一步一步

BOOLWINAPIReadProcessMemory(                                    HANDLE hProcess,    //待读进程的句柄                                    LPCVOID lpBaseAddress,    //目标进程中待读内存的起始地址           

<br />char szBuffer[MAX_PATH] = "1234567"; int nLen = ::MultiByteToWideChar(CP_ACP, 0, szBuffer, 9,//这里传-1的话，函数自动计算字符个数（包括'/0'），结果nLen = 8，如果不传-1，传5,6,7，那么返回将是这些值 NULL, 0); wchar_t* pwszBuffer = (wchar_t*)::LocalAlloc(0, nLen * sizeo

// test32.cpp : Defines the entry point for the console application.//#include "stdafx.h"#include int _tmain(int argc, _TCHAR* argv[]){ HANDLE hToken = NULL; BOOL bResult = FALSE; TOKEN_PRIVILEGES tkp; bResult = ::OpenProcessToken(::GetCu

<br />// injectDll.cpp : Defines the entry point for the console application.//#include "stdafx.h"#include <Windows.h>#include <Shlwapi.h>int _tmain(int argc, _TCHAR* argv[]){ //获取要注入的dll路径，我这里是放在本模块同一个路径下 TCHAR szDllPath[MAX_PATH] = { 0 };

<br />typedef BOOL WINAPI FN_ISWOW64_PROC(HANDLE hProcess, PBOOL Wow64Process);BOOL Is64bitWindows(void);BOOL Is64bitWindows(void){ BOOL bRet = FALSE;#ifdef _WIN64 bRet = FALSE; goto Exit0;#else OSVERSIONINFOEX osex; osex.dwOSVersionInf

<br />// sysinfoTest.cpp : Defines the entry point for the console application.//#include "stdafx.h"#include <windows.h>#include <iostream>using namespace std;int Greater(int nNum);enum LEG{ LESS = -1, EQUAL = 0, GREATER = 1,};int

<br />#pragma onceclass CXThreadJob{public: CXThreadJob(void); ~CXThreadJob(void);public: /* 用户对象纯虚函数 */ virtual void DoJob(void* pParam) = 0;};#pragma once#include <queue>#include "XThreadJob.h"class CXThreadPool{public:

<br />// serviceProgram.cpp : Defines the entry point for the console application.//#include "stdafx.h"#include <Windows.h>//服务程序：当一个应用程序需要常驻系统，或者随时为其它应用程序提供服务时，可以使用服务应用程序SERVICE_STATUS g_SplSrvServieStatus;SERVICE_STATUS_HANDLE g_SplSrvService

// tryTest.cpp : Defines the entry point for the application.//#include "stdafx.h"#include "tryTest.h"#include #define MAX_LOADSTRING 100NOTIFYICONDATA notifyIconData;HMENU hMenu;#de

<br />//取得库存gdi对象 ::GetObject((HFONT)::GetStockObject(DEFAULT_GUI_FONT), sizeof(m_lf), &m_lf); m_lf.lfUnderline = TRUE;//加下划线 m_lf.lfHeight = 32;//高度 m_lf.lfWidth = 12;//宽度 m_newFont.CreateFontIndirect(&m_lf);//创建字体对象 //设置静态文本控件的字体 GetDlgItem

<br />// regTest.cpp : Defines the entry point for the console application.//#include "stdafx.h"#include <Windows.h>#include <iostream>/*对于注册表，我们可以理解为(类比)：键对应于文件夹，键值对应于文件*/VOID ErrorShow(DWORD dwErrorCode);VOID ErrorShow(DWORD dwErrorCo

PROCESSENTRY32 pe32; pe32.dwSize = sizeof(pe32); //给系统内的所以进程拍一个快照 HANDLE hProcessSnap = ::CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0); if (INVALID_HANDLE_VALUE == hProcessSnap) { goto

TCHAR szName[MAX_PATH] = _T("2010ShareMem"); //首先试图打开一个命名的内存映射文件对象 m_hMap = ::OpenFileMapping(FILE_MAP_ALL_ACCESS, 0, szName); if (m_hMap == NULL) { m_hMap = ::CreateFileMapping(INVALID_HAN

// dllHookkb.cpp : Defines the entry point for the DLL application.//#include "stdafx.h"#include "dllHookkb.h"#ifdef _MANAGED#pragma managed(push, off)#endif#pragma data_seg("YCIShared

test

// myTimer.cpp : Defines the entry point for the application.//#include "stdafx.h"#include "myTimer.h"#include #define MAX_LOADSTRING 100// Global Variables:HINSTANCE hInst; // cu

 #include "stdafx.h"#include #include #include #include #ifdef _UNICODE#define tcout wcout#else#define tcout cout#endifint _tmain(int argc, _TCHAR* argv[]){ TCHAR tables[][4]

 LPMALLOC pMalloc; if(::SHGetMalloc(&pMalloc) == NOERROR) { BROWSEINFO bi; TCHAR pszBuffer[MAX_PATH]; LPITEMIDLIST pidl; bi.hwndOwner = GetSafeHwnd(); bi.pidlRoot = NULL;

前天突然在windbg上uf USER32！MessageBoxW,发现了MessageBoxTimeoutW这个API，看着名字大家马上就知道什么回事了。为什么对这个有如此敏感呢，是因为有一次面试经历，问了这个问题，怎么实现具有超时功能的MessageBox，我那时的回答是：在一个线程中弹对话框，然后等待此线程（现在想想很汗）#include "stdafx.h"#include #include int _tmain(int argc, _TCHAR* argv[]){