diff --git a/physmeme-lib/kernel_ctx/kernel_ctx.h b/physmeme-lib/kernel_ctx/kernel_ctx.h index 0c79a9a..8f82162 100644 --- a/physmeme-lib/kernel_ctx/kernel_ctx.h +++ b/physmeme-lib/kernel_ctx/kernel_ctx.h @@ -80,9 +80,9 @@ namespace physmeme mutable std::atomic psyscall_func; // - // you can edit this how you choose, im hooking NtTraceControl. + // you can edit this how you choose, im hooking NtShutdownSystem. // - const std::pair syscall_hook = { "NtTraceControl", "ntdll.dll" }; + const std::pair syscall_hook = { "NtShutdownSystem", "ntdll.dll" }; // // offset of function into a physical page