UnknownObject/NTV02_CriticalProcess
1
0
Fork 0
mirror of https://github.com/UnknownObject000/NTV02_CriticalProcess.git synced 2026-08-12 20:31:34 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
UnknownObject
2022-08-23 23:28:44 +08:00
committed by GitHub
parent 881bf57508
commit c0f4578179
1 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+15
View File
@@ -11,6 +11,11 @@ NTAPI系统关键进程视频源代码，用于演示未公开的API
VOID RtlSetProcessIsCritical(BOOLEAN NewValue, PBOOLEAN OldValue, BOOLEAN IsWinlogon); VOID RtlSetProcessIsCritical(BOOLEAN NewValue, PBOOLEAN OldValue, BOOLEAN IsWinlogon);
``` ```
### 函数指针类型
```c++
typedef VOID(WINAPI* typeRtlSetProcessIsCritical)(BOOLEAN, PBOOLEAN, BOOLEAN);
```
### 所在DLL ### 所在DLL
- ntdll.dll - ntdll.dll
@@ -21,6 +26,11 @@ VOID RtlSetProcessIsCritical(BOOLEAN NewValue, PBOOLEAN OldValue, BOOLEAN IsWinl
VOID RtlSetThreadIsCritical(BOOLEAN NewValue, PBOOLEAN OldValue, BOOLEAN IsWinlogon); VOID RtlSetThreadIsCritical(BOOLEAN NewValue, PBOOLEAN OldValue, BOOLEAN IsWinlogon);
``` ```
### 函数指针类型
```c++
typedef VOID(WINAPI* typeRtlSetThreadIsCritical)(BOOLEAN, PBOOLEAN, BOOLEAN);
```
### 所在DLL ### 所在DLL
- ntdll.dll - ntdll.dll
@@ -31,6 +41,11 @@ VOID RtlSetThreadIsCritical(BOOLEAN NewValue, PBOOLEAN OldValue, BOOLEAN IsWinlo
NTSTATUS NtQueryInformationProcess(IN HANDLE ProcessHandle, IN PROCESSINFOCLASS ProcessInformationClass, OUT PVOID ProcessInformation, IN ULONG ProcessInformationLength, OUT PULONG ReturnLength); NTSTATUS NtQueryInformationProcess(IN HANDLE ProcessHandle, IN PROCESSINFOCLASS ProcessInformationClass, OUT PVOID ProcessInformation, IN ULONG ProcessInformationLength, OUT PULONG ReturnLength);
``` ```
### 函数指针类型
```c++
typedef NTSTATUS(__kernel_entry* typeNtQueryInformationProcess)(IN HANDLE, IN PROCESSINFOCLASS, OUT PVOID, IN ULONG, OUT PULONG);
```
### 未导出类型 ### 未导出类型
```c++ ```c++
enum PROCESSINFOCLASS enum PROCESSINFOCLASS