检测进程的拟地址空间.docVIP

//检测进程的虚拟地址空间 #include windows.h #include iostream.h #include shlwapi.h #include iomanip.h #pragma comment(lib, Shlwapi.lib) //以可读方式对用户显示保护的辅助方法 //保护标记表示允许应用程序对内存进行访问的类型 //以及操作系统强制访问的类型 inline bool TestSet(DWORD dwTarget, DWORD dwMask) { return((dwTarget dwMask)==dwMask); } #define SHOWMASK(dwTarget, type) void ShowProtection(DWORD dwTarget) { SHOWMASK (dwTarget, READONLY); SHOWMASK (dwTarget, GUARD); SHOWMASK (dwTarget, NOCACHE); SHOWMASK(dwTarget, READWRITE); SHOWMASK(dwTarget, WRITECOPY); SHOWMASK(dwTarget, EXECUTE); SHOWMASK(dwTarget, EXECUTE_READ); SHOWMASK(dwTarget, E