zhoujiamurong的个人空间

zhoujiamurong：有更好的办法吗？我觉得这样虽然繁琐，但是也别无它法，静态反汇编有这些方便许多。(2008-06-04 16:06)

回复

pk8995： 怎么有人跟我干一样的事…… 我是偷偷的干，你还发到网上了。 说实话这样是不是很笨……(2008-06-04 11:33)

回复

zhoujiamurong：typedef struct _DEVICE_CAPABILITIES { USHORT Size;//0x00 USHORT Version; //0x02 // the version documented here is version 1 ///...(2008-05-08 17:04)

回复

zhoujiamurong：typedef struct _DRIVER_OBJECT { CSHORT Type;0x00 CSHORT Size;0x02 PDEVICE_OBJECT DeviceObject;0x04 ULONG Flags;0x08 PVO...(2008-04-13 09:21)

回复

zhoujiamurong：typedef struct _LIST_ENTRY { struct _LIST_ENTRY *Flink; struct _LIST_ENTRY *Blink; }LIST_ENTRY,*PLIST_ENTRY; // // Doubly-linked list...(2008-04-08 15:17)

回复

zhoujiamurong：typedef struct _IO_STACK_LOCATION { UCHAR MajorFunction;0x00 UCHAR MinorFunction;0x01 UCHAR Flags;0x02 UCHAR Control;0x03 ...(2008-04-03 15:44)

回复

asm61：打开Windbg， !dt 一下就什么都清楚了。(2008-03-27 21:26)

回复

zhoujiamurong：typedef struct _IRP { CSHORT Type; 0x00 USHORT Size; 0x02 PMDL MdlAddress;0x04 ULONG Flags;0x08 union { struct ...(2008-03-26 15:54)

回复

zhoujiamurong：typedef struct _IO_STATUS_BLOCK { union { NTSTATUS Status; PVOID Pointer; };0x00 ULONG_PTR Information;0x04 } I...(2008-03-26 15:50)

回复

zhoujiamurong：typedef struct _LIST_ENTRY { struct _LIST_ENTRY *Flink; struct _LIST_ENTRY *Blink; } LIST_ENTRY, *PLIST_ENTRY, *RESTRICTED_POINTER PRL...(2008-03-26 15:48)

回复