Skip to content

Instantly share code, notes, and snippets.

View ntddk's full-sized avatar

Yuma Kurogome ntddk

  • Tokyo, Japan
View GitHub Profile
@ntddk
ntddk / fizzbuzz.c
Last active December 3, 2021 06:58
code golf
// お題
// http://togetter.com/li/92612
// FizzBuzzを30バイトで
// my code
// 1.
//main(_){printf(_%15?_%3?_%5?"%d\n":"Buzz\n":"Fizz\n":"FizzBuzz\n",_);main(++_);}
// 80bytes
// 2.
main(_){printf(_%3?_%5?"%d":0:"Fizz",_);puts(_%5?"":"Buzz");main(++_);}
@ntddk
ntddk / gist:b38c93c1a89642358277
Created October 2, 2014 12:55
KiServiceTable
kd> .for(r $t0=0; @$t0<dwo(nt!KiServiceLimit); r $t0=@$t0+1){.printf "%y\n", nt!KiServiceTable+(dwo(nt!KiServiceTable+@$t0*4)>>4)}
fffff801`85aa38c4
fffff801`85b3cc10
nt!NtAcceptConnectPort (fffff801`75f238ac)
nt!NtMapUserPhysicalPagesScatter (fffff801`760afb54)
nt!NtWaitForSingleObject (fffff801`75e52d20)
fffff801`85ba51a0
nt!NtReadFile (fffff801`75eb42f0)
nt!NtDeviceIoControlFile (fffff801`75e56740)
nt!NtWriteFile (fffff801`75e9e770)
@ntddk
ntddk / gist:f11b1157d914fc9b1a52
Last active August 29, 2015 14:07
livekd on #Windows10 Technical Preview
C:\Program Files (x86)\Windows Kits\8.1\Debuggers\x64>livekd.exe
LiveKd v5.31 - Execute kd/windbg on a live system
Sysinternals - www.sysinternals.com
Copyright (C) 2000-2013 Mark Russinovich and Ken Johnson
Launching C:\Program Files (x86)\Windows Kits\8.1\Debuggers\x64\kd.exe:
Microsoft (R) Windows Debugger Version 6.3.9600.17237 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
@ntddk
ntddk / win32k.sys.log
Last active July 8, 2021 03:31
exports of win32k.sys/win32kbase.sys/win32kfull.sys #Windows10 Technical Preview
Microsoft (R) COFF/PE Dumper Version 12.00.30501.0
Copyright (C) Microsoft Corporation. All rights reserved.
Dump of file C:\Users\Administrator\Desktop\win32k.sys
File Type: EXECUTABLE IMAGE
Section contains the following exports for WIN32K.SYS
@ntddk
ntddk / gist:0ad8cc29f19b203dca41
Created October 1, 2014 18:56
exports of ntoskrnl.exe #Windows10 Technical Preview
Microsoft (R) COFF/PE Dumper Version 12.00.30501.0
Copyright (C) Microsoft Corporation. All rights reserved.
Dump of file C:\Users\Administrator\Desktop\ntoskrnl.exe
File Type: EXECUTABLE IMAGE
Section contains the following exports for ntoskrnl.exe
@ntddk
ntddk / gist:059906242697c4b0e023
Last active August 29, 2015 14:07
exports of ntdll.dll #Windows10 Technical Preview
Microsoft (R) COFF/PE Dumper Version 12.00.30501.0
Copyright (C) Microsoft Corporation. All rights reserved.
Dump of file C:\Users\Administrator\Desktop\ntdll.dll
File Type: DLL
Section contains the following exports for ntdll.dll
n;f;i;main(){scanf("%d",&n);printf("%d ",n);if(n<=1)f=1;for(i=2;++i<=n/2;){if(n%i==0)f=1;break;}printf((f==0)?"is a prime number":"is not a prime number");}
!for_each_module !chkimg @#ModuleName -d
u [addr]
!address [jmp dest addr]
s -a [base addr] L?[end addr]/4 "MZ"
!dh -a [base addr]
.writemem [file] [base addr] [end addr]
{
"color_scheme": "Packages/Monokai Extended/Monokai Extended.tmTheme",
"draw_white_space": "all",
"fallback_encoding": "UTF-8",
"font_face": "Migu 2M",
"font_size": 11,
"highlight_line": true,
"wrap_width": 120,
"rulers": [120],
"show_encoding": true,
@ntddk
ntddk / x86_opcode
Created September 6, 2014 14:19
x86命令辞書
06 push es 独立語
07 pop es 独立語
0え push cs 独立語
16 push ss 独立語
17 pop ss 独立語
1え push ds 独立語
1f pop ds 独立語
27 daa 独立語
2f das 独立語
37 aaa 独立語