C:\XXX> lib one.obj two.lib /OUT:newname.lib
Error resolving expression <{,,kernel.dll}g_pprcNK->dwId>
ERROR in ReadStruct, can't read {,,kernel.dll}g_pprcNK->dwId
Unable to resolve NK.EXE symbols.
Is the debugger in a break state?
If not, you must first break into the debugger before attempting to use
debugger extension commands.
If so, make sure that valid symbols are loaded.
CEDEBUGX
File Version : 6.00.2217.1
Product Version : 6.00.2217.1
COMMANDS:
To see detailed help type the command followed by /?
Extension Information and Control:
help - display this list
version - display version information for this extension
refresh - refresh cached info (must call after any run/break cycle).
xml - capture debug info in an xml file and display formatted data.
save - prompts the user for a location in which to save all files generated in the session.
getworkingpath - display the path to the debugger extension's current working folder.
setworkingpath - specify a path to use as a new destination for saved files (working folder)
General Information:
exception - exception info and current call stack
kinfo - prints the UserKInfo table
toc - prints ROM table of contents
oat - prints OEM Address Table
disasm - retrieve disassembly for a given address
getsym - list nearest symbol at addr
checksymbols - validate that correct symbols are in use.
dd - dump data at given address
ll - prints linked lists generically
expr - evaluate an expression
getsizeof - get the size, in bytes, of a type or expression
d2x - convert a decimal integer to a hex value.
x2i - convert a hex value to a singed integer.
x2u - convert a hex value to an unsigned integer.
ms2t - display a value in milliseconds as hours, minutes, and seconds.
Diagnostics:
diagnose - provide detailed information about hangs or crashes
Threads:
thread - prints thread information from thread ptr
threadh - prints thread information from thread handle
threadlist - enumerate all threads (basic info). use "threadlist ?" for more options
allthreads - enumerate all threads (extended info)
runlist - enumerate threads on the scheduler's run list.
sleeplist - enumerate threads on the scheduler's sleep list.
context - print context information for a given thread.
stackeval - prints all values on a thread's stack, looking for potential symbols and known objects
stacktrace - prints stack ptr and frame ptrs with PC and ret addr for a given thread
Processes and Modules:
proc - prints process information
proclist - lists all processes
module - prints module information
modlist - lists all loaded modules
Handles:
handlelist - prints active handle list
handle - evaluates a handle to determine type
h2p - get kernel object ptr from a handle
p2h - get a handle from a kernel object ptr
Blocked Threads:
proxy - prints detailed information about a particular proxy (i.e. blocking object)
proxylist - lists all of the proxies in the system or owned by a particualr process
blocked - prints list of blocking objects (proxies) and the threads they are blocking
cslist - prints a list of critical sections that are currently blocking threads
eventlist - prints a list of events that are currently blocking threads
sending - prints a list of threads blocked in SendMessage calls
Memory:
heaplist - prints summary information about all heaps in the system
heapwalk - print extended heap information
walkthisheap - print heap information for specific heap
meminfo - prints system memory information
heapitem - finds a heap item spanning an address and dumps item contents
dumpitem - prints contents of a heap item
valist - prints virtual allocations associated with a process
fsmaplist - prints summary information about all memory-mapped files
fsmap - prints information about a memory-mapped file
fsviewlist - prints summary information about all memory-mapped views
fsview - prints information about a memory-mapped view
pgpool - prints information about the page pools
GWES:
win - enumerate all windows (use it without arguments for more options)
winh - prints the window information for a handle (can use p|c|n|d|a) for navigation
gditable - enumerate all GDI entries
gdih - prints the information of the GDI entity related to the provided handle
gdiobj - prints the information of the GDI entity related to the provided gdi object
screenshot - creates and shows a screenshot of the current UI state of the device
msgqueues - lists active message queues
CeRunAppAtEvent(_T("\\\\.\\Notifications\\NamedEvents\\MYWAKEUPEVENT"),
NOTIFICATION_EVENT_WAKEUP要求 kernel (GWES) 把 OS內部 的 EVENT_WAKEUP 轉成 Signal MYWAKEUPEVENT。也就是說，即使你的 ap 已經結束，但是event 已經 create 起來，OS也註冊了，所以即使你的 Ap 已經結束了，OS 還是會依照註冊的內容執行..
CeRunAppAtEvent(_T("\\\\.\\Notifications\\NamedEvents\\MYWAKEUPEVENT"),
NOTIFICATION_EVENT_NONE)
// SYSWAKEUPEVENT.cpp : Defines the entry point for the application.
//
#include "stdafx.h"
#include <notify.h>
HWND MainWnd;
int rcvcnt=0;
DWORD WINAPI WaiterThread(PVOID pArg)
{
HANDLE WakeUpEvent;
WakeUpEvent = CreateEvent(NULL,FALSE,FALSE,_T("MYWAKEUPEVENT"));
if(WakeUpEvent == NULL){
RETAILMSG(1,(TEXT("CreateEvent Failed\r\n")));
ExitThread(0);
}
if(!CeRunAppAtEvent(_T("\\\\.\\Notifications\\NamedEvents\\MYWAKEUPEVENT"),
NOTIFICATION_EVENT_NONE)){
RETAILMSG(1,(TEXT("CeRunAppAtEvent NONE Failed\r\n")));
ExitThread(0);
}
if(!CeRunAppAtEvent(_T("\\\\.\\Notifications\\NamedEvents\\MYWAKEUPEVENT"),
NOTIFICATION_EVENT_WAKEUP)){
RETAILMSG(1,(TEXT("CeRunAppAtEvent Failed\r\n")));
ExitThread(0);
}
while(1){
DWORD EventGot;
EventGot = WaitForSingleObject(WakeUpEvent,INFINITE);
if(EventGot==WAIT_OBJECT_0){
rcvcnt++;
RETAILMSG(1,(TEXT("received! %d\r\n"),rcvcnt));
InvalidateRect(MainWnd,NULL,TRUE);
}else{
RETAILMSG(1,(TEXT("receive not object 0 : %d\r\n"),EventGot));
}
}
}
HANDLE hWaiterThread;
LRESULT CALLBACK MainWndProc(HWND hWnd, UINT wMsg, WPARAM wParam, LPARAM lParam)
{
PAINTSTRUCT ps;
RECT rect;
HDC hdc;
switch(wMsg){
case WM_PAINT:
{
TCHAR outtext[50];
GetClientRect(hWnd,&rect);
hdc = BeginPaint(hWnd, &ps);
swprintf(outtext,TEXT("Received WAKEUP EVENT: %d"),rcvcnt);
DrawText(hdc, outtext,-1,&rect,DT_CENTER | DT_CENTER | DT_SINGLELINE);
EndPaint(hWnd,&ps);
}
return 0;
case WM_DESTROY:
if(hWaiterThread)
CloseHandle(hWaiterThread);
PostQuitMessage(0);
}
return DefWindowProc(hWnd, wMsg, wParam, lParam);
}
int WINAPI WinMain(HINSTANCE hInstance,
HINSTANCE hPrevInstance,
LPTSTR lpCmdLine,
int nCmdShow)
{
WNDCLASS wc;
MSG msg;
// register the main windows class
wc.style = 0;
wc.lpfnWndProc = MainWndProc;
wc.cbClsExtra = 0;
wc.cbWndExtra = 0;
wc.hInstance = hInstance;
wc.hIcon = NULL;
wc.hCursor = LoadCursor(NULL,IDC_ARROW);
wc.hbrBackground = (HBRUSH) GetStockObject(WHITE_BRUSH);
wc.lpszMenuName = NULL;
wc.lpszClassName = TEXT("SYSWAKEUPEVENT");
if(RegisterClass(&wc) == NULL){
RETAILMSG(1,(TEXT("RegisterClass Failed\r\n")));
return -1;
}
MainWnd = CreateWindowEx(WS_EX_NODRAG,TEXT("SYSWAKEUPEVENT"),TEXT("SYSWAKEUPEVENT"),
WS_VISIBLE | WS_CAPTION | WS_SYSMENU,
CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT,
NULL, NULL, hInstance, NULL);
if(!IsWindow(MainWnd)){
RETAILMSG(1,(TEXT("CreateWindowsEx Failed\r\n")));
return -2;
}
ShowWindow(MainWnd,nCmdShow);
UpdateWindow(MainWnd);
hWaiterThread = CreateThread(NULL,0,WaiterThread,NULL,0,NULL);
if(hWaiterThread == NULL){
RETAILMSG(1,(TEXT("CreateThread Failed\r\n")));
}
while(GetMessage (&msg,NULL,0,0) ) {
TranslateMessage(&msg);
DispatchMessage(&msg);
}
return msg.wParam;
return 0;
}
ffmpeg -i file.ape output.wav
lame -h CDImage.wav CDImage.mp3
mp3splt -T1 -c CDImage.cue // 使用 id3tag ver 1 -- 其實要看一下 man就是follow 這一篇 的說明