We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
1: kd> dt nt!_WMI_LOGGER_CONTEXT ffffcb03`f9b0c4c0 +0x000 LoggerId : 2 +0x004 BufferSize : 0x1000 +0x008 MaximumEventSize : 0xfb8 +0x00c LoggerMode : 0x2800480 +0x010 AcceptNewEvents : 0n0 +0x014 EventMarker : [2] 0xc0130000 +0x01c ErrorMarker : 0xc00d0000 +0x020 SizeMask : 0xffff +0x028 GetCpuClock : 3 //is not function adress
The text was updated successfully, but these errors were encountered:
Microsoft has patched this hook. try ByePg or something else...
Sorry, something went wrong.
1: kd> dt nt!_WMI_LOGGER_CONTEXT ffffcb03`f9b0c4c0 +0x000 LoggerId : 2 +0x004 BufferSize : 0x1000 +0x008 MaximumEventSize : 0xfb8 +0x00c LoggerMode : 0x2800480 +0x010 AcceptNewEvents : 0n0 +0x014 EventMarker : [2] 0xc0130000 +0x01c ErrorMarker : 0xc00d0000 +0x020 SizeMask : 0xffff +0x028 GetCpuClock : 3 //is not function adress Microsoft has patched this hook. try ByePg or something else...
可以试试看这个,我也没有尝试过,不过应该可行 https://hub.fastgit.org/fIappy/infhook19041
No branches or pull requests
1: kd> dt nt!_WMI_LOGGER_CONTEXT ffffcb03`f9b0c4c0
+0x000 LoggerId : 2
+0x004 BufferSize : 0x1000
+0x008 MaximumEventSize : 0xfb8
+0x00c LoggerMode : 0x2800480
+0x010 AcceptNewEvents : 0n0
+0x014 EventMarker : [2] 0xc0130000
+0x01c ErrorMarker : 0xc00d0000
+0x020 SizeMask : 0xffff
+0x028 GetCpuClock : 3 //is not function adress
The text was updated successfully, but these errors were encountered: