编程语言

img sysnet

SYSTEM_BASIC_INFORMATION结构

发表于2004/10/13 15:48:00  1305人阅读

分类: NTDLL

在Windows体系统中,windows通过一些结构体来保存windows信息。这些许多就关系到微软未公开的文档。SYSTEM_BASE_INFORMATION结构就是其中的一个。它通过调用ntdll.dll中的ZwQuerySystemInformation函数可以得到这个结构的值。下面是演示代码:
#include "stdafx.h"
#include <conio.h>
#include <windows.h>

typedef LONG NTSTATUS;

typedef enum _SYSTEM_INFORMATION_CLASS
{
 SystemBasicInformat
}SYSTEM_INFORMATION_CLASS;

typedef struct _SYSTEM_BASIC_INFORMATION
{
 ULONG Unknown;       //Always contains zero
 ULONG MaximumIncrement;     //一个时钟的计量单位
 ULONG PhysicalPageSize;     //一个内存页的大小
 ULONG NumberOfPhysicalPages;    //系统管理着多少个页
 ULONG LowestPhysicalPage;     //低端内存页
 ULONG HighestPhysicalPage;    //高端内存页
 ULONG AllocationGranularity;
 ULONG LowestUserAddress;     //地端用户地址
 ULONG HighestUserAddress;     //高端用户地址
 ULONG ActiveProcessors;     //激活的处理器
 UCHAR NumberProcessors;     //有多少个处理器
}SYSTEM_BASIC_INFORMATION,*PSYSTEM_BASIC_INFORMATION;

typedef NTSTATUS (__stdcall *ZWQUERYSYSTEMINFORMATION) (IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
              IN OUT PVOID SystemInformat,
              IN ULONG SystemInformatLength,
              OUT PULONG ReturnLength OPTIONAL);


static ZWQUERYSYSTEMINFORMATION ZwQuerySystemInformation = NULL;

int _tmain(int argc, _TCHAR* argv[])
{
 SYSTEM_BASIC_INFORMATION SysBaseInfo;
 NTSTATUS status;

 if( !(ZwQuerySystemInformation = (ZWQUERYSYSTEMINFORMATION)GetProcAddress(GetModuleHandle("ntdll.dll"),"ZwQuerySystemInformation")))
 {
  printf("GetProcAddress failed");
  return -1;
 }

 status = ZwQuerySystemInformation(SystemBasicInformat,&SysBaseInfo,sizeof(SysBaseInfo),0);
 if(status != NO_ERROR)
 {
  printf("ZwQuerySystemInformation failed");
  return -1;
 }

 printf("MaximumIncrement = %d/n",SysBaseInfo.MaximumIncrement );
 printf("PhysicalPageSize = %d/n",SysBaseInfo.PhysicalPageSize );
 printf("NumberOfPhysicalPages = %d/n",SysBaseInfo.NumberOfPhysicalPages );
 printf("LowestPhysicalPage = %d/n",SysBaseInfo.LowestPhysicalPage );
 printf("HighestPhysicalPage = %d/n",SysBaseInfo.HighestPhysicalPage );
 printf("AllocationGranularity = %d/n",SysBaseInfo.AllocationGranularity );
 printf("LowestUserAddress = %X/n",SysBaseInfo.LowestUserAddress );
 printf("HighestUserAddress = %X/n",SysBaseInfo.HighestUserAddress );
 printf("ActiveProcessors = %d/n",SysBaseInfo.ActiveProcessors );
 printf("NumberProcessors = %d/n",SysBaseInfo.NumberProcessors );
 getch();
 return 0;
}

 

阅读全文
0 0

相关文章推荐

img
取 消
img