Update README.md

2026-08-12 20:31:34 +08:00 · 2022-08-23 23:28:44 +08:00
parent 881bf57508
commit c0f4578179
1 changed files with 15 additions and 0 deletions
@@ -11,6 +11,11 @@ NTAPI系统关键进程视频源代码，用于演示未公开的API
 VOID RtlSetProcessIsCritical(BOOLEAN NewValue, PBOOLEAN OldValue, BOOLEAN IsWinlogon);
 ```

+### 函数指针类型
+```c++
+typedef VOID(WINAPI* typeRtlSetProcessIsCritical)(BOOLEAN, PBOOLEAN, BOOLEAN);
+```
+
 ### 所在DLL
 - ntdll.dll

@@ -21,6 +26,11 @@ VOID RtlSetProcessIsCritical(BOOLEAN NewValue, PBOOLEAN OldValue, BOOLEAN IsWinl
 VOID RtlSetThreadIsCritical(BOOLEAN NewValue, PBOOLEAN OldValue, BOOLEAN IsWinlogon);
 ```

+### 函数指针类型
+```c++
+typedef VOID(WINAPI* typeRtlSetThreadIsCritical)(BOOLEAN, PBOOLEAN, BOOLEAN);
+```
+
 ### 所在DLL
 - ntdll.dll

@@ -31,6 +41,11 @@ VOID RtlSetThreadIsCritical(BOOLEAN NewValue, PBOOLEAN OldValue, BOOLEAN IsWinlo
 NTSTATUS NtQueryInformationProcess(IN HANDLE ProcessHandle, IN PROCESSINFOCLASS ProcessInformationClass, OUT PVOID ProcessInformation, IN ULONG ProcessInformationLength, OUT PULONG ReturnLength);
 ```

+### 函数指针类型
+```c++
+typedef NTSTATUS(__kernel_entry* typeNtQueryInformationProcess)(IN HANDLE, IN PROCESSINFOCLASS, OUT PVOID, IN ULONG, OUT PULONG);
+```
+
 ### 未导出类型
 ```c++
 enum PROCESSINFOCLASS