No subject

Tue Feb 23 11:03:59 CST 2010

handling from kernel32 to ntdll.
--Juan

--0003255760023fd262048d064cbe
Content-Type: text/x-patch; charset=US-ASCII; 
	name="0009-Implement-NtQueryInformationProcess-for-ProcessDefau.patch"
Content-Disposition: attachment; 
	filename="0009-Implement-NtQueryInformationProcess-for-ProcessDefau.patch"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_gcgpd9u90
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--0003255760023fd262048d064cbe--