PEB

最新推荐文章于 2023-09-25 09:02:15 发布

v1v2com

最新推荐文章于 2023-09-25 09:02:15 发布

阅读量548

点赞数

文章标签： string parameters struct basic

本文链接：https://blog.csdn.net/v1v2com/article/details/1469480

版权

typedef struct
{
DWORD   ExitStatus;
PPEB        PebBaseAddress;
DWORD AffinityMask;
DWORD   BasePriority;
ULONG   UniqueProcessId;
ULONG   InheritedFromUniqueProcessId;
}   PROCESS_BASIC_INFORMATION;

typedef struct
{
ULONG                                      AllocationSize;
ULONG                                      Unknown1;
HINSTANCE                             ProcessHinstance;
PVOID                                       ListDlls;
PPROCESS_PARAMETERS ProcessParameters;
ULONG                                     Unknown2;
HANDLE                                  Heap;
} PEB, *PPEB;

typedef struct
{
ULONG                             AllocationSize;
ULONG                               ActualSize;
ULONG                               Flags;
ULONG                              Unknown1;
UNICODE_STRING        Unknown2;
HANDLE                           InputHandle;
HANDLE                           OutputHandle;
HANDLE                         ErrorHandle;
UNICODE_STRING       CurrentDirectory;
HANDLE                          CurrentDirectoryHandle;
UNICODE_STRING       SearchPaths;
UNICODE_STRING       ApplicationName;
UNICODE_STRING     CommandLine;
PVOID                             EnvironmentBlock;
ULONG                            Unknown[9];
UNICODE_STRING      Unknown3;
UNICODE_STRING      Unknown4;
UNICODE_STRING      Unknown5;
UNICODE_STRING       Unknown6;
} PROCESS_PARAMETERS, *PPROCESS_PARAMETERS;