<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0">
  <channel>
    <title>我爱代码 - 专业游戏安全与逆向论坛 - VT虚拟化</title>
    <link>http://www.woaidaima.com/forum-126-1.html</link>
    <description>Latest 20 threads of VT虚拟化</description>
    <copyright>Copyright(C) 我爱代码 - 专业游戏安全与逆向论坛</copyright>
    <generator>Discuz! Board by Comsenz Inc.</generator>
    <lastBuildDate>Mon, 18 May 2026 09:10:46 +0000</lastBuildDate>
    <ttl>60</ttl>
    <image>
      <url>http://www.woaidaima.com/static/image/common/logo_88_31.gif</url>
      <title>我爱代码 - 专业游戏安全与逆向论坛</title>
      <link>http://www.woaidaima.com/</link>
    </image>
    <item>
      <title>重建调试通道相关函数</title>
      <link>http://www.woaidaima.com/thread-95353-1-1.html</link>
      <description><![CDATA[重建调试通道相关函数


1、PsGetNextProcessThread DbgkDebugObjectType这两个常用的函数、变量采用特征码定位，其余采用解析pdb符号定位函数地址

 
2、采用InlinHook替换以下内核函数：
NtDebugActiveProcess
NtCreateDebugObject
NtRemoveProcessDebug
NtWaitForDeb ...]]></description>
      <category>VT虚拟化</category>
      <author>woaidaima2016</author>
      <pubDate>Fri, 10 Jun 2022 15:32:04 +0000</pubDate>
    </item>
    <item>
      <title>调试执行流程</title>
      <link>http://www.woaidaima.com/thread-95350-1-1.html</link>
      <description><![CDATA[DebugActiveProcess
   call DbgUiConnectToDbg
        call ZwCreateDebugObject
   call DbgUiDebugActiveProcess
         call ntdll.NtDebugActiveProcess
         call ntdll.DbgUiIssueRemoteBreakin
                 call ntdll.RtlpCreateUserThreadEx----]]></description>
      <category>VT虚拟化</category>
      <author>woaidaima2016</author>
      <pubDate>Sat, 04 Jun 2022 08:21:27 +0000</pubDate>
    </item>
    <item>
      <title>1.虚拟化调试器通道重建-调试器与被调试程序建立连接</title>
      <link>http://www.woaidaima.com/thread-95326-1-1.html</link>
      <description><![CDATA[虚拟化调试器通道重建-调试器与被调试程序建立连接
第一课上课的笔记：
        //------------XP
        【DebugActiveProcess】
          .kernel32!DbgUiConnectDbg()
                ntdll!DbgUiConnectDbg()
                  ntdll!ZwCreateDebugObject()
    ...]]></description>
      <category>VT虚拟化</category>
      <author>woaidaima2016</author>
      <pubDate>Sun, 03 Apr 2022 04:00:41 +0000</pubDate>
    </item>
  </channel>
</rss>