Matthieu Suiche’s blog !Happiness only real when shared.

Few words about Microsoft interoperability initiative.

As you probably know, Microsoft released last month several thousands pages of documentation about office file format and Windows protocols.
It means numerous hundreds(thousands?) of functions/algorithms documentation and pseudo-code. But, are these pseudo-function right? It looks not.
While I was reading [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol Specification, I was a bit […]

Some useful commands (Memento)

If one time you want to fill a buffer (here size is 0×10000) with null bytes, and put a string inside.
Don’t forget the “a” between “>” and “< "
kd> $$>a< “FULL_SCRIPT_PATH” BASE_ADDRESS

$$
$$ Matthieu Suiche 08/2007
$$ http://www.msuiche.net
$$

.if (${/d:$arg1})
{
f ${$arg1} L10000 0

ea ${$arg1} “I’m a fucking string !!!! test […]

First steps with WinDbg scripting… (Memento)

Here is a sample of script for Windbg for people who doesn’t want to waste time because they don’t find any document.
Firstly, to declare a variable you must use the prefix “r”. Moreover, the name must be $t[0..n]
Secondly, if you use the flag “/D” after “.printf” you can use pseudo-html code inside.
Thirdly, to read the […]