Description: 图形显示CPU内存利用率
1.本程序分两种情况来获取CPU的利用率，NT下利用ntdll.dll中没有公开的API: NtQuerySystemInformation， 9x下利用注册表来获取CPU的利用率
2.通过 GlobalMemoryStatus来获取内存的使用情况
3.程序中封装了两个类 CcpuUsgesCtl和CmemUsgesCtl，使用这两这个类可以实现CPU，内存利用率的定时读取，并以图形化的形式显示出来-graphics CPU utilization of a memory. The procedure to obtain two of the CPU utilization, NT not use Base open API : NtQuerySystemInformation. 9x use the registry to obtain two CPU utilization. through GlobalMemoryStatu s access memory to the use of the three. proceedings of the two types of packages and CmemU CcpuUsgesCtl sgesCtl, the use of these two categories can achieve the CPU, memory utilization regularly read, and in graphical form displayed Platform: |
Size: 144853 |
Author:王勃 |
Hits:
Description: 该代码为我学习winnt内核时所写，主要功能是在ring3下通过DeviceIoControl与驱动进行通信，获取内核的数据以及sdt，idt信息等。并实现了hook NtQuerySystemInformation函数来实现进程隐藏的功能-The code for the kernel, I am learning winnt wrote, Its main function is in ring3 through DeviceIoControl communication with the driver. access to the kernel and sdt data, the information loop. And the achievement of the hook function to achieve NtQuerySystemInformation implicit process possession of the function Platform: |
Size: 55181 |
Author:左手 |
Hits:
Description: 图形显示CPU内存利用率
1.本程序分两种情况来获取CPU的利用率，NT下利用ntdll.dll中没有公开的API: NtQuerySystemInformation， 9x下利用注册表来获取CPU的利用率
2.通过 GlobalMemoryStatus来获取内存的使用情况
3.程序中封装了两个类 CcpuUsgesCtl和CmemUsgesCtl，使用这两这个类可以实现CPU，内存利用率的定时读取，并以图形化的形式显示出来-graphics CPU utilization of a memory. The procedure to obtain two of the CPU utilization, NT not use Base open API : NtQuerySystemInformation. 9x use the registry to obtain two CPU utilization. through GlobalMemoryStatu s access memory to the use of the three. proceedings of the two types of packages and CmemU CcpuUsgesCtl sgesCtl, the use of these two categories can achieve the CPU, memory utilization regularly read, and in graphical form displayed Platform: |
Size: 144384 |
Author:王勃 |
Hits:
Description: 该代码为我学习winnt内核时所写，主要功能是在ring3下通过DeviceIoControl与驱动进行通信，获取内核的数据以及sdt，idt信息等。并实现了hook NtQuerySystemInformation函数来实现进程隐藏的功能-The code for the kernel, I am learning winnt wrote, Its main function is in ring3 through DeviceIoControl communication with the driver. access to the kernel and sdt data, the information loop. And the achievement of the hook function to achieve NtQuerySystemInformation implicit process possession of the function Platform: |
Size: 55296 |
Author:左手 |
Hits:
Description: 使用内核函数NtQuerySystemInformation做的进程显示程序，-The use of the kernel function of the process of doing NtQuerySystemInformation display program, Platform: |
Size: 35840 |
Author: |
Hits:
Description: Fport并没有调用socket函数来获得socket属性，这说明有一个更简单直接的方法可以从SOCKET句柄中得到端口、协议等信息，可惜我不知道，此为疑点三。不过令人欣慰的是，我写出来的Gport可以在Win2K的非管理员用户下运行，此时，仅能获得本用户所有进程的端口，这大概是Fport所没有具备的功能。
-Fport did not call the socket function socket to obtain property, this description has a more simple and direct method can be obtained from the SOCKET handle port, protocol information, etc. Unfortunately, I do not know, this is three points. But good news is that I write out Gport can Win2K non-administrator user run, At this point, the only access to all processes of the user ports, which are perhaps not Fport features. Platform: |
Size: 1024 |
Author:lix |
Hits:
Description: a simple demo program uses NATIVE APIs ( that is , from NTDLL.DLL, espicially NtQuerySystemInformation API) good to learn how to use NATIVE APIs
this demo shows current memory usage, pageing status and freedisk space. Platform: |
Size: 234496 |
Author:jackal |
Hits:
Description: 这是介绍如何在Windows驱动层 HOOK NtQuerySystemInformation内核 函数的文章。 这篇文章超级详细的介绍了这个函数的每一个参数以及用法。-This is how the Windows kernel function driver layer HOOK NtQuerySystemInformation article. This article describes the super-detailed each parameter of this function and usage. Platform: |
Size: 55296 |
Author:汤文 |
Hits:
Description: code for all processes running at the time
API uses native (NtQuerySystemInformation)
compiled with MASM
the code is for 32 bytes can be changed to 64 bytes:) Platform: |
Size: 1024 |
Author:MUTANT |
Hits:
Search - NtQuerySystemInformation