Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- typedef void tKiDetachProcess();
- DWORD64 KeDetachProcessAddr = &KeDetachProcess;
- int temp = *(int*)(KeDetachProcessAddr + 0x1F + 0x1);
- DWORD64 KiDetachProcessAddr = KeDetachProcessAddr + 0x1F + 0x5 + temp;
- tKiDetachProcess* pKiDetachProcess = (tKiDetachProcess*)KiDetachProcessAddr);
- pKiDetachProcess();
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement