{"author_url":"https://blog.hatena.ne.jp/egggarden/","author_name":"egggarden","title":"NtQueryObject","published":"2008-03-19 20:54:51","provider_url":"https://hatena.blog","height":"190","categories":["\u96d1\u8a18"],"url":"https://egggarden.hatenadiary.org/entry/20080319/1205927691","blog_url":"https://egggarden.hatenadiary.org/","provider_name":"Hatena Blog","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fegggarden.hatenadiary.org%2Fentry%2F20080319%2F1205927691\" title=\"NtQueryObject - \u3084\u3084\u6e29\u3081\u7d0d\u8c46\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_title":"\u3084\u3084\u6e29\u3081\u7d0d\u8c46","image_url":null,"description":"NtQueryObject \u306f\u30cf\u30f3\u30c9\u30eb\u3068\u52d5\u4f5c\u30e2\u30fc\u30c9\u3092\u4e0e\u3048\u3001\u69cb\u9020\u4f53\u30dd\u30a4\u30f3\u30bf\u3067\u7d50\u679c\u3092\u53d7\u3051\u53d6\u308b\u5178\u578b\u7684\u306aNativeAPI\u3002\u305f\u3068\u3048\u3070 NtQuerySystemInformation(SystemHandleInformation, ... \u3067\u53d6\u5f97\u3057\u305f\u30cf\u30f3\u30c9\u30eb\u30c6\u30fc\u30d6\u30eb\u3092\u9806\u7e70\u308a\u306b\u55b0\u308f\u305b\u3066\u3084\u308b\u3053\u3068\u3067\u3001\u30b7\u30b9\u30c6\u30e0\u5168\u4f53\u306e\u30cf\u30f3\u30c9\u30eb\u306b\u95a2\u3059\u308b\u60c5\u5831\u3092\u5217\u6319\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u3002 \u3067\u304d\u308b\u306e\u3060\u304c\u3001\u3053\u306e NtQueryObject \u304c\u7279\u5b9a\u6761\u4ef6\u4e0b\u3067\u30c7\u30c3\u30c9\u30ed\u30c3\u30af\u3092\u8d77\u3053\u3059\u3002\u691c\u7d22\u3057\u3066\u307f\u305f\u611f\u3058\u3060\u3068\u6b21\u306e\u3088\u3046\u306a\u6761\u4ef6\u304c\u95a2\u4fc2\u3057\u3066\u3044\u308b\u3089\u3057\u3044\u3002 \u30b7\u30b9\u30c6\u30e0\u30d7\u30ed\u30bb\u30b9\u306e\u4fdd\u6709\u3059\u308b\u30cf\u30f3\u30c9\u30eb\u3067\u3042\u308b\u3002\u305f\u3068\u3048\u3070 C:\\WINDOWS\\system32\\services\u2026","width":"100%","version":"1.0","type":"rich"}