[ Pobierz całość w formacie PDF ]
ATOM_INFORMATION_CLASS ....................................................................................... 545
AtomBasicInformation .......................................................................................................... 545
AtomListInformation............................................................................................................. 545
ZwSetLdtEntries .................................................................................................................... 546
ZwVdmControl...................................................................................................................... 547
Nie zaimplementowane usługi systemowe............................................................................ 548
Przykład A.1. Implementacja NtQueryEvent dla trybu jądra................................................ 555
Przykład A.2. Dynamiczne wiązanie z ntdll.dll .................................................................... 556
KiTrap03................................................................................................................................ 559
KiTrap04................................................................................................................................ 560
KiGetTickCount..................................................................................................................... 560
KiCallbackReturn .................................................................................................................. 560
KiSetLowWaitHighThread.................................................................................................... 560
KiDebugService..................................................................................................................... 560
KiSystemService.................................................................................................................... 561
Przykład C.1. Pseudokod procedury KiDispatchException .................................................. 563
Przykład C.2. Pseudokod procedury KiUserExceptionDispatcher ....................................... 566
Debugger trybu jÄ…dra ............................................................................................................. 566
Przykład C.3. Pseudokod procedury DebugService.............................................................. 567
Debuggery trybu jÄ…dra ........................................................................................................... 568
DEBUG_MESSAGE............................................................................................................. 568
Przekazywanie komunikatów debuggowania........................................................................ 569
Konsekwencje mechanizmu przekazywania komunikatów .................................................. 569
OutputDebugString................................................................................................................ 570
Zledzenie wywołań procedur eksportowanych bibliotek DLL ............................................. 570
PrzykÅ‚ad C.4. Narz¹ dzie Å›ledzenia ........................................................................................ 570
NTFS_RECORD_HEADER ................................................................................................. 581
FILE_RECORD_HEADER .................................................................................................. 582
ATTRIBUTE ......................................................................................................................... 584
RESIDENT_ATTRIBUTE.................................................................................................... 585
NONRESIDENT_ATTRIBUTE ........................................................................................... 586
AttributeStandardInformation................................................................................................ 587
AttributeAttributeList ............................................................................................................ 589
AttributeFileName ................................................................................................................. 590
AttributeObjectId................................................................................................................... 592
AttributeSecurityDescriptor................................................................................................... 593
AttributeVolumeName .......................................................................................................... 593
AttributeVolumeInformation................................................................................................. 593
AttributeData ......................................................................................................................... 594
AttributeIndexRoot ................................................................................................................ 594
AttributeIndexAllocation....................................................................................................... 595
DIRECTORY_INDEX .......................................................................................................... 596
DIRECTORY_ENTRY ......................................................................................................... 596
AttributeBitmap ..................................................................................................................... 597
AttributeReparsePoint............................................................................................................ 598
AttributeEaInformation.......................................................................................................... 598
AttributeEA............................................................................................................................ 599
AttributePropertySet .............................................................................................................. 600
AttributeLoggedUtilityStream............................................................................................... 600
[ Pobierz całość w formacie PDF ]