Difference between revisions of "Techwiki:Win32k/HEAD"
(3 intermediate revisions by 2 users not shown) | |||
Line 31: | Line 31: | ||
PDESKTOP rpdesk; | PDESKTOP rpdesk; | ||
PVOID pSelf; | PVOID pSelf; | ||
− | } | + | } PROCDESKHEAD, *PPROCDESKHEAD; |
+ | |||
+ | typedef struct _PROCMARKHEAD | ||
+ | { | ||
+ | PROCOBJHEAD; | ||
+ | PPROCESSINFO ppi; | ||
+ | } PROCMARKHEAD, *PPROCMARKHEAD; | ||
===References=== | ===References=== | ||
* http://chpie.tistory.com/entry/Blocking-Global-message-hook | * http://chpie.tistory.com/entry/Blocking-Global-message-hook | ||
* http://blog.csdn.net/norsd/archive/2006/08/01/1007583.aspx | * http://blog.csdn.net/norsd/archive/2006/08/01/1007583.aspx | ||
− | * Windows Symbol files, userkdx.dll, !dso | + | * Windows Symbol files, userkdx.dll, !dso, W7U symbols |
Latest revision as of 01:57, 15 January 2010
Head structures.
typedef struct _HEAD { HANDLE h; DWORD cLockObj; } HEAD, *PHEAD; typedef struct _THROBJHEAD { HEAD; PTHREADINFO pti; } THROBJHEAD, *PTHROBJHEAD; // typedef struct _THRDESKHEAD { THROBJHEAD; PDESKTOP rpdesk; PVOID pSelf; // points to the kernel mode address } THRDESKHEAD, *PTHRDESKHEAD; typedef struct _PROCOBJHEAD { HEAD; DWORD hTaskWow; } PROCOBJHEAD, *PPROCOBJHEAD; // typedef struct _PROCDESKHEAD { PROCOBJHEAD; PDESKTOP rpdesk; PVOID pSelf; } PROCDESKHEAD, *PPROCDESKHEAD; typedef struct _PROCMARKHEAD { PROCOBJHEAD; PPROCESSINFO ppi; } PROCMARKHEAD, *PPROCMARKHEAD;
References
- http://chpie.tistory.com/entry/Blocking-Global-message-hook
- http://blog.csdn.net/norsd/archive/2006/08/01/1007583.aspx
- Windows Symbol files, userkdx.dll, !dso, W7U symbols