nethuige comments

Results 1 comments of


                                            nethuige

how to get gafAsyncKeyStateExport？

> 您要查找的文件不在 win32ksgd.sys 中。您可以在 win32kbase.sys 中找到偏移量，在 NtUserGetAsyncKeyState 函数中您将找到您要查找的偏移量。 ![图像](https://private-user-images.githubusercontent.com/45372336/363491154-2450d85b-35d2-4338-930d-5f372161e4da.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.zPpztr5wp4RIr_BDqVSzsrXO_k2SEdPIMJ0Gpj8e3vA) > > 正如您在所附照片中看到的。 thank you very much!