看点anti技巧，做个记录PEB即Process Environment Block，进程环境快结构如下 x86 [code]typedef struct _PEB { BYTE Reserved1[2]; BYTE BeingDebugged; BYTE Reserved2[1]; PVOID Reserved3[2...