使用外壳扩展的copyhook监控资源管理的文件复制粘贴拷贝删除等等操作，也可以再操作执行前调用回调函数，决定是否执行-Expansion of the use of shell resources management monitoring copyhook copy and paste the file copy operation of delete, etc., also can be operated to implement a callback function before th

Windows程序运行原理及程序编写流程，窗口产生过程，句柄原理，消息队列，回调函数，窗口关闭与应用程序退出的工作关系，使用VC++的若干小技巧，stdcall与cdecl调用规范的比较，初学者常犯错误及注意事项。-Principles and procedures for running Windows programs written procedure, the window generating process, handle theory, message queue, the cal

就是定义两个玩家，进行石头剪刀布的判断，然后结束后打印出谁的胜利和比分。-Is the definition of the two players, to judge the stone scissors cloth, and then print out who after the victory and score.

dump 系统进程信息，结合mimikatz 使用，可以获取系统hash-Using ProcDump usage: procdump [-a] [[-c|-cl CPU usage] [-u] [-s seconds]] [-n exceeds] [-e [1 [-b]] [-f <filter,...>] [-g] [-h] [-l] [-m|-ml commit usage] [-ma |-mp] [-o] [-p|-pl counter threshold] [-r