Kendy's Blog

http://aliwy.blogbus.com/Tue, 03 Feb 2009 07:14:48 GMTKendy's Blog[Former Kendy ......]博客大巴http://aliwy.blogbus.com/atom.xmlTue, 03 Feb 2009 07:24:03 GMTAliWyhttp://public.blogbus.com/profile/8/0/9/1454908/avatar_1454908_96.jpghttp://aliwy.blogbus.com/用户态应用程序调用Native API的方法http://aliwy.blogbus.com/logs/34569465.htmlaliwyhttp://aliwy.blogbus.com/logs/34569465.html<p><span style="color: #ff0000;">来源：</span><a href="http://blog.csdn.net/celestialwy/"><span style="color: #ff0000;">http://blog.csdn.net/celestialwy/</span></a></p> <p>微软基本没有提供给用户态程序调用Native API的接口，因为Windows SDK中几乎没有调用所需的头文件和库文件（SDK中只有少量的Native API所需的数据结构），但是可以利用以下两种方法在用户态调用Native API。<br />...</p><div class="relpost"><br/><h3>随机文章：</h3><div><a href="http://aliwy.blogbus.com/logs/31041225.html">修改对齐字节数减小GCC.DDK编译的驱动体积</a> 2008-11-06</div><div><a href="http://aliwy.blogbus.com/logs/22857186.html">DriverLoader1.1(加载Driver的小玩意儿)</a> 2008-06-13</div><div><a href="http://aliwy.blogbus.com/logs/22725690.html">简单说说SSDT</a> 2008-06-12</div><div><a href="http://aliwy.blogbus.com/logs/22699230.html">windbg+vmware调试驱动</a> 2008-06-11</div><div><a href="http://aliwy.blogbus.com/logs/12621372.html">SSDT Hook的妙用</a> 2007-12-24</div></div><br /><br /><div class="sysmsg"><b><a href="http://icity.cn" target="_blank">《城客》：第一本中文互动杂志！</a></b></div><br /><br /><div class="addfav">收藏到：<span class= "delicious"><a href="http://delicious.com/save?url=http%3A%2F%2Faliwy.blogbus.com%2Flogs%2F34569465.html&title=%E7%94%A8%E6%88%B7%E6%80%81%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%E8%B0%83%E7%94%A8Native+API%E7%9A%84%E6%96%B9%E6%B3%95">Del.icio.us</a></span></div>未分类Tue, 03 Feb 2009 15:14:48 +0800http://aliwy.blogbus.com/logs/34569465.htmlaliwyhttp://aliwy.blogbus.com/logs/34569465.htmlhttp://aliwy.blogbus.com/atom.xmlblogbus.com/aliwy_blogbus_com/~6921676/167950510/5029590迅雷下载地址转换为普通地址小工具http://aliwy.blogbus.com/logs/32791537.htmlaliwyhttp://aliwy.blogbus.com/logs/32791537.html好久没更新了，凑个数。<br />一直以来不太喜欢用迅雷，<br />但有些下载又只给出迅雷下载地址。<br />...<div class="relpost"><br/><h3>随机文章：</h3><div><a href="/logs/28269419.html">验证文件MD5值的小工具</a> 2008-08-28</div><div><a href="/logs/22857186.html">DriverLoader1.1(加载Driver的小玩意儿)</a> 2008-06-13</div><div><a href="/logs/14516913.html">TxtEdit(删除文本空行和空格的小程序)</a> 2008-01-26</div><div><a href="/logs/13764702.html">FASM Camera(摄像头小程序)</a> 2008-01-12</div><div><a href="/logs/11960643.html">Hello World (FASM)</a> 2007-12-12</div></div><br /><br /><div class="sysmsg"><b><a href="http://icity.cn" target="_blank">《城客》：第一本中文互动杂志！</a></b></div><br /><br /><div class="addfav">收藏到：<span class= "delicious"><a href="http://delicious.com/save?url=http%3A%2F%2Faliwy.blogbus.com%2Flogs%2F32791537.html&title=%E8%BF%85%E9%9B%B7%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80%E8%BD%AC%E6%8D%A2%E4%B8%BA%E6%99%AE%E9%80%9A%E5%9C%B0%E5%9D%80%E5%B0%8F%E5%B7%A5%E5%85%B7">Del.icio.us</a></span></div>未分类Sun, 21 Dec 2008 23:24:51 +0800http://aliwy.blogbus.com/logs/32791537.htmlaliwyhttp://aliwy.blogbus.com/logs/32791537.htmlhttp://aliwy.blogbus.com/atom.xmlblogbus.com/aliwy_blogbus_com/~6921676/167950511/5029590修改对齐字节数减小GCC.DDK编译的驱动体积http://aliwy.blogbus.com/logs/31041225.htmlaliwyhttp://aliwy.blogbus.com/logs/31041225.html<p>新安装了个Code::Blocks，可以直接采用GCC的DDK写驱动， <br />但编译出来的驱动比用MSDDK的大太多！！！ <br />...</p><div class="relpost"><br/><h3>随机文章：</h3><div><a href="http://aliwy.blogbus.com/logs/34569465.html">用户态应用程序调用Native API的方法</a> 2009-02-03</div><div><a href="http://aliwy.blogbus.com/logs/22857186.html">DriverLoader1.1(加载Driver的小玩意儿)</a> 2008-06-13</div><div><a href="http://aliwy.blogbus.com/logs/22725690.html">简单说说SSDT</a> 2008-06-12</div><div><a href="http://aliwy.blogbus.com/logs/22699230.html">windbg+vmware调试驱动</a> 2008-06-11</div><div><a href="http://aliwy.blogbus.com/logs/12621372.html">SSDT Hook的妙用</a> 2007-12-24</div></div><br /><br /><div class="sysmsg"><b><a href="http://icity.cn" target="_blank">《城客》：第一本中文互动杂志！</a></b></div><br /><br /><div class="addfav">收藏到：<span class= "delicious"><a href="http://delicious.com/save?url=http%3A%2F%2Faliwy.blogbus.com%2Flogs%2F31041225.html&title=%E4%BF%AE%E6%94%B9%E5%AF%B9%E9%BD%90%E5%AD%97%E8%8A%82%E6%95%B0%E5%87%8F%E5%B0%8FGCC.DDK%E7%BC%96%E8%AF%91%E7%9A%84%E9%A9%B1%E5%8A%A8%E4%BD%93%E7%A7%AF">Del.icio.us</a></span></div>未分类Thu, 06 Nov 2008 10:42:09 +0800http://aliwy.blogbus.com/logs/31041225.htmlaliwyhttp://aliwy.blogbus.com/logs/31041225.htmlhttp://aliwy.blogbus.com/atom.xmlblogbus.com/aliwy_blogbus_com/~6921676/167950512/5029590验证文件MD5值的小工具http://aliwy.blogbus.com/logs/28269419.htmlaliwyhttp://aliwy.blogbus.com/logs/28269419.html<p>写了个效验文件MD5值的工具。<br />很简单，纯属打发无聊。值班中......<br />...</p><div class="relpost"><br/><h3>随机文章：</h3><div><a href="/logs/32791537.html">迅雷下载地址转换为普通地址小工具</a> 2008-12-21</div><div><a href="/logs/22857186.html">DriverLoader1.1(加载Driver的小玩意儿)</a> 2008-06-13</div><div><a href="/logs/14516913.html">TxtEdit(删除文本空行和空格的小程序)</a> 2008-01-26</div><div><a href="/logs/13764702.html">FASM Camera(摄像头小程序)</a> 2008-01-12</div><div><a href="/logs/10694679.html">MSDN(oct_2001) for VC6.0 英文原版</a> 2007-11-07</div></div><br /><br /><div class="sysmsg"><b><a href="http://icity.cn" target="_blank">《城客》：第一本中文互动杂志！</a></b></div><br /><br /><div class="addfav">收藏到：<span class= "delicious"><a href="http://delicious.com/save?url=http%3A%2F%2Faliwy.blogbus.com%2Flogs%2F28269419.html&title=%E9%AA%8C%E8%AF%81%E6%96%87%E4%BB%B6MD5%E5%80%BC%E7%9A%84%E5%B0%8F%E5%B7%A5%E5%85%B7">Del.icio.us</a></span></div>未分类Thu, 28 Aug 2008 20:34:00 +0800http://aliwy.blogbus.com/logs/28269419.htmlaliwyhttp://aliwy.blogbus.com/logs/28269419.htmlhttp://aliwy.blogbus.com/atom.xmlblogbus.com/aliwy_blogbus_com/~6921676/167950513/5029590Icons in Win32http://aliwy.blogbus.com/logs/26703660.htmlaliwyhttp://aliwy.blogbus.com/logs/26703660.html<p><font color="#ff0000">来源：MSDN</font> </p><p>The ICO File<br />An Icon file, which usually has the ICO extension, contains one icon resource. Given that an icon resource can contain multiple images, it is no surprise that the file begins with an icon directory:</p><p>typedef struct<br />{<br />    WORD           idReserved;   // Reserved (must be 0)<br />    WORD           idType;       // Resource Type (1 for icons)<br />    WORD           idCount;      // How many images?<br />    ICONDIRENTRY   idEntries[1]; // An entry for each image (idCount of 'em)<br />} ICONDIR, *LPICONDIR;<br />...</p><div class="relpost"><br/><h3>随机文章：</h3><div><a href="/logs/34569465.html">用户态应用程序调用Native API的方法</a> 2009-02-03</div><div><a href="/logs/22725690.html">简单说说SSDT</a> 2008-06-12</div><div><a href="/logs/15873924.html">Windows Sockets Functions</a> 2008-02-23</div><div><a href="/logs/14942649.html">Microsoft SDK For VC6.0</a> 2008-02-04</div><div><a href="/logs/11134329.html">我的第一个ShellCode</a> 2007-11-26</div></div><br /><br /><div class="sysmsg"><b><a href="http://icity.cn" target="_blank">《城客》：第一本中文互动杂志！</a></b></div><br /><br /><div class="addfav">收藏到：<span class= "delicious"><a href="http://delicious.com/save?url=http%3A%2F%2Faliwy.blogbus.com%2Flogs%2F26703660.html&title=Icons+in+Win32">Del.icio.us</a></span></div>未分类Sat, 02 Aug 2008 16:36:16 +0800http://aliwy.blogbus.com/logs/26703660.htmlaliwyhttp://aliwy.blogbus.com/logs/26703660.htmlhttp://aliwy.blogbus.com/atom.xmlblogbus.com/aliwy_blogbus_com/~6921676/167950514/5029590汇编指令表http://aliwy.blogbus.com/logs/23950959.htmlaliwyhttp://aliwy.blogbus.com/logs/23950959.html<p><strong><font size="3">一、数据传输指令</font></strong> <br />...</p><div class="relpost"><br/><h3>随机文章：</h3><div><a href="/logs/12083799.html">Win32病毒入门（四）</a> 2007-12-15</div><div><a href="/logs/12083715.html">Win32病毒入门（三）</a> 2007-12-15</div><div><a href="/logs/12083607.html">Win32病毒入门（二）</a> 2007-12-15</div><div><a href="/logs/12083325.html">Win32病毒入门（一）</a> 2007-12-15</div><div><a href="/logs/11960643.html">Hello World (FASM)</a> 2007-12-12</div></div><br /><br /><div class="sysmsg"><b><a href="http://icity.cn" target="_blank">《城客》：第一本中文互动杂志！</a></b></div><br /><br /><div class="addfav">收藏到：<span class= "delicious"><a href="http://delicious.com/save?url=http%3A%2F%2Faliwy.blogbus.com%2Flogs%2F23950959.html&title=%E6%B1%87%E7%BC%96%E6%8C%87%E4%BB%A4%E8%A1%A8">Del.icio.us</a></span></div>未分类Tue, 01 Jul 2008 23:35:55 +0800http://aliwy.blogbus.com/logs/23950959.htmlaliwyhttp://aliwy.blogbus.com/logs/23950959.htmlhttp://aliwy.blogbus.com/atom.xmlblogbus.com/aliwy_blogbus_com/~6921676/167950515/5029590DriverLoader1.1(加载Driver的小玩意儿)http://aliwy.blogbus.com/logs/22857186.htmlaliwyhttp://aliwy.blogbus.com/logs/22857186.html<p>具体功能就不多说了，网上有很多类似的东西。<br />自己写一个自己用。以前写的那个界面有点大了，精简了一下。<br />...</p><div class="relpost"><br/><h3>随机文章：</h3><div><a href="http://aliwy.blogbus.com/logs/34569465.html">用户态应用程序调用Native API的方法</a> 2009-02-03</div><div><a href="http://aliwy.blogbus.com/logs/31041225.html">修改对齐字节数减小GCC.DDK编译的驱动体积</a> 2008-11-06</div><div><a href="http://aliwy.blogbus.com/logs/22725690.html">简单说说SSDT</a> 2008-06-12</div><div><a href="http://aliwy.blogbus.com/logs/22699230.html">windbg+vmware调试驱动</a> 2008-06-11</div><div><a href="http://aliwy.blogbus.com/logs/12621372.html">SSDT Hook的妙用</a> 2007-12-24</div></div><br /><br /><div class="sysmsg"><b><a href="http://icity.cn" target="_blank">《城客》：第一本中文互动杂志！</a></b></div><br /><br /><div class="addfav">收藏到：<span class= "delicious"><a href="http://delicious.com/save?url=http%3A%2F%2Faliwy.blogbus.com%2Flogs%2F22857186.html&title=DriverLoader1.1%28%E5%8A%A0%E8%BD%BDDriver%E7%9A%84%E5%B0%8F%E7%8E%A9%E6%84%8F%E5%84%BF%29">Del.icio.us</a></span></div>未分类Fri, 13 Jun 2008 16:52:38 +0800http://aliwy.blogbus.com/logs/22857186.htmlaliwyhttp://aliwy.blogbus.com/logs/22857186.htmlhttp://aliwy.blogbus.com/atom.xmlblogbus.com/aliwy_blogbus_com/~6921676/167950516/5029590简单说说SSDThttp://aliwy.blogbus.com/logs/22725690.htmlaliwyhttp://aliwy.blogbus.com/logs/22725690.html<p><font color="#ff0000">作者：云舒</font></p><p>论技术，我还差得远，而且网上关于SSDT的文章也多不胜数。但是还是想自己写一下，因为我想试试我能不能用最简单的语言来描述SSDT——这个对一般来人来说比较神秘的属于内核的地带。引用EVA说的一句话，“以为写个驱动就是内核，还远着了”——大概是这么个意思，记得不是很清楚。 <br />...</p><div class="relpost"><br/><h3>随机文章：</h3><div><a href="http://aliwy.blogbus.com/logs/12621372.html">SSDT Hook的妙用</a> 2007-12-24</div><div><a href="http://aliwy.blogbus.com/logs/34569465.html">用户态应用程序调用Native API的方法</a> 2009-02-03</div><div><a href="http://aliwy.blogbus.com/logs/31041225.html">修改对齐字节数减小GCC.DDK编译的驱动体积</a> 2008-11-06</div><div><a href="http://aliwy.blogbus.com/logs/22857186.html">DriverLoader1.1(加载Driver的小玩意儿)</a> 2008-06-13</div><div><a href="http://aliwy.blogbus.com/logs/22699230.html">windbg+vmware调试驱动</a> 2008-06-11</div></div><br /><br /><div class="sysmsg"><b><a href="http://icity.cn" target="_blank">《城客》：第一本中文互动杂志！</a></b></div><br /><br /><div class="addfav">收藏到：<span class= "delicious"><a href="http://delicious.com/save?url=http%3A%2F%2Faliwy.blogbus.com%2Flogs%2F22725690.html&title=%E7%AE%80%E5%8D%95%E8%AF%B4%E8%AF%B4SSDT">Del.icio.us</a></span></div>未分类Thu, 12 Jun 2008 00:07:00 +0800http://aliwy.blogbus.com/logs/22725690.htmlaliwyhttp://aliwy.blogbus.com/logs/22725690.htmlhttp://aliwy.blogbus.com/atom.xmlblogbus.com/aliwy_blogbus_com/~6921676/167950517/5029590windbg+vmware调试驱动http://aliwy.blogbus.com/logs/22699230.htmlaliwyhttp://aliwy.blogbus.com/logs/22699230.html<font color="#ff0000">来源：</font><a href="http://www.diybl.com/"><font color="#ff0000">http://www.diybl.com</font></a><br /><br />一、安装windbg+vmware，配置主机与虚拟机<br />1、windbg是微软提供的免费的内核级的调试工具，到处可以下载。<br />2、vmware不是免费的，不过在网上可以找到破解版。<br />...<div class="relpost"><br/><h3>随机文章：</h3><div><a href="http://aliwy.blogbus.com/logs/34569465.html">用户态应用程序调用Native API的方法</a> 2009-02-03</div><div><a href="http://aliwy.blogbus.com/logs/31041225.html">修改对齐字节数减小GCC.DDK编译的驱动体积</a> 2008-11-06</div><div><a href="http://aliwy.blogbus.com/logs/22857186.html">DriverLoader1.1(加载Driver的小玩意儿)</a> 2008-06-13</div><div><a href="http://aliwy.blogbus.com/logs/22725690.html">简单说说SSDT</a> 2008-06-12</div><div><a href="http://aliwy.blogbus.com/logs/12621372.html">SSDT Hook的妙用</a> 2007-12-24</div></div><br /><br /><div class="sysmsg"><b><a href="http://icity.cn" target="_blank">《城客》：第一本中文互动杂志！</a></b></div><br /><br /><div class="addfav">收藏到：<span class= "delicious"><a href="http://delicious.com/save?url=http%3A%2F%2Faliwy.blogbus.com%2Flogs%2F22699230.html&title=windbg%2Bvmware%E8%B0%83%E8%AF%95%E9%A9%B1%E5%8A%A8">Del.icio.us</a></span></div>未分类Wed, 11 Jun 2008 16:06:50 +0800http://aliwy.blogbus.com/logs/22699230.htmlaliwyhttp://aliwy.blogbus.com/logs/22699230.htmlhttp://aliwy.blogbus.com/atom.xmlblogbus.com/aliwy_blogbus_com/~6921676/167950518/5029590释然http://aliwy.blogbus.com/logs/21355452.htmlaliwyhttp://aliwy.blogbus.com/logs/21355452.html既然连众人梦寐以求的机遇都可以放弃，<br />那还有什么不可以放弃，还有什么放不下的呢？<br />亲情、爱情，反正我也一无所有，还怕什么？<br />...<div class="relpost"><br/><h3>随机文章：</h3><div><a href="/logs/21230379.html">如愿以偿</a> 2008-05-19</div><div><a href="/logs/19164636.html">我要回去</a> 2008-04-16</div><div><a href="/logs/17387019.html">压抑……累……</a> 2008-03-21</div><div><a href="/logs/15052734.html">过年好</a> 2008-02-07</div><div><a href="/logs/13044195.html">二〇〇八新年快乐</a> 2007-12-31</div></div><br /><br /><div class="sysmsg"><b><a href="http://icity.cn" target="_blank">《城客》：第一本中文互动杂志！</a></b></div><br /><br /><div class="addfav">收藏到：<span class= "delicious"><a href="http://delicious.com/save?url=http%3A%2F%2Faliwy.blogbus.com%2Flogs%2F21355452.html&title=%E9%87%8A%E7%84%B6">Del.icio.us</a></span></div>未分类Wed, 21 May 2008 22:40:07 +0800http://aliwy.blogbus.com/logs/21355452.htmlaliwyhttp://aliwy.blogbus.com/logs/21355452.htmlhttp://aliwy.blogbus.com/atom.xmlblogbus.com/aliwy_blogbus_com/~6921676/167950519/5029590