C++博客-S.l.e!ep.￠%-随笔分类-Windows WDMhttp://www.cppblog.com/sleepwom/category/8432.html某天睡觉醒来，我发现我会开机了~~~ <br> 方法，过程，目标，成就 <br> 是时候起兵作反了~<br> 不要太多感情<br> zh-cnThu, 22 Jul 2010 17:20:57 GMTThu, 22 Jul 2010 17:20:57 GMT60inside windowshttp://www.cppblog.com/sleepwom/archive/2010/07/22/121036.htmlS.l.e!ep.￠%S.l.e!ep.￠%Thu, 22 Jul 2010 07:55:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/07/22/121036.htmlhttp://www.cppblog.com/sleepwom/comments/121036.htmlhttp://www.cppblog.com/sleepwom/archive/2010/07/22/121036.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/121036.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/121036.html阅读全文

S.l.e!ep.￠% 2010-07-22 15:55 发表评论
]]>【转载】WRK简单介绍http://www.cppblog.com/sleepwom/archive/2010/07/20/120871.htmlS.l.e!ep.￠%S.l.e!ep.￠%Tue, 20 Jul 2010 06:05:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/07/20/120871.htmlhttp://www.cppblog.com/sleepwom/comments/120871.htmlhttp://www.cppblog.com/sleepwom/archive/2010/07/20/120871.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/120871.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/120871.html阅读全文

S.l.e!ep.￠% 2010-07-20 14:05 发表评论
]]>Understanding IRQLhttp://www.cppblog.com/sleepwom/archive/2010/02/19/108077.htmlS.l.e!ep.￠%S.l.e!ep.￠%Fri, 19 Feb 2010 09:05:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/19/108077.htmlhttp://www.cppblog.com/sleepwom/comments/108077.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/19/108077.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108077.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108077.html阅读全文

S.l.e!ep.￠% 2010-02-19 17:05 发表评论
]]>中断请求级别(IRQL)http://www.cppblog.com/sleepwom/archive/2010/02/19/108076.htmlS.l.e!ep.￠%S.l.e!ep.￠%Fri, 19 Feb 2010 08:57:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/19/108076.htmlhttp://www.cppblog.com/sleepwom/comments/108076.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/19/108076.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108076.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108076.html阅读全文

S.l.e!ep.￠% 2010-02-19 16:57 发表评论
]]>什么是中断请求(IRQ)?http://www.cppblog.com/sleepwom/archive/2010/02/19/108075.htmlS.l.e!ep.￠%S.l.e!ep.￠%Fri, 19 Feb 2010 08:53:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/19/108075.htmlhttp://www.cppblog.com/sleepwom/comments/108075.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/19/108075.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108075.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108075.html阅读全文

S.l.e!ep.￠% 2010-02-19 16:53 发表评论
]]>中断请求http://www.cppblog.com/sleepwom/archive/2010/02/19/108074.htmlS.l.e!ep.￠%S.l.e!ep.￠%Fri, 19 Feb 2010 08:52:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/19/108074.htmlhttp://www.cppblog.com/sleepwom/comments/108074.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/19/108074.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108074.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108074.html阅读全文

S.l.e!ep.￠% 2010-02-19 16:52 发表评论
]]>分页内存和非分页内存http://www.cppblog.com/sleepwom/archive/2010/02/19/108073.htmlS.l.e!ep.￠%S.l.e!ep.￠%Fri, 19 Feb 2010 08:36:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/19/108073.htmlhttp://www.cppblog.com/sleepwom/comments/108073.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/19/108073.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108073.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108073.html阅读全文

S.l.e!ep.￠% 2010-02-19 16:36 发表评论
]]>驱动中的几种内存分配和释放的用法http://www.cppblog.com/sleepwom/archive/2010/02/19/108072.htmlS.l.e!ep.￠%S.l.e!ep.￠%Fri, 19 Feb 2010 08:28:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/19/108072.htmlhttp://www.cppblog.com/sleepwom/comments/108072.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/19/108072.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108072.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108072.html阅读全文

S.l.e!ep.￠% 2010-02-19 16:28 发表评论
]]>ExInitializeResourceLite()http://www.cppblog.com/sleepwom/archive/2010/02/19/108071.htmlS.l.e!ep.￠%S.l.e!ep.￠%Fri, 19 Feb 2010 08:25:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/19/108071.htmlhttp://www.cppblog.com/sleepwom/comments/108071.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/19/108071.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108071.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108071.html阅读全文

S.l.e!ep.￠% 2010-02-19 16:25 发表评论
]]>Windows 文件过滤驱动经验总结http://www.cppblog.com/sleepwom/archive/2010/02/19/108070.htmlS.l.e!ep.￠%S.l.e!ep.￠%Fri, 19 Feb 2010 08:11:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/19/108070.htmlhttp://www.cppblog.com/sleepwom/comments/108070.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/19/108070.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108070.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108070.html阅读全文

S.l.e!ep.￠% 2010-02-19 16:11 发表评论
]]>Windows文件过滤驱动开发教程 - 读书笔记 (1)http://www.cppblog.com/sleepwom/archive/2010/02/19/108068.htmlS.l.e!ep.￠%S.l.e!ep.￠%Fri, 19 Feb 2010 06:32:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/19/108068.htmlhttp://www.cppblog.com/sleepwom/comments/108068.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/19/108068.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108068.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108068.html阅读全文

S.l.e!ep.￠% 2010-02-19 14:32 发表评论
]]>sfilter(二) - 01 注册FsFilter回调例程http://www.cppblog.com/sleepwom/archive/2010/02/19/108067.htmlS.l.e!ep.￠%S.l.e!ep.￠%Fri, 19 Feb 2010 05:33:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/19/108067.htmlhttp://www.cppblog.com/sleepwom/comments/108067.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/19/108067.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108067.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108067.html阅读全文

S.l.e!ep.￠% 2010-02-19 13:33 发表评论
]]>sfilter(二) 继续sfilter的DriverEntry() http://www.cppblog.com/sleepwom/archive/2010/02/18/108048.htmlS.l.e!ep.￠%S.l.e!ep.￠%Thu, 18 Feb 2010 14:51:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/18/108048.htmlhttp://www.cppblog.com/sleepwom/comments/108048.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/18/108048.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108048.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108048.html阅读全文

S.l.e!ep.￠% 2010-02-18 22:51 发表评论
]]>sfilter(一) sfilter的DriverEntry() http://www.cppblog.com/sleepwom/archive/2010/02/18/108047.htmlS.l.e!ep.￠%S.l.e!ep.￠%Thu, 18 Feb 2010 14:22:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/18/108047.htmlhttp://www.cppblog.com/sleepwom/comments/108047.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/18/108047.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108047.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108047.html阅读全文

S.l.e!ep.￠% 2010-02-18 22:22 发表评论
]]>sfilter、miniflter 与 filemon 的区别http://www.cppblog.com/sleepwom/archive/2010/02/18/108027.htmlS.l.e!ep.￠%S.l.e!ep.￠%Thu, 18 Feb 2010 10:05:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/18/108027.htmlhttp://www.cppblog.com/sleepwom/comments/108027.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/18/108027.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108027.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108027.html阅读全文

S.l.e!ep.￠% 2010-02-18 18:05 发表评论
]]> 文件过滤系统驱动开发Filemon学习笔记http://www.cppblog.com/sleepwom/archive/2010/02/18/108023.htmlS.l.e!ep.￠%S.l.e!ep.￠%Thu, 18 Feb 2010 08:51:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/18/108023.htmlhttp://www.cppblog.com/sleepwom/comments/108023.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/18/108023.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108023.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108023.html阅读全文

S.l.e!ep.￠% 2010-02-18 16:51 发表评论
]]>Windows NT文件系统内幕读书笔记（一）http://www.cppblog.com/sleepwom/archive/2010/02/18/108017.htmlS.l.e!ep.￠%S.l.e!ep.￠%Thu, 18 Feb 2010 07:13:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/18/108017.htmlhttp://www.cppblog.com/sleepwom/comments/108017.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/18/108017.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108017.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108017.html阅读全文

S.l.e!ep.￠% 2010-02-18 15:13 发表评论
]]>FileMon源码学习笔记（二）http://www.cppblog.com/sleepwom/archive/2010/02/18/108016.htmlS.l.e!ep.￠%S.l.e!ep.￠%Thu, 18 Feb 2010 07:11:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/18/108016.htmlhttp://www.cppblog.com/sleepwom/comments/108016.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/18/108016.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108016.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108016.html阅读全文

S.l.e!ep.￠% 2010-02-18 15:11 发表评论
]]>FileMon源码学习笔记（一）http://www.cppblog.com/sleepwom/archive/2010/02/18/108015.htmlS.l.e!ep.￠%S.l.e!ep.￠%Thu, 18 Feb 2010 07:10:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/18/108015.htmlhttp://www.cppblog.com/sleepwom/comments/108015.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/18/108015.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108015.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108015.html阅读全文

S.l.e!ep.￠% 2010-02-18 15:10 发表评论
]]>Filemon源代码 http://www.cppblog.com/sleepwom/archive/2010/02/18/108014.htmlS.l.e!ep.￠%S.l.e!ep.￠%Thu, 18 Feb 2010 07:05:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/18/108014.htmlhttp://www.cppblog.com/sleepwom/comments/108014.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/18/108014.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108014.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108014.html阅读全文

S.l.e!ep.￠% 2010-02-18 15:05 发表评论
]]>文件过滤驱动的东东，总结的比较全面http://www.cppblog.com/sleepwom/archive/2010/02/18/108013.htmlS.l.e!ep.￠%S.l.e!ep.￠%Thu, 18 Feb 2010 06:57:00 GMThttp://www.cppblog.com/sleepwom/archive/2010/02/18/108013.htmlhttp://www.cppblog.com/sleepwom/comments/108013.htmlhttp://www.cppblog.com/sleepwom/archive/2010/02/18/108013.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/108013.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/108013.html阅读全文

S.l.e!ep.￠% 2010-02-18 14:57 发表评论
]]>About ShutDown of Windows（一）http://www.cppblog.com/sleepwom/archive/2009/11/04/100101.htmlS.l.e!ep.￠%S.l.e!ep.￠%Wed, 04 Nov 2009 03:16:00 GMThttp://www.cppblog.com/sleepwom/archive/2009/11/04/100101.htmlhttp://www.cppblog.com/sleepwom/comments/100101.htmlhttp://www.cppblog.com/sleepwom/archive/2009/11/04/100101.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/100101.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/100101.html阅读全文

S.l.e!ep.￠% 2009-11-04 11:16 发表评论
]]>File System Filters Driver（二） http://www.cppblog.com/sleepwom/archive/2009/10/31/99909.htmlS.l.e!ep.￠%S.l.e!ep.￠%Sat, 31 Oct 2009 14:00:00 GMThttp://www.cppblog.com/sleepwom/archive/2009/10/31/99909.htmlhttp://www.cppblog.com/sleepwom/comments/99909.htmlhttp://www.cppblog.com/sleepwom/archive/2009/10/31/99909.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/99909.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/99909.html阅读全文

S.l.e!ep.￠% 2009-10-31 22:00 发表评论
]]>File System Filters Driver（一）http://www.cppblog.com/sleepwom/archive/2009/10/30/99718.htmlS.l.e!ep.￠%S.l.e!ep.￠%Fri, 30 Oct 2009 04:14:00 GMThttp://www.cppblog.com/sleepwom/archive/2009/10/30/99718.htmlhttp://www.cppblog.com/sleepwom/comments/99718.htmlhttp://www.cppblog.com/sleepwom/archive/2009/10/30/99718.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/99718.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/99718.html阅读全文

S.l.e!ep.￠% 2009-10-30 12:14 发表评论
]]>CreateService加载驱动过程http://www.cppblog.com/sleepwom/archive/2009/10/30/99788.htmlS.l.e!ep.￠%S.l.e!ep.￠%Fri, 30 Oct 2009 00:10:00 GMThttp://www.cppblog.com/sleepwom/archive/2009/10/30/99788.htmlhttp://www.cppblog.com/sleepwom/comments/99788.htmlhttp://www.cppblog.com/sleepwom/archive/2009/10/30/99788.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/99788.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/99788.html阅读全文

S.l.e!ep.￠% 2009-10-30 08:10 发表评论
]]>IFS Kit下关于FastIo的OSR文档翻译(3) http://www.cppblog.com/sleepwom/archive/2009/10/29/99739.htmlS.l.e!ep.￠%S.l.e!ep.￠%Thu, 29 Oct 2009 04:55:00 GMThttp://www.cppblog.com/sleepwom/archive/2009/10/29/99739.htmlhttp://www.cppblog.com/sleepwom/comments/99739.htmlhttp://www.cppblog.com/sleepwom/archive/2009/10/29/99739.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/99739.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/99739.html阅读全文

S.l.e!ep.￠% 2009-10-29 12:55 发表评论
]]>IFS Kit下关于FastIo的OSR文档翻译(2) http://www.cppblog.com/sleepwom/archive/2009/10/29/99738.htmlS.l.e!ep.￠%S.l.e!ep.￠%Thu, 29 Oct 2009 04:53:00 GMThttp://www.cppblog.com/sleepwom/archive/2009/10/29/99738.htmlhttp://www.cppblog.com/sleepwom/comments/99738.htmlhttp://www.cppblog.com/sleepwom/archive/2009/10/29/99738.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/99738.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/99738.html阅读全文

S.l.e!ep.￠% 2009-10-29 12:53 发表评论
]]>IFS Kit下关于FastIo的OSR文档翻译(1) http://www.cppblog.com/sleepwom/archive/2009/10/29/99737.htmlS.l.e!ep.￠%S.l.e!ep.￠%Thu, 29 Oct 2009 04:47:00 GMThttp://www.cppblog.com/sleepwom/archive/2009/10/29/99737.htmlhttp://www.cppblog.com/sleepwom/comments/99737.htmlhttp://www.cppblog.com/sleepwom/archive/2009/10/29/99737.html#Feedback1http://www.cppblog.com/sleepwom/comments/commentRss/99737.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/99737.html阅读全文

S.l.e!ep.￠% 2009-10-29 12:47 发表评论
]]>Hide Disk In R3http://www.cppblog.com/sleepwom/archive/2009/10/28/99691.htmlS.l.e!ep.￠%S.l.e!ep.￠%Wed, 28 Oct 2009 11:43:00 GMThttp://www.cppblog.com/sleepwom/archive/2009/10/28/99691.htmlhttp://www.cppblog.com/sleepwom/comments/99691.htmlhttp://www.cppblog.com/sleepwom/archive/2009/10/28/99691.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/99691.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/99691.html阅读全文

S.l.e!ep.￠% 2009-10-28 19:43 发表评论
]]>Zw*与Nt*的区别http://www.cppblog.com/sleepwom/archive/2009/10/25/99422.htmlS.l.e!ep.￠%S.l.e!ep.￠%Sun, 25 Oct 2009 09:02:00 GMThttp://www.cppblog.com/sleepwom/archive/2009/10/25/99422.htmlhttp://www.cppblog.com/sleepwom/comments/99422.htmlhttp://www.cppblog.com/sleepwom/archive/2009/10/25/99422.html#Feedback0http://www.cppblog.com/sleepwom/comments/commentRss/99422.htmlhttp://www.cppblog.com/sleepwom/services/trackbacks/99422.html阅读全文

S.l.e!ep.￠% 2009-10-25 17:02 发表评论
]]>