Chapter 13 Modifying Kernel Objects
I said it before and I’ll say it again: When it comes to altering a system, you can modify one of two basic elements:
In Chapter 11, we saw how to alter call tables, which fall decidedly into the data category. In Chapter 12, we switched to the other end of the spectrum when we examined detour patching. Once you’ve worked with hooks and detours long enough, you’ll begin to notice a perceptible trade-off between complexity and concealment. In general, the easier it is to implement a patch, ...