Ä¿±êÈí¼þ:chm°ïÖú±à¼Æ÷v2.6
ÆÆ ½â ÈË:TAE!
±£»¤·½Ê½:ÐòÁкÅ
Æƽⷽʽ:·ÖÎö³ö×¢²áÂë
Èí¼þ½éÉÜ:´ËÈí¼þµÄ×÷ÕßËƺõ´¦¾³Ï൱À§ÄÑ,´ËƪµÄÄ¿µÄÔÚÓÚѧϰ,
ÇëÖ§³ÖÒ»ÏÂÆä×÷Õß,×¢²á°É!
ÏÂÔصØÖ·:http://kshii.51.net/
ÐòÑÔ:ÆäʵÕâ¸öÈí¼þµÄ×¢²áÂë¼ÆËã,±È½Ï²¿·ÖÏ൱¼òµ¥,¹Ø¼üÔÚÓÚÆƽⷽ·¨!
Èç¹ûÓó£¹æµÄ·½·¨¼´ÊäÈë×¢²áÂë,Éè¶Ïµã,°´×¢²á,ÄǾͻáʲô·´Ó¦¶¼Ã»ÓÐ,
ÄǾͻ»¸ö·½·¨°É!
Èí¼þµÄÊÔÓôÎÊý¹ýÁËÒÔºó,»áÌø³öÒ»¸öNag,˵ÒѾ¹ýÆÚ,ÏëÏë¿´,Èí¼þÔõô֪µÀ
ÎÒÃÇÓÐûÓÐ×¢²áÄØ?¿Ï¶¨ÊǶÁÈ¡ÁËij´¦µÄÒ»¸ö×¢²á±êÖ¾!¾Í´ÓÕâÀïÈëÊÖ,ÈçºÎ?
ÔÚÈí¼þµ¯³öNagʱ,µ½TRWÏÂÃüÁîPmodule,Õâʱ»Øµ½³ÌÐò,°´È·¶¨,Óֻص½ÁËTRW
(PmoduleÕæÊǸöºÜºÃÓõÄÃüÁî),È»ºó¾ÍÏòÉϲ鿴,·¢ÏÖÓÐÁ½¸öµØ·½¿ÉÒÔÌø¹ýNag:
:0047A276 E8BDFDFFFF call
0047A038 //*ºÜ¹Ø¼üµÄµØ·½*
:0047A27B A1E0B84800 mov eax,
dword ptr [0048B8E0]
:0047A280 8B80CC060000 mov eax, dword
ptr [eax+000006CC]
:0047A286 81780CF4010000 cmp dword ptr [eax+0C],
000001F4
:0047A28D 0F845A010000 je 0047A3ED
//¼ì²éÊÇ·ñÒѾע²á.(µÚÒ»¸ö)
:0047A293 6800010000 push
00000100
:0047A298 8D85F7FEFFFF lea eax, dword
ptr [ebp+FFFFFEF7]
:0047A29E 50
push eax
* Possible StringData Ref from Data Obj ->""
|
:0047A29F 6828A44700 push
0047A428
* Possible StringData Ref from Data Obj ->"PWes"
//win.iniÖеÄ×Ö·û
|
:0047A2A4 68F8A44700 push
0047A4F8
* Possible StringData Ref from Data Obj ->"AgeSet" //win.iniÖеÄ×Ö·û
|
:0047A2A9 6834A44700 push
0047A434
:0047A2AE E8E5C7F8FF call
00406A98
:0047A2B3 8D45FC
lea eax, dword ptr [ebp-04]
:0047A2B6 8D95F7FEFFFF lea edx, dword
ptr [ebp+FFFFFEF7]
:0047A2BC B901010000 mov ecx,
00000101
:0047A2C1 E85E9BF8FF call
00403E24
:0047A2C6 8D45F8
lea eax, dword ptr [ebp-08]
:0047A2C9 50
push eax
:0047A2CA B901000000 mov ecx,
00000001
:0047A2CF BA01000000 mov edx,
00000001
:0047A2D4 8B45FC
mov eax, dword ptr [ebp-04]
:0047A2D7 E8A09DF8FF call
0040407C
* Possible StringData Ref from Data Obj ->"1234567890!@#$%^-*()QWERTYUIOPASDFGHJKLZXCVBNM"
->"qwertyuiopasdfghjklzxcvbnm"
|
:0047A2DC BA44A44700 mov edx,
0047A444
:0047A2E1 8B45F8
mov eax, dword ptr [ebp-08]
:0047A2E4 E8779EF8FF call
00404160
:0047A2E9 8BD8
mov ebx, eax
:0047A2EB 83FB3E
cmp ebx, 0000003E
:0047A2EE 7E5D
jle 0047A34D //¼ì²éʹÓôÎÊý(µÚ¶þ¸ö)
:0047A2F0 6A30
push 00000030
* Possible StringData Ref from Data Obj ->"Èí¼þ¹ýÆÚ"
|
:0047A2F2 6808A54700 push
0047A508
* Possible StringData Ref from Data Obj ->"ÄúµÄÊÔÓÃÆÚÏÞÒѹý,ÈôÓмÌÐøʹÓñ¾Èí¼þ,ÇëÄú×¢²á."
|
:0047A2F7 6814A54700 push
0047A514
½øÈëÄǸöcall 0047A038
:0047A038 53
push ebx
:0047A039 8BD8
mov ebx, eax
:0047A03B 8B83BC060000 mov eax, dword
ptr [ebx+000006BC]
:0047A041 8B4070
mov eax, dword ptr [eax+70]
:0047A044 E80BFEFFFF call
00479E54 //*¼ÆËã±È½Ï×¢²áÂë*
:0047A049 84C0
test al, al
:0047A04B 743A
je 0047A087
:0047A04D 8B83BC060000 mov eax, dword
ptr [ebx+000006BC]
:0047A053 8B4070
mov eax, dword ptr [eax+70]
:0047A056 E8DD9FF8FF call
00404038
:0047A05B 50
push eax
½øÈëCAll 00479E54
:00479E54 55
push ebp
:00479E55 8BEC
mov ebp, esp
:00479E57 33C9
xor ecx, ecx
:00479E59 51
push ecx
:00479E5A 51
push ecx
:00479E5B 51
push ecx
:00479E5C 51
push ecx
:00479E5D 51
push ecx
:00479E5E 51
push ecx
:00479E5F 51
push ecx
:00479E60 51
push ecx
:00479E61 53
push ebx
:00479E62 56
push esi
:00479E63 8945FC
mov dword ptr [ebp-04], eax
:00479E66 8B45FC
mov eax, dword ptr [ebp-04]
:00479E69 E8BAA1F8FF call
00404028
:00479E6E 33C0
xor eax, eax
:00479E70 55
push ebp
* Possible StringData Ref from Data Obj ->"é–ÿëÃ[åÃÿÿ"
|
:00479E71 68EC9F4700 push
00479FEC
:00479E76 64FF30
push dword ptr fs:[eax]
:00479E79 648920
mov dword ptr fs:[eax], esp
:00479E7C 33DB
xor ebx, ebx
:00479E7E 8B45FC
mov eax, dword ptr [ebp-04]
:00479E81 E8EE9FF8FF call
00403E74 //¼ì²éWin.iniÖÐÊÇ·ñÓÐÒ»¸öPset=XXX(´æ·Å×¢²áÂëµÄµØ·½)
:00479E86 83F80D
cmp eax, 0000000D //±È½Ï×¢²áÂëµÄλÊýÊÇ·ñΪ13λ,ÎÒÃÇÔÚÕâÀïÉè¶Ïµã.
:00479E89 0F8542010000 jne 00479FD1
//·¢ÏÖEAX²»ÊÇ13¸öÌø×ß,ÊÇ13¸ö¼ÌÐø¼ì²é
ËùÒÔÔÚwin.iniÖмÓÈëÕâÑùÒ»¾äPset=1234567890abc,ÔÚ´ËÔËÐгÌÐò´Ëʱ±»ÖжÏ,¼ÌÐøF10
×ßµ½ÕâÀï
* Possible StringData Ref from Data Obj ->"Ee"
|
:00479EA8 BA04A04700 mov edx,
0047A004
:00479EAD E8D2A0F8FF call
00403F84 //¼ì²éµÚÒ»¸öºÍµÚ¶þ¸ö×Ö·ûÊDz»ÊÇEe
:00479EB2 0F8519010000 jne 00479FD1
//²»ÊǾÍÌø
:00479EB8 8D45F0
lea eax, dword ptr [ebp-10]
:00479EBB 50
push eax
:00479EBC B901000000 mov ecx,
00000001
:00479EC1 BA03000000 mov edx,
00000003
:00479EC6 8B45FC
mov eax, dword ptr [ebp-04]
:00479EC9 E8AEA1F8FF call
0040407C
:00479ECE 8B45F0
mov eax, dword ptr [ebp-10]
* Possible StringData Ref from Data Obj ->"@"
|
:00479ED1 BA10A04700 mov edx,
0047A010
:00479ED6 E8A9A0F8FF call
00403F84 //¼ì²éµÚÈý¸ö×Ö·ûÊDz»ÊÇ@
:00479EDB 0F85F0000000 jne 00479FD1
//²»ÊǾÍÌø
:00479EE1 8D45EC
lea eax, dword ptr [ebp-14]
:00479EE4 50
push eax
:00479EE5 B901000000 mov ecx,
00000001
:00479EEA BA0A000000 mov edx,
0000000A
:00479EEF 8B45FC
mov eax, dword ptr [ebp-04]
:00479EF2 E885A1F8FF call
0040407C
:00479EF7 8B45EC
mov eax, dword ptr [ebp-14]
* Possible StringData Ref from Data Obj ->"%"
|
:00479EFA BA1CA04700 mov edx,
0047A01C
:00479EFF E880A0F8FF call
00403F84 //¼ì²éµ¹ÊýµÚËĸö×Ö·ûÊDz»ÊÇ%
:00479F04 0F85C7000000 jne 00479FD1
:00479F0A 8D45E8
lea eax, dword ptr [ebp-18]
:00479F0D 50
push eax
:00479F0E B901000000 mov ecx,
00000001
:00479F13 BA0B000000 mov edx,
0000000B
:00479F18 8B45FC
mov eax, dword ptr [ebp-04]
:00479F1B E85CA1F8FF call
0040407C
:00479F20 8B45E8
mov eax, dword ptr [ebp-18]
* Possible StringData Ref from Data Obj ->"("
|
:00479F23 BA28A04700 mov edx,
0047A028
:00479F28 E857A0F8FF call
00403F84 //¼ì²éµ¹ÊýµÚÈý¸ö×Ö·ûÊDz»ÊÇ(
:00479F2D 0F859E000000 jne 00479FD1
:00479F33 8D45E4
lea eax, dword ptr [ebp-1C]
:00479F36 50
push eax
:00479F37 B901000000 mov ecx,
00000001
:00479F3C BA0D000000 mov edx,
0000000D
:00479F41 8B45FC
mov eax, dword ptr [ebp-04]
:00479F44 E833A1F8FF call
0040407C
:00479F49 8B45E4
mov eax, dword ptr [ebp-1C]
* Possible StringData Ref from Data Obj ->")"
|
:00479F4C BA34A04700 mov edx,
0047A034
:00479F51 E82EA0F8FF call
00403F84 //¼ì²éµ¹ÊýµÚÒ»¸ö×Ö·ûÊDz»ÊÇ)
:00479F56 7579
jne 00479FD1
:00479F58 8D45E0
lea eax, dword ptr [ebp-20]
:00479F5B 50
push eax
:00479F5C B906000000 mov ecx,
00000006
:00479F61 BA04000000 mov edx,
00000004
:00479F66 8B45FC
mov eax, dword ptr [ebp-04]
:00479F69 E80EA1F8FF call
0040407C
:00479F6E 8B45E0
mov eax, dword ptr [ebp-20]
:00479F71 E8C2A0F8FF call
00404038
:00479F76 8BF0
mov esi, eax
:00479F78 8D55F8
lea edx, dword ptr [ebp-08]
:00479F7B A1E0B84800 mov eax,
dword ptr [0048B8E0]
:00479F80 8B80C0060000 mov eax, dword
ptr [eax+000006C0]
:00479F86 E83567FBFF call
004306C0
:00479F8B 8B45F8
mov eax, dword ptr [ebp-08]
:00479F8E E8A5A0F8FF call
00404038
:00479F93 8BC8
mov ecx, eax
:00479F95 8A16
mov dl, byte ptr [esi]
:00479F97 8A4107
mov al, byte ptr [ecx+07]
:00479F9A 3AC2
cmp al, dl
\
:00479F9C 7533
jne 00479FD1
\
:00479F9E 8A5601
mov dl, byte ptr [esi+01] \
:00479FA1 8A4104
mov al, byte ptr [ecx+04] \
:00479FA4 3AC2
cmp al, dl
\
:00479FA6 7529
jne 00479FD1
\
:00479FA8 8A5602
mov dl, byte ptr [esi+02] \
:00479FAB 8A01
mov al, byte ptr [ecx] \
:00479FAD 3AC2
cmp al, dl
\
:00479FAF 7520
jne 00479FD1
|¼ì²éÆäËüÁùλÊý.¾¹ý¸ú×Ù·¢ÏÖ
:00479FB1 8A5603
mov dl, byte ptr [esi+03] /ÆäËüÕâÁùλÊý,±ØÐ붼ÔÚËü¸øµÄ
:00479FB4 8A4109
mov al, byte ptr [ecx+09] / IDÖÐ,Ö»ÊÇÅÅÁÐ˳Ðò²»Í¬.
:00479FB7 3AC2
cmp al, dl
/ ÖÁÓÚÊÇÈçºÎÅÅÁеÄ,×Ô¼ºÑо¿°É
:00479FB9 7516
jne 00479FD1
/ ºÜ¼òµ¥µÄ.
:00479FBB 8A5604
mov dl, byte ptr [esi+04] /
:00479FBE 8A4102
mov al, byte ptr [ecx+02] /
:00479FC1 3AC2
cmp al, dl
/
:00479FC3 750C
jne 00479FD1
/
:00479FC5 8A5605
mov dl, byte ptr [esi+05] /
:00479FC8 8A4106
mov al, byte ptr [ecx+06] /
:00479FCB 3AC2
cmp al, dl /
:00479FCD 7502
jne 00479FD1
:00479FCF B301
mov bl, 01 <------------¿´µ½Ï£ÍûÁË
ÎÒµÄID:Nsd5JLy!jt
×¢²áÂë:Ee@!JNtdy%(b)
×Ô¼º¸úÒ»¸ú,ºÜ¼òµ¥µÄ,Ö»ÊÇÇÐÈëµÄ·½·¨²»Í¬¶øÒÑ.
ºó¼Ç:ÕâƪºÃÏñ×¢ÖØÁË·½·¨,ÈôÄãÏëд³ö×¢²á»ú,¾Í×Ô¼º·ÖÎö°É!
Õâ¸öÈí¼þµÄ×¢²áºÜÌرð,ÎÒÆƽâµÄ·½·¨Ò²ºÜÌرð,
ËùÒÔ˵½âÈí¼þ,Ò»¶¨²»ÄÜÇáÒ×·ÅÆú,Òª´Ó²»Í¬µÄµØ·½ÈëÊÖ,¶àÏëÏë°ì·¨Ò»¶¨»áÓÐÊÕ»ñµÄ!
- ±ê Ì⣺chm°ïÖú±à¼Æ÷v2.6 ×¢²áÂëÆƽâÏê̸֮¶þ*½âÂëƪ* (11ǧ×Ö)
- ×÷ ÕߣºTAE!
- ʱ ¼ä£º2001-2-4 13:36:50
- Á´ ½Ó£ºhttp://bbs.pediy.com