- 博客(7)
- 收藏
- 关注
RSS订阅原创 PEB
typedef struct{ DWORD ExitStatus; PPEB PebBaseAddress; DWORD AffinityMask; DWORD BasePriority; ULONG UniqueProcessId; ULONG InheritedFromUniqueProcessId;} PROCESS_BASIC_INFORMATIO
2006-12-30 17:10:00
539
原创 Obtain current process ID
Im just too stupid. I want to find how to get current process id ,but it took me a long time. HANDLE hProc = GetCurrentProcess() ; DWORD dwId = GetProcessId(hProc );
2006-12-30 16:44:00
478
转载 Heap
Every process has serial heaps. Heap structure is as this: copy from heap.h of Win2K source code. Maybe Microsofe only tell us that can get HEAP_ENTRY with HeapWak function. But its mislea
2006-11-29 16:54:00
547
转载 Inside the Native API
Inside the Native APICopyright © 1998-2004 Mark RussinovichLast Updated: Last updated November 23, 2004 IntroductionVirtually everybody familiar with NT has at the minimum heard that there is a
2006-11-28 19:29:00
855
转载 Windows Internels 4th Edition --Just a collection
1. System component Component Processor Execution Responsibilities
2006-11-28 15:33:00
573
转载 It JUST is a copy.(About Keyboard Driver)
From this, we can conclude that kbdclass is a class filter driver. Other examples of class filter drivers are mouclass (for mice) and irenum (for infrared devices).The other type of class driver is
2006-11-24 14:25:00
612
原创 Time For Writing
Today is Monday.Task is over. Its time for writing. My boss hasnt arrange task to me. So i put my free time in API HOOK.
2006-11-06 12:47:00
451
空空如也
空空如也
TA创建的收藏夹 TA关注的收藏夹
TA关注的人