资源列表
src105
- 测试程序是否在虚拟机运行.从三个方面入手检测：1、注册表2、读取peb 3、利用idt检测-Test program is run in a virtual machine. From the detection of three aspects: 1, 2 registry, read peb 3, detected by idt
src1
- 利用调试寄存器机制利用Single Step机制-Mechanism for the use of debug registers using Single Step Mechanism
spy_fileio_src
- spy++的一个小例子，涉及Vxd操作和DDK编译-spy++ a small example, involving the operation and DDK compiler Vxd
SpyNet
- 利用全局钩子和代码注入实现键盘纪录，可以设置只纪录在 Iexplore.exe , Firefox.exe , Opera.exe , msdev.exe 等进程对应窗口的输入。-Use of global hooks and code injection to achieve a record keyboard, you can set the record only in Iexplore.exe , Firefox.exe , Opera.exe , msdev.exe such
SplitVolumeNames
- SplitVolumeNames to split names of your drive volume
SplitVolumeName
- Split used drive names
Splash
- 用win32 api实现splash的c++类。-Splash with the win32 api to achieve c++ Category.
SPI_Flash
- spi总线读取设备扇区数据 没有头文件 是windows系统 使用的API是window的-spi bus read and write device data
sparsetest
- 利用内存映射文件测试NTFS的稀疏文件存储能力-Use memory-mapped file to test NTFS sparse file storage capacity
spacefinish
- 程序演示如何用汇编调用win32、api函数例子：演示c盘剩余空间-Procedures demonstrate how to use a compilation called win32, api function examples: demo c disk space remaining
SourceCodes
- windows application matrix 54-windows application matrix 54
source108
- 一个很好的反rootkit例子，终止其运用或替换 重要system dlls.-A good example of anti-rootkit, to terminate the use or replacement of important system dlls.