zzz3265的专栏

转载 压缩算法比较: Gzip vs Bzip2 vs LZMA vs XZ vs LZ4 vs LZO

源网址:https://catchchallenger.first-world.info/wiki/Quick_Benchmark:_Gzip_vs_Bzip2_vs_LZMA_vs_XZ_vs_LZ4_vs_LZOSelected archivesI have selected:Source of the kernel to test source compression Stream protocol with flushTest conditionsTests were ru.

翻译 CurveFitter.java 源码

package ij.measure;import ij.*;import ij.gui.*;import ij.macro.*;import ij.util.Tools;import ij.util.IJMath;import java.util.Arrays;import java.util.Hashtable;import java.awt.Color;/** Curve fitting class based on the Simplex method in the Minim.

原创 win7 错误事件WMI

win7 错误事件WMI ID: 10Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reac

转载 Microsoft's Rich Signature (undocumented)

http://ntcore.com/files/richsign.htmMicrosoft's Rich Signature (undocumented)11/11/2010: corrected the part about the meaning of the @comp.id value high bits.In this article I'm going to t

原创 WMI 定时启动木马

现象: 某些浏览器的快捷方式经常性自动被修改, 相当于主页修改成 hao916.com/.....使用WMI_Tools 工具找到以下类__EventFilterActiveScriptEventConsumer__FilterToConsumerBinding__TimerInstruction删除里面相关的实例木马脚本如下On Error

转载 禁用 Windows 客户体验改进计划

禁用 Windows 客户体验改进计划在大型 View 桌面池中，禁用 Windows 客户体验改进计划和控制此计划的相关“任务计划程序”任务可提高 Windows 7 的系统性能。网上看到到控制面板的方法, 根本没用这玩意非常耗CPU费电步骤1在 Windows 7 客户操作系统中，打开“控制面板

翻译 Unity3D KeyCode 值

Unity3D  KeyCode ; enum KeyCode None     = 0 Backspace  = 8 Tab      = 9 Clear    = 0Ch Return   = 0Dh Pause    = 13h Escape   = 1Bh Space    = 20h Exclaim  = 21h DoubleQuote  =

转载 UnrealScript Code

UnrealScript Code TableValues from this table are used directly; no additional prefix token is needed.Example (LocalVariable):00 = 1 byte NativeTableIndexFTokenDecHex

转载 ARM 架构常用浮点函数

opensearch.krugle.org - TargetLoweringBase.cpp Names[RTLIB::NEG_I32] = "__negsi2"; Names[RTLIB::NEG_I64] = "__negdi2"; Names[RTLIB::ADD_F32] = "__addsf3"; Names[RTLIB::ADD_F64] = "__adddf3";

原创 ARM 指令笔记

thumb BL指令计算$s = 0x0019940A$d = 0x0018D7C4$offset = ($d-$s-4)/2$low = $offset > (64-11)$hi = $offset > (64-11)$c1 = $hi + 0xF000$c2 = $low + 0xF800$code = $c1 | ($c2例子.text:0019940A F4 F7

转载 批处理笔记

echo offdel ..\all.txtfor /f "delims=" %%a in ('dir /b/o *.txt') do type "%%a">>..\all.txt

转载 ARM Thumb 指令快速查看手册

原创 VS2010 MFC的小Bug-ASSERT(ContinueModal());

CWnd::RunModalLoop do { ASSERT(ContinueModal()); // pump message, but quit on WM_QUIT if (!AfxPumpMessage()) { AfxPostQuitMessage(0); return -1; } // show the window w

转载 Dalvik 虚拟机指令

Opcode (hex)Opcode nameExplanationExample00nopNo operation0000 – nop01move vx,vyMoves the content of vy into vx. Both registers must be in the first 256

转载 傅里叶分析 [作 者：韩 昊]

作 者：韩 昊知 乎：Heinrich微 博：@花生油工人知乎专栏：与时间无关的故事谨以此文献给大连海事大学的吴楠老师，柳晓鸣老师，王新年老师以及张晶泊老师。转载的同学请保留上面这句话，谢谢。如果还能保留文章来源就更感激不尽了。——更新于2014.6.6，想直接看更新的同学可以直接跳到第四章————我保证这篇文章和你以前看过的所有文章都不同，这是 2012 年还在果壳的时候写

转载 Java字节码（.class文件）格式 (转)

1.总体格式Class File formattypedescriptorremarku4magic0xCAFEBABEu2minor_version u2major_version

原创 Lua LuaJit 指令表(整理)

<** +----+----+----+----+     ** | B  | C  | A  | OP | Format ABC     ** +----+----+----+----+     ** |    D    | A  | OP | Format AD   

翻译 UltraEdit 语法高亮 swf脚本文件 ActionScript 3.0

/L20"ActionScript 3.0" Line Comment = // Block Comment On = /* Block Comment Off = */ Escape Char = \ String Chars = "' File Extensions = AS/Delimiters = ~!@%^&*()-+=|\/{}[]:;"'<> , .?/Function Stri

翻译 Java虚拟机指令

指令码助记符说明0x00nop什么都不做0x01aconst_null将null推送至栈顶0x02iconst_m1将int型-1推送至栈顶0x03iconst_0将int型0推送至栈顶0x04iconst_1将int型1推

转载 ConvertStringSecurityDescriptorToSecurityDescriptor

Security Descriptor String FormatConvertStringSecurityDescriptorToSecurityDescriptor   O:owner_sid  G:group_sid  D:dacl_flags(string_ace1)(string_ace2

原创 Zip文件格式

标识头50 4B 01 02 kCentralFileHeader50 4B 03 04 kLocalFileHeader50 4B 05 06 kEndOfCentralDirkEndOfCentralDir

转载 flash - AVM2 指令参考

flash的VM指令网上很少有介绍指令列表 // width jumps term thro calls push pop pop_ex use_l def_l name { 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 N("0x00") }, { 0, 0, 0,

原创 CMFCMenuBar::CreateFromMenu 句柄泄漏

CMFCMenuBar::CreateFromMenu  句柄泄漏

原创 XP系统桌面DC对应的显存位置获取方法

以下代码在XP下编写测试1. 获取桌面DC的Bitmapm_hDesk = GetDesktopWindow();m_hDeskDc = GetDC(m_hDesk);m_hDeskBitmap = (HBITMAP)GetCurrentObject(m_hDeskDc, OBJ_BITMAP);2. 获取GDI的内核对象pPeb = (Nntdll::PEB *)Nn

转载 UltrEdit 的smali语法高亮文件

/L20"Smali" Nocase Line Comment = # String Chars = '" File Extensions = SMALI Escape Char = \/Colors = 0,8421376,8421376,8421504,255,/Colors Back = 16777215,16777215,16777215,16777215,16777215,/Col

转载 线性同余 - 随机数

LCG-linear congruential generatorSource ma crand()种子位ANSI C:Watcom, Digital Mars, CodeWarrior, IBM VisualAge C/C++ 2^32110351524512345位30..16Numerical R

转载 C# IL 指令

OpcodeInstructionDescription0x00nopDo nothing.0x01breakInform a debugger that a breakpoint has been reached.0x02ldarg.0Load argument 0 onto the stack.0x03

转载 The RSDS pdb format

by Jeremy Gordon - This file describes the format of the pdb (Program Database) files of the "RSDS" or "DS" type which are emitted by Miscrosoft's link.exe from version 7 and above.For a descr

转载 IOCTL DDK6000 IOCTL 代码

00000000 = IOCTL_CDROM_SUB_Q_CHANNEL00000001 = IOCTL_CDROM_CURRENT_POSITION00000002 = IOCTL_CDROM_MEDIA_CATALOG00000003 = IOCTL_CDROM_TRACK_ISRC00010000 = IOCTL_BEEP_SET00020040 = IOCTL_CDRO

原创 驱动系统重启方法

1. out  0x92, 0x01  主要对A20的控制; Bit 0 - Setting to 1 causes a fast reset (Used to switch back to real mode) ; Bit 1 - 0: disable A20; 1: enable A20 ; Bit 2 - Manufacturer defined ; Bit 3 -

转载 常用 I/O 地址表

Addr.First Quad(xx0h to xx3h)Second Quad(xx4h to xx7h)Third Quad(xx8h to xxBh)Fourth Quad(xxCh to xxFh)000-00FhDMA controller, channels 0 to 3

原创 系统字符代码页

10000 (MAC - 罗马)    10001 (MAC - 日文)    10002 (MAC - 繁体中文 Big5)    10003 (MAC - 韩文)    10004 (MAC - 阿拉伯文)    10005 (MAC - 希伯来文)    10006 (MAC - 希腊文 I)    10007 (MAC - 西里尔文)    10008 (M

原创 NtUserCallOneParam - XP - 5.1.2600.3099

NtUserCallOneParam0                                       dd offset __CreateMenu@01 .rdata:BF98F54C D2 C5 89 BF           dd offset __CreatePopupMenu@0       2 .rdata:BF9

原创 XP 5.1.2600.3099- SDT

_W32pServiceTable0                                      dd offset _NtGdiAbortDoc@41 .data:BF999284 13 72 94 BF           dd offset _NtGdiAbortPath@4         2 .data:BF999

原创 2点距离近似算法

float    QuickDistance2d(float x, float y){    float        fMin;    float        fDistance;;    fMin = min(x, y);    fDistance

原创 ActiveX控件在IE加载过程

CCmdTarget::InternalQueryInterface +(CLSID *)iid0x76991a60 {IID_IClassFactory}    +(CLSID *)iid0x7e23920c {IID_IClassFactory}

原创 远程桌面转发卡死

远程桌面转发程序运行时, 发现有时开始, 后来发现关掉dbgview就正常了应该是 dbgview跟转发死锁导致

原创 ActiveX控件空对象, 创建窗体

ActiveX控件空对象, 创建窗体RecreateControlWindowvoid COleControl::RecreateControlWindow(){    if (m_bInPlaceActive)    {        BOOL bUIActive = m_bU

原创 ActiveX "意外地调用了方法或属性访问"

跟踪发现STDMETHODIMP COleDispatchImpl::Invoke(    DISPID dispid, REFIID riid, LCID lcid,    WORD wFlags, DISPPARAMS* pDispParams, LPVARIANT pvar

原创 CoCreateInstance生成的对象在Javascrip获取事件

var     AdvCheck = oUpdate.CreateObj("{E77F143B-642C-4D22-80C7-BF97B48DCEB2}");        function LinkEvent()        {            function Adv