【首发】一个API有亿个功能（NtQuerySystemInformation）

空竹 · 发表于 2023-1-24 10:06:56

改成

.版本 2

强制交换变量 (p_structure.Module [i].ImageName, BufferData [1])

空竹 · 发表于 2023-1-24 09:54:10

.版本 2

强制交换变量 (p_structure.Module [i].ImageName, BufferData)

第一个参数是数组，如何解决..

空竹 · 发表于 2023-1-24 09:47:41

以前根本不懂什么NT，现在才发现了这么多极品贴

胖虎O · 发表于 2022-12-1 19:04:27

感谢分享了

互斥体 · 发表于 2022-11-18 20:57:08

大佬每次都开源一些逆天的代码

互斥体 · 发表于 2022-11-18 20:56:35

牛逼plus yyds

zhongyayong · 发表于 2022-11-6 04:03:35

不是84种功能么?没有92种吧

typedef enum _SYSTEM_INFORMATION_CLASS{
SystemBasicInformation,
SystemProcessorInformation,             // obsolete...delete
SystemPerformanceInformation,
SystemTimeOfDayInformation,
SystemPathInformation,
SystemProcessInformation,             //系统进程信息
SystemCallCountInformation,
SystemDeviceInformation,
SystemProcessorPerformanceInformation,
SystemFlagsInformation,
SystemCallTimeInformation,
SystemModuleInformation,    //系统模块
SystemLocksInformation,
SystemStackTraceInformation,
SystemPagedPoolInformation,
SystemNonPagedPoolInformation,
SystemHandleInformation,
SystemObjectInformation,
SystemPageFileInformation,
SystemVdmInstemulInformation,
SystemVdmBopInformation,
SystemFileCacheInformation,
SystemPoolTagInformation,
SystemInterruptInformation,
SystemDpcBehaviorInformation,
SystemFullMemoryInformation,
SystemLoadGdiDriverInformation,
SystemUnloadGdiDriverInformation,
SystemTimeAdjustmentInformation,
SystemSummaryMemoryInformation,
SystemMirrorMemoryInformation,
SystemPerformanceTraceInformation,
SystemObsolete0,
SystemExceptionInformation,
SystemCrashDumpStateInformation,
SystemKernelDebuggerInformation,
SystemContextSwitchInformation,
SystemRegistryQuotaInformation,
SystemExtendServiceTableInformation,
SystemPrioritySeperation,
SystemVerifierAddDriverInformation,
SystemVerifierRemoveDriverInformation,
SystemProcessorIdleInformation,
SystemLegacyDriverInformation,
SystemCurrentTimeZoneInformation,
SystemLookasideInformation,
SystemTimeSlipNotification,
SystemSessionCreate,
SystemSessionDetach,
SystemSessionInformation,
SystemRangeStartInformation,
SystemVerifierInformation,
SystemVerifierThunkExtend,
SystemSessionProcessInformation,
SystemLoadGdiDriverInSystemSpace,
SystemNumaProcessorMap,
SystemPrefetcherInformation,
SystemExtendedProcessInformation,
SystemRecommendedSharedDataAlignment,
SystemComPlusPackage,
SystemNumaAvailableMemory,
SystemProcessorPowerInformation,
SystemEmulationBasicInformation,//=SystemBasicInformation
SystemEmulationProcessorInformation,//=SystemProcessorInformation
SystemExtendedHandleInformation,
SystemLostDelayedWriteInformation,
SystemBigPoolInformation,
SystemSessionPoolTagInformation,
SystemSessionMappedViewInformation,
SystemHotpatchInformation,
SystemObjectSecurityMode,
SystemWatchdogTimerHandler,
SystemWatchdogTimerInformation,
SystemLogicalProcessorInformation,
SystemWow64SharedInformation,
SystemRegisterFirmwareTableInformationHandler,
SystemFirmwareTableInformation,
SystemModuleInformationEx,
SystemVerifierTriageInformation,
SystemSuperfetchInformation,
SystemMemoryListInformation,
SystemFileCacheInformationEx,
SystemPageMemoryInformation = 123,//自定义
SystemPolicyInformation = 134,
} SYSTEM_INFORMATION_CLASS, *PSYSTEM_INFORMATION_CLASS;

liaoxiaohu · 发表于 2022-10-29 08:30:55

6666666666666666666666

哈师大 · 发表于 2022-10-16 19:21:59

大佬还是大佬，真的赞

StarAdmire · 发表于 2022-10-7 20:00:44

Nt.e (84.24 KB, 下载次数: 358) 太牛了

		自动登录	找回密码
密码			注册

[易源码分享] 【首发】一个API有亿个功能（NtQuerySystemInformation）