Difference between revisions of "Techwiki:Win32k/HEAD"
(→References) |
|||
| (5 intermediate revisions by 2 users not shown) | |||
| Line 6: | Line 6: | ||
DWORD cLockObj; | DWORD cLockObj; | ||
} HEAD, *PHEAD; | } HEAD, *PHEAD; | ||
| − | + | ||
typedef struct _THROBJHEAD | typedef struct _THROBJHEAD | ||
{ | { | ||
| Line 13: | Line 13: | ||
} THROBJHEAD, *PTHROBJHEAD; | } THROBJHEAD, *PTHROBJHEAD; | ||
// | // | ||
| − | typedef struct | + | typedef struct _THRDESKHEAD |
{ | { | ||
THROBJHEAD; | THROBJHEAD; | ||
| − | PDESKTOP | + | PDESKTOP rpdesk; |
| − | PVOID | + | PVOID pSelf; // points to the kernel mode address |
| − | } | + | } THRDESKHEAD, *PTHRDESKHEAD; |
| − | + | ||
typedef struct _PROCOBJHEAD | typedef struct _PROCOBJHEAD | ||
{ | { | ||
| Line 26: | Line 26: | ||
} PROCOBJHEAD, *PPROCOBJHEAD; | } PROCOBJHEAD, *PPROCOBJHEAD; | ||
// | // | ||
| − | typedef struct | + | typedef struct _PROCDESKHEAD |
| + | { | ||
| + | PROCOBJHEAD; | ||
| + | PDESKTOP rpdesk; | ||
| + | PVOID pSelf; | ||
| + | } PROCDESKHEAD, *PPROCDESKHEAD; | ||
| + | |||
| + | typedef struct _PROCMARKHEAD | ||
{ | { | ||
PROCOBJHEAD; | PROCOBJHEAD; | ||
| − | + | PPROCESSINFO ppi; | |
| − | + | } PROCMARKHEAD, *PPROCMARKHEAD; | |
| − | } | ||
===References=== | ===References=== | ||
* http://chpie.tistory.com/entry/Blocking-Global-message-hook | * http://chpie.tistory.com/entry/Blocking-Global-message-hook | ||
* http://blog.csdn.net/norsd/archive/2006/08/01/1007583.aspx | * http://blog.csdn.net/norsd/archive/2006/08/01/1007583.aspx | ||
| − | * Windows Symbol files, userkdx.dll, !dso | + | * Windows Symbol files, userkdx.dll, !dso, W7U symbols |
Latest revision as of 01:57, 15 January 2010
Head structures.
typedef struct _HEAD
{
HANDLE h;
DWORD cLockObj;
} HEAD, *PHEAD;
typedef struct _THROBJHEAD
{
HEAD;
PTHREADINFO pti;
} THROBJHEAD, *PTHROBJHEAD;
//
typedef struct _THRDESKHEAD
{
THROBJHEAD;
PDESKTOP rpdesk;
PVOID pSelf; // points to the kernel mode address
} THRDESKHEAD, *PTHRDESKHEAD;
typedef struct _PROCOBJHEAD
{
HEAD;
DWORD hTaskWow;
} PROCOBJHEAD, *PPROCOBJHEAD;
//
typedef struct _PROCDESKHEAD
{
PROCOBJHEAD;
PDESKTOP rpdesk;
PVOID pSelf;
} PROCDESKHEAD, *PPROCDESKHEAD;
typedef struct _PROCMARKHEAD
{
PROCOBJHEAD;
PPROCESSINFO ppi;
} PROCMARKHEAD, *PPROCMARKHEAD;
References
- http://chpie.tistory.com/entry/Blocking-Global-message-hook
- http://blog.csdn.net/norsd/archive/2006/08/01/1007583.aspx
- Windows Symbol files, userkdx.dll, !dso, W7U symbols
