Tue, 24 Jun 2008 22:57:00 GMThttp://item.feedsky.com/~csdn.net/hu0406/~1353212/87266005/1358319/1/item.htmlcomments/2583844.aspx0comments/commentRss/2583844.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2583844ASCII码记录<img src ="aggbug/2583844.aspx" width = "1" height = "1" />Wed, 25 Jun 2008 06:57:00 +0800虎0406http://blog.csdn.net/hu0406/archive/2008/06/24/2583844.aspx#Feedbackhttp://blog.csdn.net/hu0406/archive/2008/06/24/2583844.aspx虎0406http://blog.csdn.net/hu0406/archive/2008/06/24/2583844.aspxhttp://blog.csdn.net/hu0406/rss.aspxcsdn.net/hu0406/~1353212/87266005/1358319http://item.feedsky.com/~csdn.net/hu0406/~1353212/87266006/1358319/1/item.htmlcomments/2537619.aspx0comments/commentRss/2537619.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2537619Windows NT 下 RPC 的高性能模式 - LPC<img src ="aggbug/2537619.aspx" width = "1" height = "1" />Thu, 12 Jun 2008 16:59:00 +0800虎0406http://blog.csdn.net/hu0406/archive/2008/06/12/2537619.aspx#Feedbackhttp://blog.csdn.net/hu0406/archive/2008/06/12/2537619.aspx虎0406http://blog.csdn.net/hu0406/archive/2008/06/12/2537619.aspxhttp://blog.csdn.net/hu0406/rss.aspxcsdn.net/hu0406/~1353212/87266006/1358319http://item.feedsky.com/~csdn.net/hu0406/~1353212/87266007/1358319/1/item.htmlcomments/2537617.aspx0comments/commentRss/2537617.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2537617异步的 RPC 调用<img src ="aggbug/2537617.aspx" width = "1" height = "1" />Thu, 12 Jun 2008 16:57:00 +0800虎0406http://blog.csdn.net/hu0406/archive/2008/06/12/2537617.aspx#Feedbackhttp://blog.csdn.net/hu0406/archive/2008/06/12/2537617.aspx虎0406http://blog.csdn.net/hu0406/archive/2008/06/12/2537617.aspxhttp://blog.csdn.net/hu0406/rss.aspxcsdn.net/hu0406/~1353212/87266007/1358319http://item.feedsky.com/~csdn.net/hu0406/~1353212/87266008/1358319/1/item.htmlcomments/2537615.aspx0comments/commentRss/2537615.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2537615RPC编程<img src ="aggbug/2537615.aspx" width = "1" height = "1" />Thu, 12 Jun 2008 16:55:00 +0800虎0406http://blog.csdn.net/hu0406/archive/2008/06/12/2537615.aspx#Feedbackhttp://blog.csdn.net/hu0406/archive/2008/06/12/2537615.aspx虎0406http://blog.csdn.net/hu0406/archive/2008/06/12/2537615.aspxhttp://blog.csdn.net/hu0406/rss.aspxcsdn.net/hu0406/~1353212/87266008/1358319http://item.feedsky.com/~csdn.net/hu0406/~1353212/87266009/1358319/1/item.htmlcomments/2537614.aspx0comments/commentRss/2537614.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2537614RPC编程 转自:http://www.cppblog.com/jb8164/<img src ="aggbug/2537614.aspx" width = "1" height = "1" />Thu, 12 Jun 2008 16:54:00 +0800虎0406http://blog.csdn.net/hu0406/archive/2008/06/12/2537614.aspx#Feedbackhttp://blog.csdn.net/hu0406/archive/2008/06/12/2537614.aspx虎0406http://blog.csdn.net/hu0406/archive/2008/06/12/2537614.aspxhttp://blog.csdn.net/hu0406/rss.aspxcsdn.net/hu0406/~1353212/87266009/1358319http://item.feedsky.com/~csdn.net/hu0406/~1353212/87266010/1358319/1/item.htmlcomments/2512827.aspx0comments/commentRss/2512827.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2512827苦心人，天不负，破釜沉舟，百二秦川终归蜀；有志者，事竟成，卧薪尝胆，三千越甲可吞吴。<img src ="aggbug/2512827.aspx" width = "1" height = "1" />Thu, 05 Jun 2008 17:46:00 +0800虎0406http://blog.csdn.net/hu0406/archive/2008/06/05/2512827.aspx#Feedbackhttp://blog.csdn.net/hu0406/archive/2008/06/05/2512827.aspx虎0406http://blog.csdn.net/hu0406/archive/2008/06/05/2512827.aspxhttp://blog.csdn.net/hu0406/rss.aspxcsdn.net/hu0406/~1353212/87266010/1358319http://item.feedsky.com/~csdn.net/hu0406/~1353212/87266011/1358319/1/item.htmlcomments/2508182.aspx0comments/commentRss/2508182.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2508182VirtualAlloc<img src ="aggbug/2508182.aspx" width = "1" height = "1" />Wed, 04 Jun 2008 01:07:00 +0800虎0406http://blog.csdn.net/hu0406/archive/2008/06/03/2508182.aspx#Feedbackhttp://blog.csdn.net/hu0406/archive/2008/06/03/2508182.aspx虎0406http://blog.csdn.net/hu0406/archive/2008/06/03/2508182.aspxhttp://blog.csdn.net/hu0406/rss.aspxcsdn.net/hu0406/~1353212/87266011/1358319http://item.feedsky.com/~csdn.net/hu0406/~1353212/87266012/1358319/1/item.htmlcomments/2508170.aspx0comments/commentRss/2508170.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2508170内存管理<img src ="aggbug/2508170.aspx" width = "1" height = "1" />Wed, 04 Jun 2008 01:03:00 +0800虎0406http://blog.csdn.net/hu0406/archive/2008/06/03/2508170.aspx#Feedbackhttp://blog.csdn.net/hu0406/archive/2008/06/03/2508170.aspx虎0406http://blog.csdn.net/hu0406/archive/2008/06/03/2508170.aspxhttp://blog.csdn.net/hu0406/rss.aspxcsdn.net/hu0406/~1353212/87266012/1358319http://item.feedsky.com/~csdn.net/hu0406/~1353212/87266013/1358319/1/item.htmlcomments/2506728.aspx0comments/commentRss/2506728.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2506728MultiByteToWideChar和WideCharToMultiByte用法详解<img src ="aggbug/2506728.aspx" width = "1" height = "1" />Tue, 03 Jun 2008 19:14:00 +0800虎0406http://blog.csdn.net/hu0406/archive/2008/06/03/2506728.aspx#Feedbackhttp://blog.csdn.net/hu0406/archive/2008/06/03/2506728.aspx虎0406http://blog.csdn.net/hu0406/archive/2008/06/03/2506728.aspxhttp://blog.csdn.net/hu0406/rss.aspxcsdn.net/hu0406/~1353212/87266013/1358319http://item.feedsky.com/~csdn.net/hu0406/~1353212/87266014/1358319/1/item.htmlcomments/2506719.aspx0comments/commentRss/2506719.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2506719VC环境变量设置<img src ="aggbug/2506719.aspx" width = "1" height = "1" />Tue, 03 Jun 2008 19:12:00 +0800虎0406http://blog.csdn.net/hu0406/archive/2008/06/03/2506719.aspx#Feedbackhttp://blog.csdn.net/hu0406/archive/2008/06/03/2506719.aspx虎0406http://blog.csdn.net/hu0406/archive/2008/06/03/2506719.aspxhttp://blog.csdn.net/hu0406/rss.aspxcsdn.net/hu0406/~1353212/87266014/1358319http://item.feedsky.com/~csdn.net/hu0406/~1353212/87266015/1358319/1/item.htmlcomments/2486135.aspx0comments/commentRss/2486135.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2486135&lt;font size="4"&gt;通过Hash值计算API的名字&lt;br /&gt;2007-11-19 19:26&lt;br /&gt;标 题: 【原创】 通过Hash值计算API的名字&lt;br /&gt;作 者: marxixing&lt;br /&gt;时 间: 2007-11-19,17:39&lt;br /&gt;链 接: http://bbs.pediy.com/showthread.php?t=55187&lt;br /&gt;&lt;br /&gt;通过Hash值计算API的名字&lt;br /&gt;&lt;br /&gt; 2007.11.15&lt;br /&gt;&lt;br /&gt; by marxixing@tom.com&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt; 在分析shellcode的过程中，我们经常会遇到被编码后的API的hash值，因为hash算法是不可逆算法，我们不可能通过一个DWORD值得知原始的api，为了知道shellcode都调用了哪些api，你就<img src ="aggbug/2486135.aspx" width = "1" height = "1" />Tue, 27 May 2008 19:46:00 +0800虎0406http://blog.csdn.net/hu0406/archive/2008/05/27/2486135.aspx#Feedbackhttp://blog.csdn.net/hu0406/archive/2008/05/27/2486135.aspx虎0406http://blog.csdn.net/hu0406/archive/2008/05/27/2486135.aspxhttp://blog.csdn.net/hu0406/rss.aspxcsdn.net/hu0406/~1353212/87266015/1358319http://item.feedsky.com/~csdn.net/hu0406/~1353212/87266016/1358319/1/item.htmlcomments/2462995.aspx1comments/commentRss/2462995.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2462995补丁比较软件 diffing suite安装及使用<br />1、安装IDAPro<br />2、从http://www.sqlite.org/download.html下载sqlit3.dll拷贝到IDA Pro的安装目录下<br />3、安装DiffingSuite，将产生的AnalIDA.plw插件拷贝到IDAPro安装目录中的Plugins下（即，在IDA Pro中加入插件AnalIDA）<br />注意：在IDA Pro5.1下无法安装Diffing Suite时&nbsp;&nbsp; <br />1. 修改注册表键值 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IDA Pro_is1&nbsp;&nbsp; <br />2. 修改为 "IDA Pro Standard v5.0" or "IDA Pro Professional v5.0"&nbsp;&nbsp; <br />3. 重新运行BinDiffSuite.exe 以安装 <br />4. 修改为原来的值（如果你想<img src ="aggbug/2462995.aspx" width = "1" height = "1" />Wed, 21 May 2008 01:06:00 +0800虎0406http://blog.csdn.net/hu0406/archive/2008/05/20/2462995.aspx#Feedbackhttp://blog.csdn.net/hu0406/archive/2008/05/20/2462995.aspx虎0406http://blog.csdn.net/hu0406/archive/2008/05/20/2462995.aspxhttp://blog.csdn.net/hu0406/rss.aspxcsdn.net/hu0406/~1353212/87266016/1358319http://item.feedsky.com/~csdn.net/hu0406/~1353212/87266017/1358319/1/item.htmlcomments/2459521.aspx0comments/commentRss/2459521.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2459521第一次使用Paimei时的步骤：&lt;br /&gt;1、确保已经安装Mysql4.0和IDA Pro&lt;br /&gt;2、下载Paimei，并将其解压缩到安装路径下&lt;br /&gt;3、接着要安装Python2.4.x， “windows python-2.4.3.msi"&lt;br /&gt;4、运行“_install_requirements.py，将自动检测并下载安装需要的python组件&lt;br /&gt;5、这里出现了没有安装的提示，输入“Y”就是下载所需的组件，它会自动下载帮你安装的。&lt;br /&gt;6、&lt;span style="font-weight: bold;"&gt;连接数据库，运行命令:“c:\python\python\python.exe __setup_mysql.pylocalhost root password”这里分别是python的安装目录下、白眉安装目录下、数据库地址、数据库用户名、数据库密码&lt;/span&gt;。&lt;br /&gt;7、连接udraw，&lt;span style="font-weig<img src ="aggbug/2459521.aspx" width = "1" height = "1" />Tue, 20 May 2008 05:49:00 +0800虎0406http://blog.csdn.net/hu0406/archive/2008/05/19/2459521.aspx#Feedbackhttp://blog.csdn.net/hu0406/archive/2008/05/19/2459521.aspx虎0406http://blog.csdn.net/hu0406/archive/2008/05/19/2459521.aspxhttp://blog.csdn.net/hu0406/rss.aspxcsdn.net/hu0406/~1353212/87266017/1358319http://item.feedsky.com/~csdn.net/hu0406/~1353212/87266018/1358319/1/item.htmlcomments/2235096.aspx0comments/commentRss/2235096.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2235096Windows XP+SP2系统属性造假原理<img src ="aggbug/2235096.aspx" width = "1" height = "1" />Tue, 01 Apr 2008 18:37:00 +0800虎0406http://blog.csdn.net/hu0406/archive/2008/04/01/2235096.aspx#Feedbackhttp://blog.csdn.net/hu0406/archive/2008/04/01/2235096.aspx虎0406http://blog.csdn.net/hu0406/archive/2008/04/01/2235096.aspxhttp://blog.csdn.net/hu0406/rss.aspxcsdn.net/hu0406/~1353212/87266018/1358319http://item.feedsky.com/~csdn.net/hu0406/~1353212/87266019/1358319/1/item.htmlcomments/2223449.aspx0comments/commentRss/2223449.aspxhttp://tb.blog.csdn.net/TrackBack.aspx?PostId=2223449RFC相关网站记录<img src ="aggbug/2223449.aspx" width = "1" height = "1" />Fri, 28 Mar 2008 00:39:00 +0800虎0406http://blog.csdn.net/hu0406/archive/2008/03/27/2223449.aspx#Feedbackhttp://blog.csdn.net/hu0406/archive/2008/03/27/2223449.aspx虎0406http://blog.csdn.net/hu0406/archive/2008/03/27/2223449.aspxhttp://blog.csdn.net/hu0406/rss.aspxcsdn.net/hu0406/~1353212/87266019/1358319