Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by UINT Msg
Winmine_XP.exe 코드 분석
IDA는 실행파일을 기계어에서 사람이 읽을 수 있는 형태로 바꿔주는 도구이다. 이 IDA를 이용해 Winmine_XP.exe를 분석하겠다. IDA에 해당 실행 파일을 넣으면 다음과 같은 Graph View를 볼 수 있다. *Graph View: 함수 흐름을 블록 단위 그래프로 보여줌 F5를 눌러 디컴파일하면 다음과 같은 101줄의 코드로 변환되었다.
BUUCTF reverse wp 51 - 55
findKey shift + f12 找到一个flag{}字符串, 定位到关键函数, F5无效, 大概率是有花指令, 读一下汇编 这里连续push两个byte_428C54很奇怪, nop掉下面那个, 再往上找到函数入口, p设置函数入口, 再F5 LRESULT __stdcall sub_401640(HWND hWndParent, UINT Msg, WPARAM wParam, LPARAM lParam) { int v5; size_t v6; DWORD v7; int v8; int v9; CHAR *v10; CHAR v11[256]; char v12[7]; __int16 v13; char v14; char Str[253]; __int16 v16; char v17; CHAR v18[256]; CHAR String[4]; int v20; __int16 v21; CHAR Text[32]; struct tagRECT Rect; CHAR Buffer[100]; HDC hdc; struct tagPAINTSTRUCT...
进程的通信 - WM_COPYDATA
在Windows程序中,各个进程之间常常需要交换数据,进行数据通讯。其中使用SendMessage向另一进程发送WM_COPYDATA消息是一种比较经济实惠的方法。 WM_COPYDATA通信需要将传递的消息封装在COPYDATASTRUCT结构体中,在SendMessage消息传递函数时作为lParam参数传递 COPYDATASTRUCT的结构如下: typedef struct tagCOPYDATASTRUCT { ULONG_PTR dwData; DWORD cbData; PVOID lpData; } COPYDATASTRUCT, *PCOPYDATASTRUCT; 参数dwData 为自定义数据,按照自己习惯设置就好,不影响对象的传输; 参数cbData 表示传递数据的大小(以字节为单位 参数PVOID 表示传递的数据,是一个void*类型...
[Unity 3d] 使用 Unity 开发无边框、可拖拽、缩放、置顶、最小化的应用
文章出处: https://www.jianshu.com/p/c81342e96def using System; using System.Runtime.InteropServices; using System.Text; using UnityEngine; public static class PInvoke { static IntPtr ptr; public static IntPtr UnityHWnd { get { if (ptr == null || ptr == IntPtr.Zero) { ptr = GetUnityWindow(); } return ptr; } } #region 常量 public const ulong WS_MAXIMIZEBOX = 0x00010000L; public const ulong WS_DLGFRAME = 0x00400000L; public const ulong WS_SIZEBOX = 0x00040000L; public const ulong WS_BORDER =...
Windows.h 库函数的学习
句柄: 参考链接 1、FindWindow函数 该函数可以通过窗口类名或者窗口标题名来查找特定窗口句柄,返回值是窗口的句柄。 HWND FindWindowW( [in, optional] LPCWSTR lpClassName, [in, optional] LPCWSTR lpWindowName ); 微软windows.h API文档 这里可以用SPY++抓类名/窗口标题。 抓目标窗口,这里就复制标题来抓句柄。 2、SendMessage函数 这个函数的功能是向句柄对应窗口发送指令 SendMessage function (winuser.h) - Win32 apps | Microsoft Docs LRESULT SendMessage( [in] HWND hWnd, [in] UINT Msg, [in] WPARAM wParam, [in] LPARAM lParam ); UNI 例子1- WM_CLOSE 代码 //摧毁窗口测试 void testHWND() { HWND window; //定义一个窗口句柄变量,用来储存窗口句柄...
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with UINT
Contact UINT, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack