ClrPicker.zip - 一个简单的屏幕颜色拾取工具,最近做一个项目要用到这类工具,就自己写了一个。代码很简单,需要Vista(包括Vista)以上的版本才能运行。代码肯定有BUG(比如说关掉主题的话,可能运行不正常),我没有测试,只满足了自己的需求。,2009-07-19 15:03:28,下载13次
showhide.zip - 一个用户模式下检测隐藏进程的小工具,代码很简单,就是暴力枚举,但是简单有效,2009-06-30 20:44:35,下载46次
NTFS_ADSTool.zip - NTFS Alternate Data Streams Tool
by Charles Lee
Usage: NTFS_ADSTool.exe /c src_stream dest_stream
NTFS_ADSTool.exe /d stream_path
NTFS_ADSTool.exe /l stream_path
See readme.txt,2009-06-30 20:41:13,下载8次
ShowError.zip - 一个可以格式化Windows系统错误代码的小工具,支持Win32 Error Code 和 NTSTATUS 错误代码。,2009-06-30 20:35:41,下载9次
CsrssWalker.zip - 在Csrss.exe中,保存着所有Win32子系统进程的进程信息,这些信息以链表的形式保存。
正常情况下,每一个新创建的进程都会通知Csrss.exe,Csrss.exe接收这些信息然后保存起来,所以遍历这个链表就可以得到所有Win32子系统进程的信息。首先就是找链表头了,链表头为CsrssRootProcess,在CSRSRV.DLL导出的函数中有对CsrssRootProcess的操作,因此可以通过CSRSRV.DLL的导出函数找到CsrssRootProcess。
通过遍历这个链表就能取得进程信息,2009-06-30 20:30:00,下载33次
mcwsrc21.zip - Windows API Message Cracker Wizard Tool
for easier use of WINDOWSX.H message cracking macros
(c) 2003-2005 Hernan Di Pietro
Release 2.1
version history
1.0 - first release
1.2 + multiple message selection feature
+ added missing message crackers for WM_HOTKEY and WM_COPYDATA
+ fixed small interface bugs
2.0 + added WM_CTLCOLORxxx message crackers
+ added show/hide target code
+ added enable/disable stay on top
+ added window transparency options for 2000/XP
+ added message filter
+ added bitmaps on list box
+ added "No heading comments" option
+ added "No TODO comments" option
+ fixed keyboard logic and tab stops
2.1 - fixed clipboard-copy bug (Thanks to Agnel Kurian mailto:agnel.kurian@gmail.com)
2009/6/11
Charles Lee
+ added clear all selected items button,2009-06-30 20:22:01,下载23次
explorerpe_src.zip - 一个PE文件解析工具,亮点功能是可以生成漂亮的HTML报表文件。,2009-06-30 20:18:52,下载4次
VS_Solution_Converter.zip - This utility is designed to make it easier for folks to switch back and
forth between Visual Studio 2005 and Visual Studio 2008. It edits the
solution (*.sln) and project files (*.csproj, *.vbproj, and *.vcproj) so
that they can be openeded by either version.
The installer creates a shell extension which adds an "open with" option
for the solution file.
///////////////////////////////
Change log:
*2009/6/7 By Charles
-- Center window on start, minor UI fine tuning
-- Fixed bugs when converting ANSI encoded(e.g. Cmake generated solution files uses ANIS encode) solution files
-- Fixed a bug when converting solution files start with an empty line
-- Add drag & drop support,2009-06-30 20:11:40,下载61次
DiskMon.zip - DiskMon的驱动逆向源码。
DiskMon运行在NT4上才加载驱动,在W2k以上平台其使用kernel event tracing实现磁盘活动的监视,
但其驱动可以跑在W2k/XP/2K3/Vista上,2009-06-30 20:05:52,下载73次