作者：未知 来源：月光软件站 加入时间：2005-2-28　月光软件站

在Windows体系统中，windows通过一些结构体来保存windows信息。这些许多就关系到微软未公开的文档。SYSTEM_BASE_INFORMATION结构就是其中的一个。它通过调用ntdll.dll中的ZwQuerySystemInformation函数可以得到这个结构的值。下面是演示代码：
#include "stdafx.h"
#include <conio.h>
#include <windows.h>

typedef LONG NTSTATUS;

typedef enum _SYSTEM_INFORMATION_CLASS
{
 SystemBasicInformat
}SYSTEM_INFORMATION_CLASS;

typedef struct _SYSTEM_BASIC_INFORMATION
{
 ULONG Unknown;       //Always contains zero
 ULONG MaximumIncrement;     //一个时钟的计量单位
 ULONG PhysicalPageSize;     //一个内存页的大小
 ULONG NumberOfPhysicalPages;    //系统管理着多少个页
 ULONG LowestPhysicalPage;     //低端内存页
 ULONG HighestPhysicalPage;    //高端内存页
 ULONG AllocationGranularity;
 ULONG LowestUserAddress;     //地端用户地址
 ULONG HighestUserAddress;     //高端用户地址
 ULONG ActiveProcessors;     //激活的处理器
 UCHAR NumberProcessors;     //有多少个处理器
}SYSTEM_BASIC_INFORMATION,*PSYSTEM_BASIC_INFORMATION;

typedef NTSTATUS (__stdcall *ZWQUERYSYSTEMINFORMATION) (IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
              IN OUT PVOID SystemInformat,
              IN ULONG SystemInformatLength,
              OUT PULONG ReturnLength OPTIONAL);

static ZWQUERYSYSTEMINFORMATION ZwQuerySystemInformation = NULL;

int _tmain(int argc, _TCHAR* argv[])
{
 SYSTEM_BASIC_INFORMATION SysBaseInfo;
 NTSTATUS status;

 if( !(ZwQuerySystemInformation = (ZWQUERYSYSTEMINFORMATION)GetProcAddress(GetModuleHandle("ntdll.dll"),"ZwQuerySystemInformation")))
 {
  printf("GetProcAddress failed");
  return -1;
 }

 status = ZwQuerySystemInformation(SystemBasicInformat,&SysBaseInfo,sizeof(SysBaseInfo),0);
 if(status != NO_ERROR)
 {
  printf("ZwQuerySystemInformation failed");
  return -1;
 }

 printf("MaximumIncrement = %d\n",SysBaseInfo.MaximumIncrement );
 printf("PhysicalPageSize = %d\n",SysBaseInfo.PhysicalPageSize );
 printf("NumberOfPhysicalPages = %d\n",SysBaseInfo.NumberOfPhysicalPages );
 printf("LowestPhysicalPage = %d\n",SysBaseInfo.LowestPhysicalPage );
 printf("HighestPhysicalPage = %d\n",SysBaseInfo.HighestPhysicalPage );
 printf("AllocationGranularity = %d\n",SysBaseInfo.AllocationGranularity );
 printf("LowestUserAddress = %X\n",SysBaseInfo.LowestUserAddress );
 printf("HighestUserAddress = %X\n",SysBaseInfo.HighestUserAddress );
 printf("ActiveProcessors = %d\n",SysBaseInfo.ActiveProcessors );
 printf("NumberProcessors = %d\n",SysBaseInfo.NumberProcessors );
 getch();
 return 0;
}

相关软件：