-
-
ZwQuerySystemInformation
-
发表于: 2007-6-15 00:03 4451
-
for XP
function ZwQuerySystemInformation(ASystemInformationClass: dword;
ASystemInformation: Pointer;
ASystemInformationLength: dword;
AReturnLength: pdword): dword; stdcall;
asm
pop ebp
mov eax, $AD
call @SystemCall
ret $10
@SystemCall:
mov edx, esp
sysenter
end;
for 2000
function ZwQuerySystemInformation(ASystemInformationClass: dword;
ASystemInformation: Pointer;
ASystemInformationLength: dword;
AReturnLength: pdword): dword; stdcall;
asm
pop ebp
mov eax, $97
lea edx, [esp + $04]
int $2E
ret $10
end;
这两个函数 在DELPHI中可以实现该API的效果吗?
能否转换成VC下能用的?
function ZwQuerySystemInformation(ASystemInformationClass: dword;
ASystemInformation: Pointer;
ASystemInformationLength: dword;
AReturnLength: pdword): dword; stdcall;
asm
pop ebp
mov eax, $AD
call @SystemCall
ret $10
@SystemCall:
mov edx, esp
sysenter
end;
for 2000
function ZwQuerySystemInformation(ASystemInformationClass: dword;
ASystemInformation: Pointer;
ASystemInformationLength: dword;
AReturnLength: pdword): dword; stdcall;
asm
pop ebp
mov eax, $97
lea edx, [esp + $04]
int $2E
ret $10
end;
这两个函数 在DELPHI中可以实现该API的效果吗?
能否转换成VC下能用的?
赞赏
他的文章
- [求助]函数头如何用4字节HOOK 7134
- [求助]怎么让WDK7600 生成的驱动支持W2K 4399
- [求助] NtQueryVirtualMemory总是失败 4704
- 怎么让LISTVIEW显示超过260个字符 4482
- [求助]WM6.1系统中怎么使用网络 5334
看原图
赞赏
雪币:
留言: