Advertisement
Guest User

Untitled

a guest
Jul 25th, 2017
67
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.30 KB | None | 0 0
  1. typedef void tKiDetachProcess();
  2. DWORD64 KeDetachProcessAddr = &KeDetachProcess;
  3. int temp = *(int*)(KeDetachProcessAddr + 0x1F + 0x1);
  4. DWORD64 KiDetachProcessAddr = KeDetachProcessAddr + 0x1F + 0x5 + temp;
  5.  
  6. tKiDetachProcess* pKiDetachProcess = (tKiDetachProcess*)KiDetachProcessAddr);
  7. pKiDetachProcess();
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement