导航

11 2013 档案

键盘过滤驱动

摘要：1 #include 2 #include 3 #include 4 5 DRIVER_INITIALIZE DriverEntry; 6 DRIVER_UNLOAD UnloadDevice; 7 IO_COMPLETION_ROUTINE ReadCompleteCallBack; 8 DRIVER_DISPATCH DispatchGen; 9 __drv_dispatchType(IRP_MJ_POWER) DRIVER_DISPATCH DispatchPower; 10 __drv_disp... 阅读全文

posted @ 2013-11-29 13:16 codeape 阅读(658) 评论(0) 推荐(0)

ring0获取指定进程的PEB

摘要：#ifndef TYPEDEF_H#define TYPEDEF_Htypedef PPEB (__stdcall *P_PsGetProcessPeb)(PEPROCESS);typedef unsigned char BYTE;typedef struct _RTL_USER_PROCESS_PARAMETERS { BYTE Reserved1[16]; PVOID Reserved2[10]; UNICODE_STRING ImagePathName; UNICODE_STRING CommandLine;} RTL_USER_PROCESS_PAR... 阅读全文

posted @ 2013-11-29 13:15 codeape 阅读(3384) 评论(0) 推荐(0)