|
|
|
|
|
[求助]11F6
11F6是SSDT shadow中的 |
|
[求助]关于system32文件夹自动弹出打开
猜测,你在服务中是这样启动test.exe的: 程序路径:c:\windows\system32 命令行: test.exe windows理解为 c:\windows\system32 -test.exe(成了system32的参数) 楼主上代码 |
|
[原创][求助]CreateFile 居然失败,为何
自己GetLastError看看吧…… |
|
[求助]如何知道一个程序已完全加载
The calling thread can use the WaitForInputIdle function to wait until the new process has finished its initialization and is waiting for user input with no input pending. This can be useful for synchronization between parent and child processes, because CreateProcess returns without waiting for the new process to finish its initialization. For example, the creating process would use WaitForInputIdle before trying to find a window associated with the new process. From MSDN |
|
[求助]一个奇怪的现象!
IRP_MJ_DEVICE_CONTROL的派遣例程的IRQL不一定是PASSIVE_LEVEL吧,PsCreateSystemThread放在XxxDispatchDeviceControl里当然可能会蓝…… The DispatchRead, DispatchWrite, and DispatchDeviceControl routines of lowest-level device drivers, and of intermediate drivers layered above them in the system paging path, can be called at IRQL = APC_LEVEL and in an arbitrary thread context. From MSDN |
|
[求助]关于内存清0
放在 try 块里的呀,ProbeForWrite 哪来的返回值? ? |
操作理由
RANk
{{ user_info.golds == '' ? 0 : user_info.golds }}
雪币
{{ experience }}
课程经验
{{ score }}
学习收益
{{study_duration_fmt}}
学习时长
基本信息
荣誉称号:
{{ honorary_title }}
能力排名:
No.{{ rank_num }}
等 级:
LV{{ rank_lv-100 }}
活跃值:
在线值:
浏览人数:{{ visits }}
最近活跃:{{ last_active_time }}
注册时间:{{ user_info.create_date_jsonfmt }}
勋章
兑换勋章
证书
证书查询 >
能力值