不抽烟,少喝酒,多运动,多思考,多努力

仅仅是为了记录自己想记下的一些东西,方便自己以后查看

2009年4月27日

得到i8042prt!I8042KeyboardInterruptService 地址的好方法

摘要: 键盘钩子比较麻烦的就是得到KeyboardInterruptService 的地址,有什么方法呢?lkd> !idt Dumping IDT: 37: 806d0728 hal!PicSpuriousService37 3d: 806d1b70 hal!HalpApcInterrupt 41: 806d19cc hal!HalpDispatchInterrupt 50: 806d0800 hal!... 阅读全文

posted @ 2009-04-27 23:18 adward 阅读(1222) 评论(1) 推荐(0) 编辑
Keyboard Interrupt Hook safely using KINTERRUPT

摘要: Keyboard Interrupt Hook safely using KINTERRUPT By: chpie http://www.rootkit.com/newsread.php?newsid=561 [ Keyboard Interrupt Hook safely using KINTERRUPT ] Date : Sun. 2006. 9. 3 Author : chpie... 阅读全文

posted @ 2009-04-27 23:17 adward 阅读(696) 评论(0) 推荐(0) 编辑
The NT Insider:Stop Interrupting Me -- Of PICs and APICs

摘要: The NT Insider:Stop Interrupting Me -- Of PICs and APICs 创建时间:2005-03-16 文章属性:翻译 文章提交:tombkeeper (t0mbkeeper_at_hotmail.com) The NT Insider:Stop Interrupting Me -- Of PICs and APICs 董岩 译 greatdong... 阅读全文

posted @ 2009-04-27 22:57 adward 阅读(274) 评论(0) 推荐(0) 编辑
从IRQ到IRQL(APIC版)

摘要: https://www.xfocus.net/bbs/index.php?act=ST&f=2&t=45502&page=all#entry230011 从IRQ到IRQL(APIC版) ... 阅读全文

posted @ 2009-04-27 22:55 adward 阅读(562) 评论(0) 推荐(0) 编辑
Debugging a Stack Overflow

摘要: Debugging a Stack Overflow OSR Staff | Published: 16-Jul-03| Modified: 22-Jul-03 We recently were testing the latest version of our File System Filter Driver Development Kit and in the process of d... 阅读全文

posted @ 2009-04-27 22:54 adward 阅读(785) 评论(0) 推荐(0) 编辑
Pardon the Interruption -- Interrupt Handling Changes in Windows

摘要: For the first time in the history of NT, there are some big changes coming to interrupt handling. In this article, we’ll take a brief look at what some of those changes are planned to be. The timefra... 阅读全文

posted @ 2009-04-27 22:52 adward 阅读(568) 评论(0) 推荐(0) 编辑
Stop Interrupting Me -- Of PICs and APICs(转)

摘要: Stop Interrupting Me -- Of PICs and APICs The NT Insider, Vol 10, Issue 2, Mar-Apr 2003 | Published: 15-Apr-03| Modified: 15-May-03 Although Windows is designed to be able to run on multiple plat... 阅读全文

posted @ 2009-04-27 22:51 adward 阅读(1117) 评论(0) 推荐(0) 编辑