我已经知道了KernelCallbackTable在peb中,
但是我在网上搜索出来的资料上都说,KernelCallbackTable数组有几十个上百个函数.
而<windows内核情景分析>里说的KernelCallbackTable里只有7个函数.
而我看ReactOS的源码,user32.dll中初始化KernelCallbackTable的地方.
也的确只初始化了7个函数.
我想知道KernelCallbackTable里面到底有多少个函数啊?
///////////////////////////////////////////////////////////////////////////////////////////////////////
一说:
USER32_CALLBACK_WINDOWPROC
USER32_CALLBACK_SENDASYNCPROC
USER32_CALLBACK_LOADSYSMENUTEMPLATE
USER32_CALLBACK_LOADDEFAULTCURSORS
[USER32_CALLBACK_HOOKPROC
USER32_CALLBACK_EVENTPROCUSER32_CALLBACK_LOADMENU
USER32_CALLBACK_CLIENTTHREADSTARTUP
二说:
01 fnCOPYDATA
02 fnCOPYGLOBALDATA
03 fnDWORD
04 fnNCDESTROY
05 fnDWORDOPTINLPMSG
06 fnINOUTDRAG
07 fnGETTEXTLENGTHS
08 fnINCNTOUTSTRING
09 fnPOUTLPINT
10 fnINLPCOMPAREITEMSTRUCT
11 fnINLPCREATESTRUCT
12 fnINLPDELETEITEMSTRUCT
13 fnINLPDRAWITEMSTRUCT
14 fnINLPHLPSTRUCT
15 fnINLPHLPSTRUCT
16 fnINLPMDICREATESTRUCT
17 fnINOUTLPMEASUREITEMSTRUCT
18 fnINLPWINDOWPOS
19 fnINOUTLPPOINT5
20 fnINOUTLPSCROLLINFO
21 fnINOUTLPRECT
22 fnINOUTNCCALCSIZE
23 fnINOUTLPSCROLLINFO
24 fnINPAINTCLIPBRD
25 fnINSIZECLIPBRD
26 fnINDESTROYCLIPBRD
27 fnINSTRINGNULL
28 fnINSTRINGNULL
29 fnINDEVICECHANGE
30 fnINOUTNEXTMENU
31 fnLOGONNOTIFY
32 fnOPTOUTLPDWORDOPTOUTLPDWORD
33 fnOPTOUTLPDWORDOPTOUTLPDWORD
34 fnOUTDWORDINDWORD
35 fnOUTLPRECT
36 fnPOUTLPINT
37 fnINLPHLPSTRUCT
38 fnPOUTLPINT
39 fnSENTDDEMSG
40 fnINOUTSTYLECHANGE
41 fnHkINDWORD
42 fnHkINLPCBTACTIVATESTRUCT
43 fnHkINLPCBTCREATESTRUCT
44 fnHkINLPDEBUGHOOKSTRUCT
45 fnHkINLPMOUSEHOOKSTRUCTEX
46 fnHkINLPKBDLLHOOKSTRUCT
47 fnHkINLPMSLLHOOKSTRUCT
48 fnHkINLPMSG
49 fnHkINLPRECT
50 fnHkOPTINLPEVENTMSG
51 ClientCopyDDEIn1
52 ClientCopyDDEIn2
53 ClientCopyDDEOut1
54 ClientCopyDDEOut2
55 ClientCopyImage
56 ClientEventCallback
57 ClientFindMnemChar
58 ClientFontSweep
59 ClientFreeDDEHandle
60 ClientFreeLibrary
61 ClientGetCharsetInfo
62 ClientGetDDEFlags
63 ClientGetDDEHookData
64 ClientGetListboxString
65 ClientGetMessageMPH
66 ClientLoadImage
67 ClientLoadLibrary
68 ClientLoadMenu
69 ClientLoadLocalT1Fonts
70 ClientLoadRemoteT1Fonts
71 ClientPSMTextOut
72 ClientLpkDrawTextEx
73 ClientExtTextOutW
74 ClientGetTextExtentPointW
75 ClientCharToWchar
76 ClientAddFontResourceW
77 ClientThreadSetup
78 ClientDeliverUserApc
79 ClientNoMemoryPopup
80 ClientMonitorEnumProc
81 ClientCallWinEventProc
82 ClientWaitMessageExMPH
83 ClientWOWGetProcModule
84 ClientWOWTask16SchedNotify
85 ClientImmLoadLayout
86 ClientImmProcessKey
87 fnIMECONTROL
88 fnINWPARAMDBCSCHAR
89 fnGETTEXTLENGTHS
90 fnINLPKDRAWSWITCHWND
91 ClientLoadStringW
92 ClientLoadOLE
93 ClientRegisterDragDrop
94 ClientRevokeDragDrop
95 fnINOUTMENUGETOBJECT
96 ClientPrinterThunk
97 fnOUTLPCOMBOBOXINFO
98 fnOUTLPSCROLLBARINFO
大牛,告诉我真相吧
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课