SGYHMSLY-优快云博客

原创 Windbg Gifts.

http://www.microsoft.com/belux/msdn/nl/community/articles/feb05_applicationdebugging.mspx Microsoft Downloading Windebug Gifts!! Application debugging in a production environmentHans De Smae

2007-06-04 12:42:00 836

原创 The Blogs In English You Must Read Every Month

No matter how busy I am, I will read these blog at least one time every month. Windebug Blog: Deubugging Tool Boxhttp://blogs.msdn.com/debuggingtoolbox/Wintel John Robbins Bloghttp:

2007-05-25 10:11:00 878

原创 New Windebug Is Coming With Greate Feature Of CallStack!

http://voneinem-windbg.blogspot.com/2007/04/windbg-6750-released.htmlThere is no direct need to call !CLRStack or !DumpStack as the managed (along with the unmanaged) stack gets listed in the Call

2007-05-25 10:09:00 775

原创 Breaking The Secretes —— Dissecting The Stack Part1

preface: Stack is one of the most important topics about Windows Memory Management. Every programmar who is willing to understand how eveything does work should have a clear idea of how stack w

2007-05-05 09:11:00 1473

原创 The Tao of Windows Buffer Overflow

.-. _ _ .-. / / .-. ((___)) .-. / / /.ooM / / / .-. [ x x ] .-.

2007-05-04 14:04:00 1760

原创 Breaking The Secretes —— A New Beginning

Over such a long time, I have decided to written a serious of articles which name is Breaking The Secretes.Honestly, originally I planned to name it as Breaking The Windows Secretes, but finally I

2007-05-04 13:18:00 803

原创 Regards Matt Pietrek

Actually I really dont want to talk about anything about Matt Pietrek since he is too famours. Here I listed some of the very very famour and very very important articles that he has writte

2007-05-02 19:35:00 888

原创转载获得kernel32.dll基地址

获取kernel32.dll映像基址很久不写关于技术的东西了，由于最近在研究内嵌汇编和机器码的注入，故把下面这段代码列出来。其中C/C++的部分和inline asm的最后一句是我写的。自评：极其缺乏原创精神。

2007-05-01 22:11:00 1313

原创 Win32汇编学习笔记——内存管理

1、GlobalMemoryStatusvoid GlobalMemoryStatus( LPMEMORYSTATUS lpBuffer );该函数用来获得当前内存的详细情况 2、标准内存管理：（默认堆heap中）HGLOBAL GlobalAlloc( UINT uFlags, SIZE_T dwBytes);通常使用的uFl

2007-04-28 16:09:00 997

原创 Windows Memory - Memeory View 一个动态显示内存使用的SDK

// MemViewSDK.cpp : Defines the entry point for the application.//#include "stdafx.h"#include "MemViewSDK.h"#include "resource.h"#define MAX_LOADSTRING 100// Global Variables:HINSTANCE hInst;

2007-04-28 15:33:00 929

原创 Windows UI - TrayIcon Dialog

// TrayIcon.cpp : Defines the entry point for the application.//#include "stdafx.h"#include "TrayIcon.h"#include "shellapi.h"#define MAX_LOADSTRING 100#define WM_TASKBAR WM_APP + 1000HINSTANCE hIn

2007-04-28 15:15:00 913

原创 Windows UI - TrayIcon Window

// TrayIconWindow.cpp : Defines the entry point for the application.//#include "stdafx.h"#include "TrayIconWindow.h"#include "shellapi.h"#define MAX_LOADSTRING 100#define WM_TASKBAR WM_APP + 1000//

2007-04-28 15:14:00 1309

原创 Programming Windows3~4章摘要

第一章—— 窗口与消息一、HelloWin程序如下： /*------------------------------------------------------------ HELLOWIN.C -- Displays "Hello, Windows 98!" in client area (c) Charles Petzold, 19

2004-04-05 23:53:00 1132

原创 Programming Windows摘要

第二章输出文本一、 WM_PAINT消息：在应用程序进入WinMain函数后调用UpdateWindow函数，Windows利用这个机会就给窗体过程发送一个WM_PAINT消息，要求绘制无效区域。在如下情况下窗体过程会收到WM_PAINT消息： 1、在用户移动窗口或显示窗口时，窗口中先前被隐藏的区域重新可见时2、用户改变窗口大小时（但是必须具有CS_HREDRAW和

2004-04-05 23:53:00 1355

Breaking The Secretes