티스토리 뷰
/*++
Routine Description:
This routine creates a system process object. A system process
has an address space that is initialized to an empty address space
that maps the system.
The process inherits its access token and other attributes from the
initial system process. The process is created with an empty handle table.
Arguments:
ProcessHandle - Returns the handle for the new process.
DesiredAccess - Supplies the desired access modes to the new process.
ObjectAttributes - Supplies the object attributes of the new process.
Return Value:
TBD
--*/
NTSTATUS
PsCreateSystemProcess(
OUT PHANDLE ProcessHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL) {
NTSTATUS st;
PAGED_CODE();
st = PspCreateProcess(
ProcessHandle,
DesiredAccess,
ObjectAttributes,
PspInitialSystemProcessHandle,
FALSE,
(HANDLE) NULL,
(HANDLE) NULL,
(HANDLE) NULL
);
return st;
}
'보안 > 분석' 카테고리의 다른 글
Hooking functions not exported by ntoskrnl [펌 www.rootkit.com] (0) | 2008.03.25 |
---|---|
NTSTATUS PspCreateProcess(...) (0) | 2008.03.25 |
ntoskrnl.exe - Exports (0) | 2008.03.24 |
A more stable way to locate real KiServiceTable [펌 www.rootkit.com] (6) | 2008.03.24 |
[VMWare] VirtualBox - Open Source Vmware (2) | 2008.03.23 |
- Total
- Today
- Yesterday
- 지루박멸연구센타
- 열정의 힘을 믿는다
- Le4rN TO Cr4cK
- 디버깅에관한모든것(DebugLab)
- sysinternals
- FoundStone
- hashtab
- 보안-coderant
- 디바이스드라이버 개발자 포럼
- dualpage.muz.ro
- osronline.com - 드라이버 관련 정보 사이트
- NtInternals - NativeAPI Refere…
- pcthreat - spyware 정보 제공
- rootkit.com - 루트킷 관련 정보
- www.ntinternals.net
- WINE CrossRef. - source.winehq…
- tuts4you
- hex-rays
- idapalace
- idefense
- immunityinc
- threatexpert
- hdp.null2root.org
- www.crackstore.com
- crackmes.de
- www.who.is
- www.cracklab.ru
- community.reverse-engineering.…
- video.reverse-engineering.net
- SnD
- 클레이 키위
- reversengineering.wordpress.co…
- www.openrce.org
- www.woodmann.com
- PEID.Plusins.BobSoft
- roxik.com/pictaps/
- regexlib.com
- spyware-browser.com
- www.usboffice.kr
- regulator
- www.txt2re.com
- ietab.mozdev.org
- zesrever.xstone.org
- www.heaventools.com/PE-file-he…
- www.heaventools.com
- www.innomp3.com
- 울지않는벌새
- exetools.com-forum
- exetools.com
- utf8 conv
- robtex - IP trace
- onsamehost - same IP sites
- JpopSuki
- jsunpack.jeek.org
- wepawet.iseclab.org
- www.jswiff.com
- www.hackeroo.com
- winesearcher.co.kr
- khpga.org
- malwareurl.com
- anubis.iseclab.org
- www.crummy.com-eautifulSoup
- malwarebytes.org/forums
- bbs.janmeng.com
- blackip.ustc.edu.cn
- eureka.cyber-ta.org
- exploit-db.com
- logrotate
- 주식
- O365
- systemd
- 신한저축은행
- 전세매매지수
- INVOICE
- PIR
- 매매가격지수
- 다올저축은행
- hai
- 주택구매력지수
- 자동트래이딩
- ubuntu
- 레고랜드
- CriticalSection
- 실시간트래이딩
- ElasticSearch
- Pivot
- 공공인프라
- 주식트래이딩
- ROA
- 미국주식
- SBI저축은행
- 맥쿼리인프라
- 사회간접자본
- 시스템트래이딩
- 군함도
- ChatGPT
- 피봇
일 | 월 | 화 | 수 | 목 | 금 | 토 |
---|---|---|---|---|---|---|
1 | 2 | 3 | 4 | 5 | 6 | 7 |
8 | 9 | 10 | 11 | 12 | 13 | 14 |
15 | 16 | 17 | 18 | 19 | 20 | 21 |
22 | 23 | 24 | 25 | 26 | 27 | 28 |
29 | 30 | 31 |