伪造ssdt表拦截SSDT的HOOK,可以防止黑客修改SSDT-SSDT Table interception forged ssdt the HOOK, can prevent hackers modify the SSDT

用 修改IAT（导入表）的方法HOOK 了CreateFile API函数，自定义的函数如下-Copy the code With the modified IAT (Import table) method HOOK the CreateFile API function, custom function as follows