http://blog.csdn.net/sealyao/article/details/6708923
Understand Windows Shellcode
http://nologin.org/Downloads/Papers/win32-shellcode.pdf
Analyzing Network Traffic To Detect Self-DecryptingExploit Code
http://discovery.csc.ncsu.edu/pubs/ASIACCS07a.pdf
Libemu
Metasploit