ps.h
上传用户:nbcables
上传日期:2007-01-11
资源大小:1243k
文件大小:1k
源码类别:

钩子与API截获

开发平台:

Visual C++

  1. typedef unsigned long NTSTATUS;
  2. typedef unsigned short USHORT;
  3. typedef unsigned long ULONG;
  4. typedef unsigned long DWORD;
  5. typedef long LONG;
  6. typedef __int64 LONGLONG;
  7. typedef struct {
  8. USHORT Length;
  9. USHORT MaxLen;
  10. USHORT *Buffer;
  11. } UNICODE_STRING;
  12. typedef struct {
  13. ULONG NextEntryDelta;
  14. ULONG ThreadCount;
  15. ULONG Reserved1[6];
  16. LARGE_INTEGER CreateTime;
  17. LARGE_INTEGER UserTime;
  18. LARGE_INTEGER KernelTime;
  19. UNICODE_STRING ProcessName;
  20. ULONG BasePriority;
  21. ULONG ProcessId;
  22. }PROCESS_INFO;
  23. typedef DWORD (WINAPI *NTQUERYSYSTEMINFORMATION)(
  24. IN ULONG SysInfoClass,
  25. IN OUT PVOID SystemInformation,
  26. IN ULONG SystemInformationLength,
  27. OUT PULONG RetLen);