进程的系统结构问题?
具体代码见
http://www.pc-soft.cn/blogview.asp?logID=30&cateID=14
Public Sub HideCurrentProcess()
'在进程列表中隐藏当前应用程序进程
Dim thread As Long, process As Long, fw As Long, bw As Long
Dim lOffsetFlink As Long, lOffsetBlink As Long, lOffsetPID As Long
verinfo.dwOSVersionInfoSize = Len(verinfo)
If (GetVersionEx(verinfo)) <> 0 Then
If verinfo.dwPlatformId = 2 Then
If verinfo.dwMajorVersion = 5 Then
select Case verinfo.dwMinorVersion
Case 0
lOffsetFlink = &HA0
lOffsetBlink = &HA4
lOffsetPID = &H9C
Case 1
lOffsetFlink = &H88
lOffsetBlink = &H8C
lOffsetPID = &H84
End select
End If
End If
End If
If OpenPhysicalMemory <> 0 Then
thread = GetData(&HFFDFF124)
process = GetData(thread + &H44)
print process
fw = GetData(process + lOffsetFlink)
print fw
bw = GetData(process + lOffsetBlink)
print bw
SetData fw + 4, bw
SetData bw, fw
CloseHandle g_hMPM
End If
End Sub
为什么bw,fw的值与process一样啊?