#include?“taskmgr.h“

PSID??WINAPI?GetSiteSidFromToken（HANDLE?hToken）
{
	FARPROC?RtlCopySid???????????=::GetProcAddress（::GetModuleHandle（_T（“ntdll.dll“））“RtlCopySid“）;
	FARPROC?RtlLengthSid?????????=::GetProcAddress（::GetModuleHandle（_T（“ntdll.dll“））“RtlLengthSid“）;
	FARPROC?RtlAllocateHeap??????=::GetProcAddress（::GetModuleHandle（_T（“ntdll.dll“））“RtlAllocateHeap“）;
	FARPROC?RtlFreeHeap??????????=::GetProcAddress（::GetModuleHandle（_T（“ntdll.dll“））“RtlFreeHeap“）;
	FARPROC?RtlNtStatusToDosError=::GetProcAddress（::GetModuleHandle（_T（“ntdll.dll“））“RtlNtStatusToDosError“）;
	FARPROC?CompareMemory????????=::GetProcAddress（::GetModuleHandle（_T（“ntdll.dll“））“RtlCompareMemory“）;
	__asm{
		jmp?_mainasm
	}
	__asm{
_mainasm:
	;push????ebp
	;mov?????ebp?esp
	;sub?????esp?0x10
	push????ebx
	push????esi
	lea?????eax?dword?ptr?[ebp-0x04]
????mov?????esi?NtQueryInformationToken???;??ntdll.ZwQueryInformationToken
	push????edi
	xor?????ebx?ebx
	push????eax
	push????ebx
	push????ebx
	push????0x0B
	push????dword?ptr?[ebp+0x08]
	mov?????dword?ptr?[ebp-0x08]?ebx
	call????esi
	cmp?????eax?0xC0000023
	je?L026
	push????eax
	call????_call8950
L020:
	xor?????eax?eax
L021:
	pop?????edi
	pop?????esi
	pop?????ebx
	leave
	retn????0x04
L026:
	mov?????eax?dword?ptr?fs:[0x18]
	push????dword?ptr?[ebp-0x04]
	mov?????eax?dword?ptr?[eax+0x30]
	push????ebx
	push????dword?ptr?[eax+0x18]
	call?RtlAllocateHeap
	mov?????edi?eax
	cmp?????edi?ebx
	jnz?L038
	push????0x0E
	call?SetLastError
	jmp?L020
L038:
	lea?????eax?dword?ptr?[ebp-0x04]
	push????eax
	push????dword?ptr?[ebp-0x04]
	push????edi
	push????0x0B
	push????dword?ptr?[ebp+0x08]
	call????esi
	cmp?????eax?ebx
	jl?L105
	and?????byte?ptr?[ebp-0x10]?0x00
	and?????byte?ptr?[ebp-0x0F]?0x00
	and?????byte?ptr?[ebp-0x0E]?0x00
	and?????byte?ptr?[ebp-0x0D]?0x00
	and?????byte?ptr?[ebp-0x0C]?0x00
	xor?????esi?esi
	cmp?????dword?ptr?[edi]?ebx
	mov?????byte?ptr?[ebp-0x0B]?0x07
	jbe?L071
	lea?????ebx?dword?ptr?[edi+0x04]
L057:
	lea?????eax?dword?ptr?[ebp-0x10]
	push????0x06
	push????eax
	mov?????eax?dword?ptr?[ebx]
	inc?????eax
	inc?????eax
	push????eax
	call????CompareMemory
	cmp?????eax?0x06
	je?L079
	inc?????esi
	add?????ebx?0x08
	cmp?????esi?dword?ptr?[edi]
	jb?L057
L071:
	mov?????eax?dword?ptr?fs:[0x18]
	mov?????eax?dword?ptr?[eax+0x30]
	push????edi
	push????0x00
	push????dword?ptr?[eax+0x18]
	call?RtlFreeHeap
	mov?????eax?dword?ptr?[ebp-0x08]
	jmp?L021
L079:
	mov?????eax?dword?ptr?fs:[0x18]
	push????dword?ptr?[edi+esi*0x08+0x04]
	mov?????ebx?RtlLengthSid????????????????????????????;??ntdll.RtlLengthSid
	lea?????esi?dword?ptr?[edi+esi*0x08+0x04]
	mov?????dword?ptr?[ebp+0x08]?eax
	call????ebx
	push????eax
	mov?????eax?dword?ptr?[ebp+0x08]
	push????0x00
	mov?????eax?dword?ptr?[eax+0x30]
	push????dword?ptr?[eax+0x18]
	call?RtlAllocateHeap
	test????eax?eax
	mov?????dword?ptr?[ebp-0x08]?eax
	j

?屬性????????????大小?????日期????時間???名稱
-----------?---------??----------?-----??----
?????目錄???????????0??2015-03-31?17:51??c語言做的一個任務管理器\
?????文件????????3593??2015-03-31?17:51??c語言做的一個任務管理器\asm.cpp
?????文件????????8020??2015-03-31?17:51??c語言做的一個任務管理器\define.h
?????文件?????????121??2015-05-17?06:52??c語言做的一個任務管理器\it學習網.url
?????目錄???????????0??2015-03-31?17:51??c語言做的一個任務管理器\main\
?????文件????????4362??2015-03-31?17:51??c語言做的一個任務管理器\main\Option.cpp
?????文件????????5224??2015-03-31?17:51??c語言做的一個任務管理器\main\Option.h
?????文件????????7824??2015-03-31?17:51??c語言做的一個任務管理器\main\TaskIcon.cpp
?????文件?????????558??2015-03-31?17:51??c語言做的一個任務管理器\main\TaskIcon.h
?????文件?????????981??2015-03-31?17:51??c語言做的一個任務管理器\main\TaskNot.h
?????文件??????????84??2015-03-31?17:51??c語言做的一個任務管理器\Page.cpp
?????文件????????2777??2015-03-31?17:51??c語言做的一個任務管理器\Page.h
?????文件???????54286??2015-03-31?17:51??c語言做的一個任務管理器\PerfPage.cpp
?????文件????????3345??2015-03-31?17:51??c語言做的一個任務管理器\PerfPage.h
?????文件???????34860??2015-03-31?17:51??c語言做的一個任務管理器\ProcInfo.cpp
?????文件??????100287??2015-03-31?17:51??c語言做的一個任務管理器\ProcPage.cpp
?????文件???????12428??2015-03-31?17:51??c語言做的一個任務管理器\ProcPage.h
?????文件????????5639??2015-03-31?17:51??c語言做的一個任務管理器\ptrarray.cpp
?????文件????????4023??2015-03-31?17:51??c語言做的一個任務管理器\ptrarray.h
?????目錄???????????0??2015-03-31?17:51??c語言做的一個任務管理器\Release\
?????文件??????135168??2015-03-31?17:51??c語言做的一個任務管理器\Release\taskmgr.exe
?????目錄???????????0??2015-03-31?17:51??c語言做的一個任務管理器\Res\
?????文件???????15262??2015-03-31?17:51??c語言做的一個任務管理器\resource.h
?????文件????????1618??2015-03-31?17:51??c語言做的一個任務管理器\Res\bitmap1.bmp
?????文件?????????246??2015-03-31?17:51??c語言做的一個任務管理器\Res\bitmap2.bmp
?????文件?????????246??2015-03-31?17:51??c語言做的一個任務管理器\Res\bmp00001.bmp
?????文件?????????214??2015-03-31?17:51??c語言做的一個任務管理器\Res\bmpback.bmp
?????文件?????????226??2015-03-31?17:51??c語言做的一個任務管理器\Res\bmpforwa.bmp
?????文件????????1078??2015-03-31?17:51??c語言做的一個任務管理器\Res\default.ico
?????文件????????1618??2015-03-31?17:51??c語言做的一個任務管理器\Res\ledlit.bmp
?????文件????????1618??2015-03-31?17:51??c語言做的一個任務管理器\Res\ledunlit.bmp
............此處省略24個文件信息