特牛生活网

遍历_EPROCESS->SessionProcessLinks链表枚举进程-CSDN博客

网友收藏
文章浏览阅读689次。#include #include UCHAR * PsGetProcessImageFileName(__in PEPROCESS Process);HANDLE PsGetProcessInheritedFromUniqueProcessId(__in PEPROCESS Process);VOID HelloDDKUnload(IN PDRIVER_OBJECT pDrive_sessionprocesslinks