|
|
|
[讨论]准备参加今年的HITCON 2014
给赞,支持,刚刚转正的菜鸟。哈哈 |
|
[分享]才发现我的注册时间这么早
路过看注册大神 |
|
打开文件时ntcreatefile与ntopenfile的操作
撒刁,你倒像个J8,就这样吧,不想扯了,浪费时间。拜拜 |
|
打开文件时ntcreatefile与ntopenfile的操作
撒刁。看下另外一个日志文件,就知道了。自己没看,怪别人。逗 |
|
打开文件时ntcreatefile与ntopenfile的操作
恩。。应该是这样子的,先试试吧,实在不知道怎么判断 |
|
打开文件时ntcreatefile与ntopenfile的操作
你是撒刁么。不是因为多进程调用的。不会问一下,怎么了。骂人就有理了么,,撒刁 |
|
|
|
打开文件时ntcreatefile与ntopenfile的操作
up 这是进程和线程的信息 00000001 0.00000000 \??\C:\test\1 (null) Enter MyNtOpenFile. CurrentProcessId:1672, GetCurrentThreadId:2000 00000002 0.00114159 0 00000003 0.01284898 \??\C:\test\1\1.txt (null) Enter MyNtOpenFile. CurrentProcessId:1672, GetCurrentThreadId:2000 00000004 0.02371445 0 00000005 0.03692894 \??\C:\test\1\1.txt (null) Enter MyNtCreateFile. CurrentProcessId:1672, GetCurrentThreadId:2000 00000006 0.04815324 0 00000007 0.05981578 \??\C:\test\1\1.txt (null) Enter MyNtCreateFile. CurrentProcessId:1672, GetCurrentThreadId:2000 00000008 0.07061990 0 00000009 0.08194691 \??\C:\test\1\1.txt:Raec25ph4sudbf0hAaq5ehw3Nf:$DATA (null) Enter MyNtCreateFile. CurrentProcessId:1672, GetCurrentThreadId:2000 00000010 0.09322483 c0000034 00000011 0.10467251 \??\C:\test\1\1.txt (null) Enter MyNtCreateFile. CurrentProcessId:1672, GetCurrentThreadId:2000 00000012 0.11659848 0 00000013 0.12814717 \??\C:\test\1\1.txt:Raec25ph4sudbf0hAaq5ehw3Nf:$DATA (null) Enter MyNtCreateFile. CurrentProcessId:1672, GetCurrentThreadId:2000 00000014 0.13940752 c0000034 00000015 0.39654809 \??\C:\test\1 (null) Enter MyNtOpenFile. CurrentProcessId:1672, GetCurrentThreadId:2000 00000016 0.40782446 0 00000017 0.41977468 \??\C:\test\1\1.txt (null) Enter MyNtOpenFile. CurrentProcessId:1672, GetCurrentThreadId:2000 00000018 0.43123281 0 00000019 0.44324383 \??\C:\test\1 (null) Enter MyNtOpenFile. CurrentProcessId:1008, GetCurrentThreadId:924 00000020 0.45444921 0 00000021 0.47763282 \??\C:\test\1\1.txt (null) Enter MyNtCreateFile. CurrentProcessId:1672, GetCurrentThreadId:2000 00000022 0.48922393 0 00000023 0.50066388 \??\C:\test\1\ (null) Enter MyNtOpenFile. CurrentProcessId:1672, GetCurrentThreadId:2000 00000024 0.51182622 c00000ba 00000025 0.52280772 \??\C:\test\1\ (null) Enter MyNtCreateFile. CurrentProcessId:1672, GetCurrentThreadId:2000 00000026 0.53413242 0 00000027 0.54560220 \??\C:\test\1\ (null) Enter MyNtOpenFile. CurrentProcessId:1672, GetCurrentThreadId:2000 00000028 0.55650324 0 00000029 0.61625761 \??\C:\test\1 (null) Enter MyNtCreateFile. CurrentProcessId:1672, GetCurrentThreadId:2000 00000030 0.62767196 0 00000031 0.63928980 \??\C:\test\ (null) Enter MyNtCreateFile. CurrentProcessId:1672, GetCurrentThreadId:2000 00000032 0.65022701 0 00000033 0.84337902 \??\C:\test\1\1.txt (null) Enter MyNtOpenFile. CurrentProcessId:1008, GetCurrentThreadId:924 00000034 0.85423434 0 00000035 0.86680222 \??\C:\test\1\1.txt (null) Enter MyNtCreateFile. CurrentProcessId:1008, GetCurrentThreadId:924 00000036 0.87878573 0 00000037 0.88129079 \??\C:\test\1\1.txt (null) Enter MyNtOpenFile. CurrentProcessId:1008, GetCurrentThreadId:924 00000038 0.89379406 0 00000039 1.09582496 \??\C:\test\1\1.txt (null) Enter MyNtOpenFile. CurrentProcessId:1672, GetCurrentThreadId:440 00000040 1.10705018 0 |
|
|
|
[分享]睡了好久,终于转正了
有点兴奋的感觉。你老也是元老了。。 |
操作理由
RANk
{{ user_info.golds == '' ? 0 : user_info.golds }}
雪币
{{ experience }}
课程经验
{{ score }}
学习收益
{{study_duration_fmt}}
学习时长
基本信息
荣誉称号:
{{ honorary_title }}
能力排名:
No.{{ rank_num }}
等 级:
LV{{ rank_lv-100 }}
活跃值:
在线值:
浏览人数:{{ visits }}
最近活跃:{{ last_active_time }}
注册时间:{{ user_info.create_date_jsonfmt }}
勋章
兑换勋章
证书
证书查询 >
能力值