ailencheng的专栏

OllyDBG v1.10 plugin - StrongOD v0.3.3 by 海风月影[CUG] ==================================================================== [2010.04.28 v0.3.3.625] 1，解决OD在调试游戏时非常容易卡死的BUG

本教案来源于asmedu.net为使用王爽老师《汇编语言》授课的教师制作的电子教案。 里面有幻灯片课件还有flash课件。对初步学习汇编帮助很大。归属清华大学出版社

Lua中文教程&中文手册里面有两部分，想学习的朋友可以看看，具体就不多说，看了就知道。

OllyDBG v1.10 plugin - StrongOD v0.3.0 by 海风月影[CUG] ==================================================================== [2010.01.29 v0.3.0.600] 1，增加驱动兼容性 2，自动patch原版od的classname（有些杀软可能报毒） 3，修复一个SECTION识别错误的BUG 4，Upk2010特别版，添加Splash（照片为Upk形象大使）

readmem是内存遍历工具，弥补其它内存遍历工具的循环遍历的不足。喜欢的可以下载，很好用的哦

包含多种的脱壳脚本，有需要的可以下...

吾爱破解 专用版 最新版 OLLYDBG 不多说，需要的人下载。 在此纯属共享，并非有意盗版。

Cheat Engine 5.6 src Delphi源代码 完整版可以自己编译哦

Cheat Engine 5.6.1 src Delphi源代码 完整版可以自己编译哦

Supported NT versions : XP/Vista/Server 2008/Seven Kernel Detective gives you the ability to : 1- Detect Hidden Processes. 3- Detect Hidden Threads. 2- Detect Hidden DLLs. 3- Detect Hidden Handles. 4- Detect Hidden Driver. 5- Detect Hooked SSDT. 6- Detect Hooked Shadow SSDT. 7- Detect Hooked IDT. 8- Detect Kernel-mode code modifications and hooks. 9- Disassemble (Read/Write) Kernel-mode/User-mode memory. 10- Monitor debug output on your system.

白色郁金香专版OD过NP、VMP想怎么过就怎么过。 [2010-3-5]更新 更新了多有插件过最新 Themida/WinLicense V1.9.9.0 和 VMProtect.v2.05 新增加了API 断点工具（由于新进群的菜鸟多） 修正了DBGHELP.DLL phamt 自己修改了TMD VMP 浮点错误 HideOD.dll 插件和StrongOD 冲突剥离插件在根目录与要自己配置 (这里只是为了共享，并非有意盗版。)

What's new in v1.3.1 : [+]Support For WINDOWS SEVEN BUILD 7600 [+]Added Bugcheck(Reason) Callback Notifications Detection [+]Added Hidden DLLs Detection [+]Added New Features For DLLs (ZeroMemory/UnmapMemory) [+]Added Unicode/Ascii String Reference In Disassembler Window [+]Added Physical Memory Dumper [+]Added Thread Stack Trace [+]Added "Copy" and "Select all" Hot-keys (Ctrl+A Ctrl+C) [*]Improved Files Operations (Open/Copy/Kill) [*]Application Windows Now Have XP Visual Style [*]Tabs Now Are Multilined [!]Fixed Bug In Callbacks Detection For VISTA BUILD 6000 [!]Fixed Processes Row Selection [!]Fixed Listview Selection And Sorting Bugs [!]Fixed bugs in kernel driver installer

Cheat Engine V5.6.1 Cheat Engine是一款内存修改编辑工具，它允许你修改你的游戏，所以你将总是赢。它包括16进制编辑，反汇编程序，内存查找工具。与同类修改工具相比，它具有强大的反汇编功能，且自身附带了外挂制作工具，可以用它直接生成外挂。 Fixes: Fixed bug where ce would crash(close) on XP systems on certain type of games when opening a process Fixed the error at "Same as first scan" when using the float type Pointer rescan for value now accepts more than 8 characters Fixed pointerscan for value not supporting more than 1 thread Fixed showing the fpu in the kernelmode debugger Fixed Decreased/Increased by % Dissect Data now detects non-exact floating point values again Disabled executing the aobscan when assigning a script to the table Some disassembler fixes Again some more DPI fixes The byte-editor in the hexeditor window is now properly aligned at the proper height The XMM registers are now shown for kernelmode debugging as well Implemented the stop button for kernelmode "Find what addresses this code accesses" Fixed error message when pressing enter and no address is selected in the addresslist Fixed samememory regions so the last byte is now included as well Fixed the simple-copy/paste option in settings (it now has effect) Fixed bug where pressing alt made a lot of controls invisible in vista and later Fixed the pointerscan bug that caused out of memory problems for the scan (Was already secretly fixed and released for 5.6 one week after the official release, but still mentioning it) Changes: Rightclicking on registers(multiple locations) saves them to the clipboard The values of dissect data can now be saved to disk Auto Assembler script entries have a small <script> text you can click for easier script editing The commonmodulelist.txt has been updated with some extra dll's that have nothing to do with the game (thanks to psych) AutoAssembler: You can't move the cursor beyond the end of a line anymore Pointerscan: Pointerscanner now tells you that pressing stop is a stupid thing to do Pointerscan: doubleclicking an pointer with invalid base now adds it anyhow. (In case the base becomes valid again later) Several extra window positions are now saved when the option to save the position is enabled (included pointerscan and autoassembler) CE now notifies you if it thinks there's not enough dispace left Default pointer option is now set back to insert instead of append Added a "Same as first scan" hotkey option When opening a new process and chosing to disable everything now also disables entries in advanced options

What's new in v1.4.1 : - Fixed possible BSOD when scanning processes - Fixed bug in callbacks scanning - Enhanced showing files properties and signature verifying - Skeleton SDK for VS2008 included

Hacker Disassembling Uncovered This text shows how to analyze programs without its source code, using a debugger and a disassembler, and covers hacking methods including virtual functions, local and global variables, branching, loops, objects and their hierarchy, and more. 黑客反汇编揭秘是一本不错的反汇编书籍，坚持看完有很大收获。

Supported NT versions : XP/Vista/Server 2008/Seven Kernel Detective gives you the ability to : 1- Detect Hidden Processes. 3- Detect Hidden Threads. 2- Detect Hidden DLLs. 3- Detect Hidden Handles. 4- Detect Hidden Driver. 5- Detect Hooked SSDT. 6- Detect Hooked Shadow SSDT. 7- Detect Hooked IDT. 8- Detect Kernel-mode code modifications and hooks. 9- Disassemble (Read/Write) Kernel-mode/User-mode memory. 10- Monitor debug output on your system.