实不是如此。BM算法可以实现更高效率的模...
BM 算法是一个较优的模式匹配算法。一般,如果不考虑模式串的长度,一个具有时间复杂度O(n)的算法应该是最优的了,但是事实不是如此。BM算法可以实现更高效率的模式匹配。分析和实验说明,BM匹配算法对于那些字符集比较大,而模式串中出现的字符比较少的时候,工作效率最快。而且,考虑KMP匹配方式的优化,可以结合KMP匹配和BM匹配,进一步提高效率。
-BM algorithm is a better pattern matching algorithm. General, if we do not consider the length of pattern, a time complexity O (n) algorithm should be optimal, but the fact is not the case. BM algorithm can achieve higher efficiency of pattern matching. Analysis and experiments, BM-matching algorithm for those relatively large character set, and the mode string of characters appearing in less time, the efficiency of the fastest. Moreover, consider the KMP matching optimization, you can match the combination of KMP and BM match, and further improve efficiency.
- 2023-01-27 01:15:04下载
- 积分:1
-
读取历史文件的内容一个小工具,通过WINDOWS的组件接口实现...
读取历史文件的内容一个小工具,通过WINDOWS的组件接口实现-Read the contents of historical documents, a small tool components WINDOWS interface
- 2023-06-09 18:10:03下载
- 积分:1
-
JAVA client installation, need only copy of this document to the client machine,...
JAVA客户端安装,只需要将此文件拷贝到客户端机器上,并设置path路径,即可运行java程序-JAVA client installation, need only copy of this document to the client machine, and a path trails can run java programs
- 2022-06-17 07:31:42下载
- 积分:1
-
freedos的文件系统模块源码,支持fat12,fat16和fat32,对于学习文件系统非常有用。...
freedos的文件系统模块源码,支持fat12,fat16和fat32,对于学习文件系统非常有用。-FreeDOS file system module source code, support FAT12, fat16 and fat32, the study documents the system is very useful.
- 2022-10-29 21:45:03下载
- 积分:1
-
使用vb编写的日期输入框控件,非常有意思,欢迎各位领导批评指正,呵呵和...
使用vb编写的日期输入框控件,非常有意思,欢迎各位领导批评指正,呵呵和-use vb prepared by the date input box controls, very interesting, leading critics to welcome you stand corrected, and Oh! !
- 2023-04-07 13:05:03下载
- 积分:1
-
通过IO控制,在linux或unix下获得IDE物理序列号。
通过IO控制,在linux或unix下获得IDE物理序列号。-through IO control, the Linux or Unix under IDE physical serial number.
- 2022-03-19 07:52:22下载
- 积分:1
-
源码实现你想需要关机功能,也可以根据源码,符合您的要求进行修改。...
源码实现你想需要关机功能,也可以根据源码,符合您的要求进行修改。-Source to achieve the needs you want to shutdown function, can also be the basis of source, in line with your request to amend.
- 2022-10-15 15:50:02下载
- 积分:1
-
比较不错的源代码,供学习delphi的新手学习
比较不错的源代码,供学习delphi的新手学习-Comparison of good source code for the novice to learn delphi study
- 2022-03-26 03:04:33下载
- 积分:1
-
API Spy tool which will track all system/api calles made in the application.
API Spy tool which will track all system/api calles made in the application.
- 2022-03-11 14:10:16下载
- 积分:1