guaiguaiguan的个人空间

guaiguaiguan：为节省资源，老问题修改为新问题。(2007-11-23 14:50)

回复

zhangleierli：ObReferenceObjectByHandle 然后 ObQueryNameString ？(2007-11-23 13:57)

回复

guaiguaiguan：顶顶顶 (2007-11-23 13:12)

回复

WQXNETQIQI：The LDR_DATA_TABLE_ENTRY structure is defined as follows: typedef struct _LDR_DATA_TABLE_ENTRY { BYTE Reserved1[2]; LIST_ENTRY InM...(2007-11-23 13:05)

回复

guaiguaiguan：顶顶顶(2007-11-23 12:40)

回复

WQXNETQIQI：GetModuleFileName其实是 ReadProcessMemory去读peb~(2007-11-23 12:19)

回复