2009 年 4月 27 日随笔档案 - adward

得到i8042prt!I8042KeyboardInterruptService 地址的好方法

摘要：键盘钩子比较麻烦的就是得到KeyboardInterruptService 的地址，有什么方法呢？lkd> !idt Dumping IDT: 37: 806d0728 hal!PicSpuriousService37 3d: 806d1b70 hal!HalpApcInterrupt 41: 806d19cc hal!HalpDispatchInterrupt 50: 806d0800 hal!... 阅读全文

posted @ 2009-04-27 23:18 adward 阅读(1237) 评论(1) 推荐(0) 编辑

Keyboard Interrupt Hook safely using KINTERRUPT

摘要： Keyboard Interrupt Hook safely using KINTERRUPT By: chpie http://www.rootkit.com/newsread.php?newsid=561 [ Keyboard Interrupt Hook safely using KINTERRUPT ] Date : Sun. 2006. 9. 3 Author : chpie... 阅读全文

posted @ 2009-04-27 23:17 adward 阅读(700) 评论(0) 推荐(0) 编辑

The NT Insider:Stop Interrupting Me -- Of PICs and APICs

摘要： The NT Insider:Stop Interrupting Me -- Of PICs and APICs 创建时间：2005-03-16 文章属性：翻译文章提交：tombkeeper (t0mbkeeper_at_hotmail.com) The NT Insider:Stop Interrupting Me -- Of PICs and APICs 董岩译 greatdong... 阅读全文

posted @ 2009-04-27 22:57 adward 阅读(276) 评论(0) 推荐(0) 编辑

从IRQ到IRQL(APIC版)

摘要： https://www.xfocus.net/bbs/index.php?act=ST&f=2&t=45502&page=all#entry230011 从IRQ到IRQL(APIC版) ... 阅读全文

posted @ 2009-04-27 22:55 adward 阅读(565) 评论(0) 推荐(0) 编辑

Debugging a Stack Overflow

摘要： Debugging a Stack Overflow OSR Staff | Published: 16-Jul-03| Modified: 22-Jul-03 We recently were testing the latest version of our File System Filter Driver Development Kit and in the process of d... 阅读全文

posted @ 2009-04-27 22:54 adward 阅读(788) 评论(0) 推荐(0) 编辑

Pardon the Interruption -- Interrupt Handling Changes in Windows

摘要： For the first time in the history of NT, there are some big changes coming to interrupt handling. In this article, we’ll take a brief look at what some of those changes are planned to be. The timefra... 阅读全文

posted @ 2009-04-27 22:52 adward 阅读(569) 评论(0) 推荐(0) 编辑

Stop Interrupting Me -- Of PICs and APICs（转）

摘要： Stop Interrupting Me -- Of PICs and APICs The NT Insider, Vol 10, Issue 2, Mar-Apr 2003 | Published: 15-Apr-03| Modified: 15-May-03 Although Windows is designed to be able to run on multiple plat... 阅读全文

posted @ 2009-04-27 22:51 adward 阅读(1121) 评论(0) 推荐(0) 编辑

不抽烟，少喝酒，多运动，多思考，多努力