0x00000006

x86 platform has LDD can be very convenient to view the dependencies of the library, but in the embedded Linux environment does not have this command, instead of it iscc=$ (cross_compile) gccldd=$ (Cross_compile) readelfExample[Plain]View PlainCopy $ (cross_compile) readelf-d Sdkdemo_video Dynamic section at offset 0x1a88 contains entries: Tag Type Name/value 0x00000001 (NEEDED) Shared library: [libtxdevicesdk.so] 0x00000001 (NEEDED) Shared library: [libpthread.so.0] 0x00000001 (NE

Name Value Usage Fmtid_summaryinformation {f29f85e0-4ff9-1068-ab91-08002b27b3d9} the Summary information property Set Fmtid_docsummaryinformation {d5cdd502-2e9c-101b-9397-08002b2cf9ae} the Documentsummaryinformation and UserDefined Property sets Fmtid_userdefinedproperties {d5cdd505-2e9c-101b-9397-08002b2cf9ae} the Documentsummaryinformation and UserDefined Property sets Name Property ID String Property ID VT Type Title Pidsi_title 0x00000

. Struct)] FILTERREGION origPos, ref Guid riid, ref UIntPtr ppunk ); } [ComImport] [Guid ("f07f3920-7b8c-11cf-9be8-00aa004b9986")] Public class CFilter { } Public class IFilterConstants { Public const uint PID_STG_DIRECTORY = 0x00000002; Public const uint PID_STG_CLASSID = 0x00000003; Public const uint PID_STG_STORAGETYPE = 0x00000004; Public const uint PID_STG_VOLUME_ID = 0x00000005; Public const uint PID_STG_PARENT_WORKID = 0x00000006; Public const

is EDGEConstant Value: 2 (0x00000002) (2.75G) 2G to 3G transitional Mobile and China Unicom public static final int NETWORK_TYPE_UMTSCurrent network is UMTSConstant Value: 3 (0x00000003) (3G) unicom ----------------- Added in API level 4 ------------------- public static final int NETWORK_TYPE_CDMACurrent network is CDMA: Either IS95A or IS95BConstant Value: 4 (0x00000004) (2G Telecom) public static final int NETWORK_TYPE_EVDO_0Current network is EVDO revision 0 Constant Value: 5 (0x00000005) (

been suspended. This corresponds to Win32Service_pausedConstant, which is defined as 0x00000007. Pausepending The service is about to be suspended. This corresponds to Win32Service_pause_pendingConstant, which is defined as 0x00000006. Running The service is running. This corresponds to Win32Service_runningConstant, which is defined as 0x00000004. Startpending The service is starting. This correspond

0 0x00000000 finished. 1 0x00000001 incorrect function. 2 0x00000002 the system cannot find the specified file. 3 0x00000003 the system cannot find the specified path. 4 0x00000004 the system cannot open the file. 5 0x00000005 Access denied. 6 0x00000006 Invalid code. 00000007 x the bucket control block has been destroyed. 8 0x00000008 insufficient storage space, unable to process this command. The block address of the 9 0x00000009 bucket control is i

0x00000006 # Define file_device_dfs_file_system 0x00000035 # Define file_device_dfs_volume 0x00000036 # Define file_device_disk 0x00000007 # Define file_device_disk_file_system 0x00000008 # Define file_device_dvd 0x00000033 # Define file_device_file_system 0x00000009 # Define file_device_fips 0x0000003a # Define file_device_fullscreen_video 0x00000034 # Define file_device_inport_port 0x0000000a # Define file_device_keyboard 0x0000

= 0xbffff2c0,_m_left = 0x00000000,_m_right = 0x00000000,_m_value_field.first = 0x00000005,_m_value_field.second =0x00000006} Continue to explore, you can draw a bunch of such data(gdb) x/8x $esp +0x1c0xbffff2bc:0x080485680x000000000x0804c0080x0804c0480xbffff2cc:0 x0804c0280x000000030x000000050x00000008 (GDB) x/8x 0x0804c0080x804c008:0 x000000010xbffff2c00x0804c0480x0804c0280x804c018:0x000000050x000000060x000000000x00000021 (GDB) x/8x 0x080

(Gnu_hash)0X80481DC 0x00000005(Strtab)0x8048310 0x00000006(Symtab)0x8048220 0x0000000a(Strsz)312(bytes)0x0000000b(syment) -(bytes)0x00000015(DEBUG)0x0 0x00000003(Pltgot)0x804995c 0x00000002(PLTRELSZ) About(bytes)0x00000014(Pltrel) REL0x00000017(Jmprel)0x80484d0 0x00000011(REL)0x80484c8 0x00000012(RELSZ)8(bytes)0x00000013(relent)8(bytes)0x6ffffffe(Verneed)0x8048468 0x6fffffff(Verneednum)2 0x6ffffff0(Versym)0x8048448 0x00000000(NULL)0x0Visible program h

This virus uses the substitution service and so on to start itself, uses the SoundMan.exe this more familiar procedure to confuse the person. and has the function of ending antivirus software and downloading virus. Virus releases the following files %systemroot%\system32\ineters.exe %systemroot%\system32\soundman.exe (pseudo SoundMan.exe, and the icon is the same as the real SoundMan.exe) %systemroot%\system32\tthh3.ini The digital signature of all documents is tomato garden Write Auto.exe an

Open () { Display display = Display.getdefault (); Shell shell = new Shell (); Shell.settext ("Auto fit"); shell.setsize (700, 300); shell.setlayout (New Filllayout ()); Createexcelpart (shell); Shell.open (); while (!shell.isdisposed ()) if (!display.readanddispatch ()) Display.sleep (); Display.dispose (); } privatestaticfinalintsheet_id = 0x000001e5; privatestaticfinalintcell_id =0x000000c5; privatestaticfinalintcell_value_id = 0x00000006