下沙论坛
标题: [转帖]“电脑消磁圣手”的消磁“秘术” [打印本页]
作者: 游侠无极限 时间: 2004-12-25 15:17
标题: [转帖]“电脑消磁圣手”的消磁“秘术”
“电脑消磁圣手”的消磁“秘术”
% Y! C/ b# V$ Y6 B$ W: R, S2 O/ R6 F0 W
前言：
8 v; _4 R' N2 }/ a7 @平安夜的晚上，在网上随处溜达，偶尔看到一款名叫《电脑消磁圣手》的软件，是某公司开发的（具体是什么公司大家自己去看吧，我就不说出来了，免得麻烦）。据软件中的说明“本系统一直在国外市场上销售，效果很好，最近把系统翻译成中文版，免费提供给国内的朋友使用。”，至于软件的作用，又有如下的说明：“本系统非常适合在电脑前长时间工作的人，能够高效的清除电脑产生的电磁波，对工作者的身体起到了保健的工作。本系统根据电脑产生的电磁波，自动产生融磁波，中和电脑产生的磁波。由于电脑在不停的释放电磁波，建议您每隔一个小时进行一次消磁工作。”听起来十分诱人，于是就down了下来把玩一番。最新版本好像是6。3版（升级了好多次了吧）。
0 {3 M/ e* r' m2 R4 G7 Q/ m, D/ W) r0 v9 @) _
试用：! b" f" ~" C) g2 `( k( }9 C
下载下来的是一个压缩包，解开后只有一个可执行文件。运行一下，首先弹出了浏览器窗口，连向了一个网站（可能是软件公司的网站吧），随手关掉。软件的主界面倒是很简捷，最主要的就是“开始消磁”按钮。点击一下，出现了一个进度条在不断的前进，同时还有提示文本出现，就是这些“系统正在做消磁前的准备...”、“系统正在收集电脑的电磁波...”、“系统正在释放融磁电波...”、“系统正在释放融磁电波...”、“系统正在做最后的消磁工作...”。经过这样一番神秘的仪式之后，弹出一个对话框提示“融磁成功，已经成功中和电脑周围磁场?”刹那之间，我对作者的佩服如同滔滔江水连绵不绝，这可是项巨牛x的技术，只靠软件就可以进行消磁了，而且还是电脑周围的电磁波，不知道作者是否申请了专利。怀着最作者的无比崇敬和那份极度的神秘感，我飞快的的把软件给肢解了：）" D5 z& Q4 G4 n* D, Y5 X8 {
0 @! Z2 f# @& }0 E9 _5 ?9 m# t, U1 X分析：) y& ?( A( Z3 K% ]& A7 E6 R9 n
检测一下，是用Delphi写的，没有加壳。用DeDe载入后，反编译“开始消磁”按钮点击事件对应的代码，复制如下：4 Z# Y5 e6 o2 v3 e
H/ o6 j d4 h, A3 H+ V0047FF28 53 push ebx E3 y1 ]+ R( x9 |7 B0 Z! b
0047FF29 8BD8 mov ebx, eax6 w8 D, u8 I- `# y- e/ U* e
0047FF2B 33D2 xor edx, edx s2 }. T& T8 e3 \
# T% U& G- T( _' t8 E# p
* Reference to control TFrmRamMain.Panel2 : TPanel
# N( x0 p; y( {! _. v; _, ||
! @! m/ L( G; |% N! U7 l1 |0047FF2D 8B83FC020000 mov eax, [ebx+$02FC]
; x8 c3 F& U! W
; h+ D9 ]( ^8 C8 Y7 ]$ d* Reference t controls.TControl.SetVisible(TControl;Boolean);
9 P3 y6 K4 q7 H* \3 D" ?|8 S- A. B" ~3 }' H/ C
0047FF33 E80CA6FAFF call 0042A544
' c3 _6 k9 n( A8 p; d- O0047FF38 B201 mov dl, $01
7 n" j& b. k" Z' \3 Q3 \( Y4 b6 I! I( B
* Reference to control TFrmRamMain.Panel1 : TPanel
+ F) N. I1 ^4 q|" c, r- G" q7 H7 k8 R
0047FF3A 8B83F0020000 mov eax, [ebx+$02F0]
* @9 B+ [7 @( u9 L$ X6 M. |. t! A3 h: C; F" N) \- }
* Reference t controls.TControl.SetVisible(TControl;Boolean);
) D. T8 V& x% \( |& D# }|
0 P+ r j; G; v8 G8 R; x0 L& F( f0047FF40 E8FFA5FAFF call 0042A5448 z! e7 o6 Y ^( n
% I( r' e/ z4 d: m% A) x2 @
* Possible String Reference t '系统正在做消磁前的准备...' ;提示文本，准备好了# u( u8 x/ O$ f
|& N0 U1 H* Y% [1 z( g+ ?; X) D. B3 N) @
0047FF45 BA7C014800 mov edx, $0048017C0 B% K. ?* D, i' D: q M
+ @1 A( k9 m; F1 r, j# V
* Reference to control TFrmRamMain.Label3 : TLabel! d2 [% a) r8 r/ l1 w7 \: w
|
/ N' ~/ K5 M E# B" j y# [ G$ x0047FF4A 8B83F4020000 mov eax, [ebx+$02F4]3 R, S" {- |" ? ^. {
! o4 O! B# V3 e7 P$ i( n& d
* Reference t controls.TControl.SetText(TControl;TCaption);
1 C p8 Z9 b0 o5 V2 V|
; a: c% w( Z1 d0047FF50 E807A7FAFF call 0042A65C
+ P' D& t. r3 s4 |/ \$ c/ |9 k, u9 q0 E; y% L: K8 [ I
* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar ;进度条开始动了& D7 ]9 `) b/ a' d D ^7 F+ \
|
# ]* x" G% A1 @9 i6 }0047FF55 8B83F8020000 mov eax, [ebx+$02F8]
& l- Z1 C# G% M( Q, C$ Q* m! \$ `
+ ^, Y, x1 Q9 U. s- I* Reference t comctrls.TProgressBar.StepIt(TProgressBar);* t4 k: k" n+ ]
|, y# H; O1 E' r) P) T' _0 G
0047FF5B E80489FDFF call 00458864
' x3 m2 H+ ?( x- [# M0047FF60 8BC3 mov eax, ebx
' v( K& r; ?- W7 e
5 m! d! p q! }" m+ v* }. f) D* Reference to : TFrmRamMain.Delay() ;核心代码？~~~~~！！！！！！牛x，这样就可以“中和电脑周围磁场”，佩服佩服~~~~~~( v2 m+ ~5 y( Q
|; E0 x+ d1 S j' C: h/ c
0047FF62 E8D1020000 call 00480238
* g) I+ N* ?. u: u! o4 x2 m; B% U2 e+ M" P
* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar ;进度条继续在动7 y2 H) C) H- h7 n9 ?
|
1 D1 ?7 i/ s3 a0 S! }0047FF67 8B83F8020000 mov eax, [ebx+$02F8]" _ m- q0 @+ N1 ~
7 ^! L( m# T% ?. n! H! m; s( k/ B {* Reference t comctrls.TProgressBar.StepIt(TProgressBar);9 p- V: x5 @* E: p% R3 P' K
|8 w. O# X& s& T9 B2 N& N! z. i) Z
0047FF6D E8F288FDFF call 00458864
: [; a( [% d o( M! M5 e0047FF72 8BC3 mov eax, ebx
- J& f5 V, _% @- o4 d9 Z6 N7 W8 t. O4 ~/ n
* Reference to : TFrmRamMain.Delay() ;休息一下，不知道从何方招来的神圣正在提我们消磁：）) o/ H) m/ I/ }9 j
|
! ]* D, k' M5 e- m2 c8 H0047FF74 E8BF020000 call 00480238
* u! j# f8 V2 s0 N6 ]; g: a! y* B& L+ _
* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar ;继续动- F( m1 j4 d/ T" B
|
5 y6 Q3 |0 k$ T7 @" y7 r5 ^ X0047FF79 8B83F8020000 mov eax, [ebx+$02F8]; F3 }7 v8 O9 `) D( n+ Y' m
1 L0 _& @& W+ p1 X0 b* Reference t comctrls.TProgressBar.StepIt(TProgressBar);, V1 K6 h8 x2 R$ ]' @) S
| P2 H/ `, p$ }5 e8 x3 q
0047FF7F E8E088FDFF call 00458864
! O( _& C8 k, Y5 u0047FF84 8BC3 mov eax, ebx
1 Q" V0 O% t) O! Q( L: E! z. z0 {6 U- V
* Reference to : TFrmRamMain.Delay()
0 {: E3 h. l- D) F|
2 H! s2 v1 x1 t2 v. [0047FF86 E8AD020000 call 00480238
; T$ Y; X3 {3 P, F2 d0 I2 b
/ p, b6 n! m( i; U- e# F* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar* C$ m v; A; @ Z) J4 a
|6 q/ P1 H8 Y% A' Q8 b: ]! O2 F K
0047FF8B 8B83F8020000 mov eax, [ebx+$02F8]
, x- n% C0 C* i: u" x$ }( d1 G% t) b! }2 h1 s
* Reference t comctrls.TProgressBar.StepIt(TProgressBar);
3 l7 q3 j+ \% z1 e2 C% F. d|
, W- g. l8 Y! |% O/ f' N0047FF91 E8CE88FDFF call 00458864
2 V) n2 \6 p8 {7 R* g5 M0047FF96 8BC3 mov eax, ebx
# q( e, G2 U( a; A( _) f& W& G" N. O0 B) U
* Reference to : TFrmRamMain.Delay()* G6 W9 g0 C, }0 ~* W
|
' ^. [! E- f6 M8 N, ^0047FF98 E89B020000 call 00480238: _' f1 V: W5 T4 q
. C# d5 F6 i4 Y8 H/ K$ _6 Z Z* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar+ R: B1 ?0 ]0 D
|
; r) }+ X; B0 F$ M& z5 c# n0047FF9D 8B83F8020000 mov eax, [ebx+$02F8]
2 |% y( @& G+ A4 c" l7 A2 v4 v+ {1 L: }% T8 m$ d
* Reference t comctrls.TProgressBar.StepIt(TProgressBar);
: A9 a) N$ g1 q|0 z* X3 v1 i' [* \% {# g2 r% o
0047FFA3 E8BC88FDFF call 00458864
o* X- D/ F. C* M
4 U! d% X8 M' Q0 \# Q1 Q1 \3 n* Possible String Reference t '系统正在收集电脑的电磁波...': b0 h$ l7 u6 A0 @% x5 x
|
5 Z+ N V; W; m& A0047FFA8 BAA0014800 mov edx, $004801A03 f* H6 ^ t4 z$ H" q* Z' S: B
# M; n1 B2 u: q6 F. a- N. R5 U
* Reference to control TFrmRamMain.Label3 : TLabel
0 q) n6 J8 K3 O' {# V|
! m5 S" R7 G, t# T- S! v4 ^! x+ M0047FFAD 8B83F4020000 mov eax, [ebx+$02F4]
$ f- G* R7 j/ u( |: m
6 s6 i7 V3 A: {: M; G* Reference t controls.TControl.SetText(TControl;TCaption);
2 d9 B6 D) j* H# a) {0 U% b|+ O: t' } o$ A' w1 ?4 J
0047FFB3 E8A4A6FAFF call 0042A65C* J) ]7 G9 p- @ i" v& t
' t5 c3 w) Y! h8 G# Z/ s* E a
* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar
8 A) m- b) a: b# f|3 n! K+ r! ]% g# u- a* ^# E. _
0047FFB8 8B83F8020000 mov eax, [ebx+$02F8]- x+ W* e! q7 ~" ?+ [
0 B. a& n" j6 S4 R4 b: j& |* Reference t comctrls.TProgressBar.StepIt(TProgressBar);
% O* O1 k1 `9 ]2 S. ?" K|
5 e, b2 v' d! f$ O4 h8 J0047FFBE E8A188FDFF call 00458864
I5 ?4 T+ a) K9 V0047FFC3 8BC3 mov eax, ebx
5 v/ R, Z) |& t8 P" Z* P X# z: j+ N7 y
* Reference to : TFrmRamMain.Delay() ;根据提示，这句应该是收集电磁波的代码。
; a, D v5 W# s; j' w- s8 ?/ g|
8 i9 j) n' t) Q. x/ y0047FFC5 E86E020000 call 00480238 z. m* d, h& c2 F4 ]1 X, F* ]
, l* l4 I# M! Z2 ]; r" C# D( z
* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar
( L3 i# f6 t) @ I|
7 ?4 ?9 i" Y' K0047FFCA 8B83F8020000 mov eax, [ebx+$02F8]
/ o( ?3 @3 z2 s
6 x& A! ]; e8 p* Reference t comctrls.TProgressBar.StepIt(TProgressBar);
; ?& X- h! H- T) |/ R2 ^" i|5 b3 w: Y' b: A( E- y$ j
0047FFD0 E88F88FDFF call 00458864
+ z* f: j4 L2 M% J ~8 r! d0047FFD5 8BC3 mov eax, ebx
+ v' ^) {1 A. f5 \% [3 |9 b$ }# T' x! g: \; {
* Reference to : TFrmRamMain.Delay(); \: a' [ ~0 b) |4 f" I
|5 c) y; _6 X, [) b* Z9 d j5 a
0047FFD7 E85C020000 call 00480238+ D& z ~' Z7 w. u, \& Z) j& Y. e# D
# L2 E7 e+ C) I- y' ]" R* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar& C/ O x: i0 a4 [/ O- g
|; x* Z) f0 W8 e; G6 S8 t
0047FFDC 8B83F8020000 mov eax, [ebx+$02F8]
$ a/ W; n, a: M' K9 e+ ^+ E0 G
# _- W9 k% W* B# t& P9 c" t0 G* Reference t comctrls.TProgressBar.StepIt(TProgressBar);
; ]# S+ b3 ?4 }/ \# b|
$ s1 s8 w) `2 z0 f2 @8 ?0047FFE2 E87D88FDFF call 004588640 t' e, A/ ]' Q5 `
0047FFE7 8BC3 mov eax, ebx
9 D/ s p# r, R. K+ w
) a8 ]$ \( i: o$ ]# a* Reference to : TFrmRamMain.Delay()
4 |' K, J' W+ d7 Z+ J|
6 j1 q1 I" b3 ~1 U" u0047FFE9 E84A020000 call 00480238
$ b3 l9 b. h8 y5 _: N- _1 h
) \2 \. f6 I$ I, d9 E% {* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar3 F% P+ x' W6 X( T& t- Y
|
! w2 u" }8 p4 F' a0047FFEE 8B83F8020000 mov eax, [ebx+$02F8]
6 l* w1 q- o7 a0 O" R
& K: @& I3 s7 n Z B3 X* Reference t comctrls.TProgressBar.StepIt(TProgressBar);# V5 ]8 A1 P- E4 A* `" m
|' ?4 E) G" o* T
0047FFF4 E86B88FDFF call 00458864
0 N5 g$ x3 y9 k# t) |. |0047FFF9 8BC3 mov eax, ebx" l9 n% w1 K1 t' |7 x5 s7 q. V7 l0 A
7 L4 r) h* J: ?4 q; _. j4 F: @4 R
* Reference to : TFrmRamMain.Delay()3 ~) w7 Y7 ]* R# Z* U
|; |2 K% c3 D$ V0 W$ d
0047FFFB E838020000 call 00480238
/ O" v4 q; n) q8 q8 E
0 R3 `& s8 T' ^, G: s( }* b* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar
. ?. I8 g4 J$ w6 {9 Z' ^0 ~/ I2 h9 @# q|
2 @: L& }( U; \' f" J00480000 8B83F8020000 mov eax, [ebx+$02F8]9 N. Z& ^; A9 b" [. Y* g6 a
9 C1 d4 @8 h+ o( e; l8 f
* Reference t comctrls.TProgressBar.StepIt(TProgressBar);
+ q9 {2 M, v+ g G4 ^$ r|7 b2 O( f: d$ m, I
00480006 E85988FDFF call 00458864+ l f$ f0 z8 [8 l: A+ o- F: W
! K4 g! Z9 O) T* Possible String Reference t '系统正在释放融磁电波...'
. X' T# ?) ^0 Z* C/ I. k|7 Q, P4 m3 r# S7 h. o8 a# q
0048000B BAC4014800 mov edx, $004801C4" E$ F& J( Z4 s K3 g$ C
. N# N* b$ p: J! U
* Reference to control TFrmRamMain.Label3 : TLabel& Z' K- @) I; I3 D
|6 f% l( S" x& N: s) J
00480010 8B83F4020000 mov eax, [ebx+$02F4]
; H4 J8 b. C% A* ^' u$ S, X
4 `* ~' ? w0 ~. [+ |, e. N" N% h* Reference t controls.TControl.SetText(TControl;TCaption);, n+ A7 m- s5 l
|
" m% O3 K h7 m: K! ~* \6 n00480016 E841A6FAFF call 0042A65C
% w8 m+ B+ W/ y8 m7 Y; b$ j
; a! i) |. O7 H8 q3 U0 \* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar9 z* O) S6 c1 ^' L! r0 [7 S
|8 o4 G. p. ]# T# f1 C4 S/ @8 q( u
0048001B 8B83F8020000 mov eax, [ebx+$02F8]
) O. J# E3 s4 m1 K# k0 ?$ R& f! B9 F# b; W2 X5 Q0 B5 V! V
* Reference t comctrls.TProgressBar.StepIt(TProgressBar);
: I: v; k0 P- K+ v4 P" a+ H& ~- r|4 d( E$ W( c8 c% w6 Z! X: @4 k
00480021 E83E88FDFF call 00458864
) F- q, }; F; u& L2 a3 D. e00480026 8BC3 mov eax, ebx' C0 ^: H* ^& i5 B! _! E
6 L" c) |6 Z0 c% D2 h) o* Reference to : TFrmRamMain.Delay() ;消磁的核心代码，这项技术大家可要记牢了，不可乱用，说不定作者申请专利了呢：）
* O; F/ Z! ~: B' Q; O( S8 v. u% f|
$ K, \# f7 i( n4 z00480028 E80B020000 call 00480238
/ [4 i9 _; K; ]+ H i7 S3 w
$ N8 C) X* M. r* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar
% d# O% F j9 K! e2 J|9 T1 B+ P, _, P
0048002D 8B83F8020000 mov eax, [ebx+$02F8]
) Z S6 S6 A* @0 m) j
, a! }- V$ c; h9 W/ N- [# P* Reference t comctrls.TProgressBar.StepIt(TProgressBar);, H7 m' R6 [& H! n% a: u' k( B
|
Z( T4 X* H: {9 t* t, a6 Q00480033 E82C88FDFF call 004588640 b( \! l% r4 B, l9 d/ _
00480038 8BC3 mov eax, ebx3 U3 y$ H4 a# s+ u% h
6 \; g* Z+ C& G& @- ]
* Reference to : TFrmRamMain.Delay()
+ o4 ~4 s$ p/ p$ ]4 X# m|
3 e0 {6 ^; @: ^& c7 s( H4 z0048003A E8F9010000 call 00480238! o: f- e/ _1 _
3 p$ R. ~: [ f
* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar0 a; i" g4 v9 j/ t7 J, H5 N5 s
|
) p& P3 G9 f+ n% B, @. b1 |2 i. F0048003F 8B83F8020000 mov eax, [ebx+$02F8]
* A: H1 q8 L) s o
! R5 A6 |0 h3 `4 k8 k8 n5 P% s* Reference t comctrls.TProgressBar.StepIt(TProgressBar);
, q$ A; A7 T% w7 j. j, \|7 @" J7 U+ r, C5 X% ^. h9 A
00480045 E81A88FDFF call 004588645 s$ {( f0 R ]; ~ N
0048004A 8BC3 mov eax, ebx
7 m* G- `9 \: Q% Z/ |$ y
, P: b# Y) R8 ?+ L2 H/ z7 I2 G% z3 M/ l* Reference to : TFrmRamMain.Delay()
& t6 ~; @8 i; z" C0 O& k' h|- ?% V" E, S8 e# D2 Q" s, ^9 O6 }
0048004C E8E7010000 call 00480238
: D, n$ L- E: V4 w# m H4 \4 o+ a8 b* m4 C2 e4 U+ F
* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar* i( S$ m* O' l w% h% O
|
) x9 t. y+ z9 ^" G00480051 8B83F8020000 mov eax, [ebx+$02F8]$ ] `! T2 u3 g2 x
( E( r7 Z# G5 W2 U) a+ ^
* Reference t comctrls.TProgressBar.StepIt(TProgressBar);' b3 `2 \7 U O5 ~& b/ o
|
& K) Y. o$ q% c, _. o: J00480057 E80888FDFF call 004588645 c, w& u7 Q5 }0 n. ^1 {
0048005C 8BC3 mov eax, ebx
3 |3 r& @' \, q1 V' x6 @" E. ?2 n% ?$ i$ i' M3 b5 |
* Reference to : TFrmRamMain.Delay() S( t& X/ u" T* k) M2 J
|
2 ~6 e* Y0 K A. J; w8 X1 ~- {: o0048005E E8D5010000 call 00480238
( l6 C* {& d; @ n! g5 Y3 [6 r' |$ z5 \/ a3 S) g" G6 k
* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar6 o8 X+ u, J+ K/ T
|) s$ n f+ R5 q
00480063 8B83F8020000 mov eax, [ebx+$02F8]/ L9 ?+ H9 o' f4 q3 M
4 s) u' W; Y0 l* Reference t comctrls.TProgressBar.StepIt(TProgressBar);
: ^8 B1 }2 y6 ~7 ~|* `+ ~. z8 e1 C+ \$ R, q7 _
00480069 E8F687FDFF call 004588645 n! r. Y, ~+ Z3 R9 p8 d: v$ F
8 Z: D1 }- }3 Q, T! E8 s5 G0 M* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar
: z6 O7 x. |4 U) s# D& Y|4 r0 H1 p4 v- i. Q5 c _ ^
0048006E 8B83F8020000 mov eax, [ebx+$02F8]$ j1 F$ z2 p* A5 j
1 P T: p# C I* Reference t comctrls.TProgressBar.StepIt(TProgressBar);
5 s' [$ }5 U; i( a: _|
: R' I, B5 z5 q* P c% }) W3 g! }00480074 E8EB87FDFF call 00458864
5 P h% z) A1 n0 x8 X4 R- `. _00480079 8BC3 mov eax, ebx$ ~! @& I1 a" ]) O9 ?& l, \
+ f1 ?( ]8 q2 ]) m7 p
* Reference to : TFrmRamMain.Delay()
) X1 u& ?1 A4 Y|% s$ g5 J3 |6 a) ?
0048007B E8B8010000 call 00480238
# X# k0 d: m6 X# I0 \- m4 A* H& g
6 C" W% ]& l( q' n$ L* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar6 e- E" }; k' k7 o7 I
|& E; m" \" f* P/ [; I( y) f( m
00480080 8B83F8020000 mov eax, [ebx+$02F8]. z1 E7 C! Y4 r0 R* M
/ k# a$ ^+ T2 M6 d4 n. Q4 u" C5 R* Reference t comctrls.TProgressBar.StepIt(TProgressBar);
5 k0 Q5 P8 _$ `6 p0 b0 j% [|
' d5 C% Y. I/ E- {00480086 E8D987FDFF call 00458864! C2 E6 v+ x% x4 N6 ]& ?% F
0048008B 8BC3 mov eax, ebx
j0 S& Z1 }: q8 p, f
, H( o0 Z# M$ y5 q& z* Reference to : TFrmRamMain.Delay()1 U+ V3 E, }% K% I2 ]
|
- q* N% k! A' k# b# W0048008D E8A6010000 call 004802381 g# ~( O J- ]- T
/ I+ S1 U9 r" W9 f" E* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar; N; u. r0 p: D/ z. y: d& G; ]) Q
|
# J8 O8 A) y. | b0 _00480092 8B83F8020000 mov eax, [ebx+$02F8]
; @9 _* `# }) s. T. C6 {2 Z8 K( }0 Z6 M
* Reference t comctrls.TProgressBar.StepIt(TProgressBar);
7 ^% f6 s& f) ]6 g$ z8 m- m, a|: {5 t% f7 E; l+ L
00480098 E8C787FDFF call 00458864
& r3 q" v U1 F% Y& j0048009D 8BC3 mov eax, ebx
( A0 k/ v. I" i6 _! e% D# [; d8 [) n% R4 L) {1 @0 S0 H# f
* Reference to : TFrmRamMain.Delay()6 U4 g* C2 y t3 [) g
|
, L0 V0 P7 V1 {- a* b( o0 }0048009F E894010000 call 00480238
$ W' K3 |8 I- N) V7 {
8 E- t- ^) E) h7 n# s: U* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar5 c/ O- ?/ U4 I( W' H7 M( C8 }$ z
|0 D# s$ d% T. g" _
004800A4 8B83F8020000 mov eax, [ebx+$02F8]0 Q- R# ?3 o1 _' X }5 z; X5 R
. H* \- H# v; c8 T& H4 o; Y
* Reference t comctrls.TProgressBar.StepIt(TProgressBar);
v0 X# q! P% E: `# @|
9 k+ K A; \2 f) A004800AA E8B587FDFF call 00458864
+ R" ~# b! k' X, u9 K2 h004800AF 8BC3 mov eax, ebx
/ ?3 m8 i: q; s$ s+ O% l9 Y; K
" n; E6 B S7 T* n; A( {5 C* Reference to : TFrmRamMain.Delay()
3 }( x# C4 E5 V6 S/ v|
- \. u$ l' Q# o004800B1 E882010000 call 00480238, y3 ^$ V9 ~' y, T- ?; p5 h
_" |- ?5 s) o( C# ?
* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar; _0 F( }1 s# ]' d1 @; v8 M/ N% e- s
|
% t3 T, l" Q- d+ ~# L004800B6 8B83F8020000 mov eax, [ebx+$02F8]
# k3 f$ C. L9 k7 ~: p2 t" g& _2 O3 y% h1 m W0 X
* Reference t comctrls.TProgressBar.StepIt(TProgressBar);* K5 Y( y$ b6 B% p2 h
|
. C4 X |$ ]+ _- m' F004800BC E8A387FDFF call 00458864
9 N6 c6 M# a' A
' W+ R7 F0 G+ O k |+ `* Possible String Reference t '系统正在做最后的消磁工作...'1 T% O' L- E) r
|
5 b' G: L3 }5 v+ B5 d004800C1 BAE4014800 mov edx, $004801E44 O& f3 L, v; n G' k: L
1 E1 Q+ O q, D H$ D: w
* Reference to control TFrmRamMain.Label3 : TLabel
0 ^$ T' C. K& I|, J: i: | @; A. H6 \. ?/ S
004800C6 8B83F4020000 mov eax, [ebx+$02F4]+ B) a: O% a( Y: r4 t
* [# @# X! y7 T7 |- o8 ?
* Reference t controls.TControl.SetText(TControl;TCaption);
- \- U+ e1 t' r; ~$ E|
4 ]. R# N( [ S. O! }( Q004800CC E88BA5FAFF call 0042A65C# J9 I( Y2 c! m4 Z) {5 E
, ]. Y1 ^/ n- R1 N
* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar/ P I1 i* Y( l$ J- N( {' i; P
|
: B8 a" U6 i' i& M/ ~004800D1 8B83F8020000 mov eax, [ebx+$02F8]* N3 \2 t; y& `
; j# y/ f! T4 i8 G0 B
* Reference t comctrls.TProgressBar.StepIt(TProgressBar);1 M( E, C& }2 D! n8 I
|$ ^' P* B+ r# N8 j! _3 a# T8 i9 M. {
004800D7 E88887FDFF call 00458864
4 I& o! Q2 u0 @6 T004800DC 8BC3 mov eax, ebx
0 K, |7 W1 w& M# l: W- R( l2 a7 V+ W
. ~7 x4 \) r. P* Reference to : TFrmRamMain.Delay() ;我就不说什么了吧：）
8 {/ f0 b8 u3 J6 [" U+ d. D: V; C|
3 d' F( c' O' h0 m004800DE E855010000 call 00480238
. Y1 j6 {0 S, N3 u1 L( ]+ o. D1 G$ c
( m) v0 h7 Q7 Y+ S* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar* ~. G1 a. s9 B9 T& d* b
| y7 G, t( s+ s/ o4 l- ?
004800E3 8B83F8020000 mov eax, [ebx+$02F8]
8 o0 S8 z; L' l3 e! T! D9 Q
" t$ S2 v2 ]: c: `$ g/ ?* Reference t comctrls.TProgressBar.StepIt(TProgressBar);
/ S# ~# n$ k5 j/ z2 _' A( R% N|
1 f2 K* w$ `# f+ W004800E9 E87687FDFF call 00458864' g2 l% Z* W8 H6 N. j
004800EE 8BC3 mov eax, ebx# s& E, x( V. X( K. {4 }
) I2 k. J- I& W& M; w H4 T0 i* Reference to : TFrmRamMain.Delay()
, D( ~, z; ~* J4 [6 N( j6 H- y4 F) d|
* W, H* t' M1 ?5 m004800F0 E843010000 call 00480238
. A& O! t: Y- g& t# j# A% q \ v% W0 |
* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar$ b3 w, o$ w5 r; U/ T# c
|
! p) m# f- I8 k5 \, s9 i004800F5 8B83F8020000 mov eax, [ebx+$02F8]1 ?2 y% T; A1 P( m
" F5 [+ X: l8 J/ L% z
* Reference t comctrls.TProgressBar.StepIt(TProgressBar);
' H) t8 S% N0 V$ F `" t+ s! A|. I- v' U) f9 R
004800FB E86487FDFF call 00458864( K4 Y! v. o, ^( t5 p! s
00480100 8BC3 mov eax, ebx
$ G' m) D( h# G2 U* y, _8 Q+ a
B% S- I) O$ I* ?2 g* f# k2 V* Reference to : TFrmRamMain.Delay()
. T2 _! c* P X7 A|$ v, T$ {! ~* v, [ ?/ ?* Q
00480102 E831010000 call 00480238
9 Y& k9 f9 ?/ J* G9 D+ } p0 ~: i$ X( f9 a3 b( |9 @+ P8 F$ \0 |2 C
* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar
% l8 o$ {/ j/ L! M6 Y6 p|; z! Z6 }4 l% e4 |3 f1 G, d
00480107 8B83F8020000 mov eax, [ebx+$02F8]! t! F0 |4 X0 j8 m: e$ m
, h* `+ _+ k& X5 V' y% x; |
* Reference t comctrls.TProgressBar.StepIt(TProgressBar);3 ~* e6 ] q" J2 P) f
|
% x9 W6 j e: G/ l9 {0048010D E85287FDFF call 00458864
8 ~1 y. L& X* _. m' k' F, A6 Y00480112 8BC3 mov eax, ebx( P7 B" Z% Y+ s, A! T5 [3 d
# p$ K- F2 L5 x8 z8 g( |- ? B* Reference to : TFrmRamMain.Delay()
. B7 _7 N4 k% J: J|
# S: u( C: o7 A/ K* h3 }2 H00480114 E81F010000 call 004802385 R" N/ I6 W! U5 K) t2 q/ `" f
3 [# d' d/ Q' |" d+ q8 W; {& ?! q
* Reference to control TFrmRamMain.ProgressBar1 : TProgressBar
W7 l. O) [0 {/ O" `' S! H9 T" \/ m|+ @) x6 e- r4 u) R/ H% z$ E
00480119 8B83F8020000 mov eax, [ebx+$02F8]
/ P: Y( ~6 y- N% H' z4 m
/ K- ^9 s- S. r5 X' I* Reference t comctrls.TProgressBar.StepIt(TProgressBar);& S* W( m M. {5 l6 P* B, i0 e2 }. c
|7 e) O& v5 v6 ]9 L X3 M) u6 z/ N
0048011F E84087FDFF call 00458864
( P, Q! \* j- ]# V2 ~, G00480124 B8E8030000 mov eax, $000003E85 X7 L! C- `% W5 J
: M- u5 P. Z- e1 n- \
* Reference t system.@RandInt;0 N; l: n# G8 H) l% l4 `0 N% n" R
|8 Q# u4 Q! G2 k0 n4 [& K
00480129 E86629F8FF call 00402A94+ t6 r! z" N' u! U# h
0048012E 85C0 test eax, eax
0 Z2 u2 T5 j) N a8 U( D00480130 6A40 push $40% S q6 p( j' C: \
. g1 r2 \7 h3 y8 A/ C$ F' B
* Possible String Reference t '电脑消磁圣手'/ L. y) t6 Z/ S {+ d& g/ _: M2 L
|
2 n6 \% I/ o0 U4 H2 F1 c% _0 H00480132 B900024800 mov ecx, $00480200& w7 {) W4 ]9 `
$ T& Z$ s4 P# S/ M5 {" \9 f: C
* Possible String Reference t '融磁成功，已经成功中和电脑周围磁场?- s/ m9 v- F) U3 X+ E! q. H
| ?3 k9 U R1 e# w$ s
|- U6 E1 \7 d) Q$ K/ Z
00480137 BA10024800 mov edx, $00480210& ~. l7 b$ V$ N% M4 J! e
6 D/ B& L J7 X+ y, v* f* Reference to TApplication instance
. R; J* J8 w2 P$ @- Q, }% v }2 s|9 `/ Y' i @5 B. l
0048013C A148284800 mov eax, dword ptr [$00482848]
5 ]8 r# T, X9 z; Y5 ^4 _00480141 8B00 mov eax, [eax]4 Q! H+ F" S \% @
# X3 d2 J3 y7 j# u* t8 b6 _* Reference t forms.TApplication.MessageBox(TApplication
CharChar;Longint):Integer;
/ n- t1 ]' o6 {$ H6 } I|
& a0 z" e! Q/ |00480143 E89895FCFF call 004496E0 ;大功告成，消磁成功！！！% B3 x6 \; z1 `9 k5 d+ p& E; H0 q4 D
00480148 33D2 xor edx, edx. Y2 f) M. s; o* ~& U4 u
/ h5 \% _) ?3 i* { F: f
* Reference to control TFrmRamMain.Panel1 : TPanel5 L$ k4 q% M1 y, l5 O
|; G4 Z4 V, |* w4 |- A1 |9 @- ~- t
0048014A 8B83F0020000 mov eax, [ebx+$02F0]
0 ]( V8 k/ }4 J- T2 ?( K, v- q' o# A* C, u
* Reference t controls.TControl.SetVisible(TControl;Boolean);
/ M. v/ k- o2 _|
2 H2 W1 N! l( C) _1 S00480150 E8EFA3FAFF call 0042A544
, J& E+ W1 A( ~, [+ o% o00480155 B201 mov dl, $013 G+ L; V+ a' L6 y# b# \$ [$ _
( K& R; o k6 Q; W' D' W
* Reference to control TFrmRamMain.Panel2 : TPanel1 b1 a9 \4 ^; M
|0 a/ { f- P k5 X
00480157 8B83FC020000 mov eax, [ebx+$02FC]
) r4 x- U4 M# X; w: f' k8 t
6 A; L1 `9 p. T; W( \* Reference t controls.TControl.SetVisible(TControl;Boolean); ?; U9 z- }- ?& O
|& D; R) C G4 O) o
0048015D E8E2A3FAFF call 0042A544
j( w# @" l! J6 |2 n. o, k" G4 P! A6 E# u5 E# H
* Reference to TFrmAbout instance
* w0 J3 K, i7 R. ~! f) {: s|
& e7 N! C, M8 x5 k- x- ]00480162 A148264800 mov eax, dword ptr [$00482648]0 O+ A% L) `8 `+ O- ^# m9 U7 I
00480167 8B00 mov eax, [eax]# _- o7 S6 z9 a4 ^9 R; o8 t$ Q
00480169 8B10 mov edx, [eax]& B6 r$ i3 V2 [ l4 `( `# ~% y
- p& D9 k4 x" r0 R4 V% P
* Reference to method TFrmAbout.ShowModal()3 Y& k: H" K. i
|) R3 h6 R0 \4 U& K( e- k" I
0048016B FF92D8000000 call dword ptr [edx+$00D8] ;关于窗口露一小脸，是介绍公司的。如此精深的技术，倘不见一下那只下蛋的鸡，岂不是太可惜了么：）/ M5 A: h) K" i+ [
00480171 5B pop ebx
) q9 R* O! U& C7 X+ X1 R00480172 C3 ret
作者: 游侠无极限 时间: 2004-12-25 15:17
上面就是“消磁圣手”的核心代码。逆向了这么重要的代码心里甚是不安。软件的开发公司千万不要告我啊！不过已经看了，再多看一点也无妨吧。谁知这一看不要紧，又发现了软件作者的体贴之处，请看下面的代码，是窗体创建事件对应的代码：9 c I; i9 j& Z
8 f4 O4 o! ?" e9 B. y; x' Z* r8 [004802F8 55 push ebp
+ `8 J* n R: Y2 ~004802F9 8BEC mov ebp, esp
' d, u8 ^3 ^$ L4 R( H y004802FB 33C9 xor ecx, ecx) g0 c' W h3 O# v5 H& s6 @
004802FD 51 push ecx
, [* n/ M. y: @( C( d) \& B+ a004802FE 51 push ecx
' W0 v/ ?; t/ ]/ d" w004802FF 51 push ecx
7 L, |. Q# C4 l- I3 T00480300 51 push ecx& a: s2 e% z: }2 x, B5 P; J
00480301 51 push ecx9 g% U5 O6 f/ O- D
00480302 51 push ecx1 d: x2 M8 @$ f# `: ]) W& C
00480303 51 push ecx9 |. S5 S) t6 ?. F% L) y" v
00480304 33C0 xor eax, eax
' g3 ~: q8 o% r00480306 55 push ebp0 o- U8 q# F+ L2 V1 m: y, H) l9 u
4 `5 B% g) z& M+ B
* Possible String Reference t '檫0?脬嬪]?
% K* c* S) B$ w( H8 o* t|" V/ J( i& j' H! T- U/ u3 X
00480307 6808044800 push $00480408
, g2 j# N" P `# V" Y; c' s# T2 b/ P6 n) h4 x7 l* T; j
***** TRY
7 @4 O6 S5 N3 S( Q: F; Q|4 o9 J- s. f/ {6 G: r5 ]* |
0048030C 64FF30 push dword ptr fs:[eax]6 W7 B3 ?% p# L3 e% b. v0 E
0048030F 648920 mov fs:[eax], esp8 `# N ]- q2 [6 R$ p$ ]9 R
00480312 8D55F0 lea edx, [ebp-$10]
' c* Z( ]7 Z p$ {7 l, V" N
$ b# `, @$ } ~) ~9 ]: w* Reference to TApplication instance* A8 V. ?: {9 ^
|, y! ?4 L! o) X$ _3 M Q0 f
00480315 A148284800 mov eax, dword ptr [$00482848]
~4 Z' q$ {4 @4 K0048031A 8B00 mov eax, [eax]
5 k0 y5 o3 d$ R7 U5 U9 `4 h
) g4 r' Z8 Y3 i* Reference t forms.TApplication.GetExeName(TApplication):AnsiString;
) x, i0 T# M; I8 y3 g" o' s|
2 z- N6 D B7 A' M! c6 Q0048031C E82F97FCFF call 00449A50 ;Who am I?3 ^$ j/ D1 q7 ^' }- {7 ~$ A& H* T
00480321 8B45F0 mov eax, [ebp-$10]
! t9 `- T1 n& z J" Y# k1 E8 }5 ^00480324 8D55F4 lea edx, [ebp-$0C]- d" M/ n! _- V0 u" ~) \1 k
; C% B& j9 h" |# {6 d
* Reference t Unit_00406FD0.Proc_00408110: X1 e. e5 e" i- s5 P5 f! y! A
|
: P( y8 n" J, i$ \# [2 E, t00480327 E8E47DF8FF call 00408110* b# q+ T4 g9 b) C7 s
0048032C 8B45F4 mov eax, [ebp-$0C]
( @3 Q. Z/ k- b2 c- } T% q0048032F 50 push eax V. {: i$ v1 i6 n# y( K( i
00480330 8D55E8 lea edx, [ebp-$18]" d4 G3 _, j/ z/ I, \. R) g' d% ~
" }. c/ {" M( X: @: D
* Reference to TApplication instance
9 q" s) e: x, m5 N m$ {, C9 \|
; Y0 C$ T9 h9 {7 f: A; G7 A, Z. v00480333 A148284800 mov eax, dword ptr [$00482848]: C! O1 y( @9 z S( ~
00480338 8B00 mov eax, [eax]
|6 W2 W- d% D5 J8 X* q# k. w# b' _( G) i* v' J& }8 t
* Reference t forms.TApplication.GetExeName(TApplication):AnsiString;
+ W; `) n; G+ [9 \|
: x# V" O2 f+ r: i1 T L7 ~4 n0048033A E81197FCFF call 00449A50
$ }, }! p7 K$ W0048033F 8B45E8 mov eax, [ebp-$18]8 P1 M9 q/ ^$ W x9 T( ]
00480342 8D55EC lea edx, [ebp-$14]6 V/ H8 k! K w% P0 `
+ E+ a a* Z. b1 `
* Reference t Unit_00406FD0.Proc_004080DC
2 {2 Q; }0 |! E; T|2 ]5 w/ a9 P$ o, J
00480345 E8927DF8FF call 004080DC
" c% B2 S; e( {9 Y9 M' m( n$ q0048034A 8B55EC mov edx, [ebp-$14]7 }# h9 }; u+ K! `
0048034D 8D45FC lea eax, [ebp-$04]: e9 T: R" A4 C9 y$ {( {% ^( E7 c
00480350 59 pop ecx- ?$ b2 I( S6 l( E
1 {0 \" C7 R2 j5 C. o! [* Reference t system.@LStrCat3;; G: x& Q, w; F9 a; @+ Q
|
% X! y8 i$ F* H7 N! J00480351 E8CA39F8FF call 00403D20
* H: H$ e, F! e! @% @00480356 B201 mov dl, $014 M s9 n% Z* q+ t* o/ [ N, K
4 n( x0 _& H; Q9 c2 {3 s( F
* Reference to class TRegistry+ n2 [4 u# E. n" v& A
|
& x6 s% \' g' X: E00480358 A174F14700 mov eax, dword ptr [$0047F174]! i$ w/ n6 h$ r1 c- f; D+ P
) i7 Y4 r: L; {3 \! i& a4 N4 V6 p
* Reference t Unit_0047F114.Proc_0047F274; e' y' H |. h: \4 N! c
|( W7 L/ d6 p( R: ~+ r, | [3 R
0048035D E812EFFFFF call 0047F274& c" v/ r# F- S7 I* o# O+ w& b2 q1 l
00480362 8945F8 mov [ebp-$08], eax
; V& R& E$ h" d$ k00480365 33C0 xor eax, eax. s1 _- ]$ M3 i P7 N- M5 ~
00480367 55 push ebp
1 y' X$ l/ O# o1 j00480368 68DE034800 push $004803DE
: g8 k, {3 J! g% N9 i, A+ L0 E0 a! t
, m* t# t8 Y1 g( x0 N6 A6 H: S***** TRY
5 J7 p: e' w: I8 l|: k* B/ d6 C1 {* N' N2 H$ j, a: j
0048036D 64FF30 push dword ptr fs:[eax]% |) A! J6 V: o8 ?+ H) y
00480370 648920 mov fs:[eax], esp$ y0 F/ M3 _. V5 u5 x7 }1 `
00480373 BA02000080 mov edx, $80000002
& i6 L% j% U) t' ~+ g7 a" Y+ u00480378 8B45F8 mov eax, [ebp-$08]2 H9 s5 B: U! @6 [2 u, e U& E
+ w9 a4 M4 R. `8 e; c* G$ k
* Reference t Unit_0047F114.Proc_0047F314
* u) o$ {+ U- R, `- k ~|
/ a( [1 |& O2 l( v" s& B0048037B E894EFFFFF call 0047F314
; u& C% {+ S/ N3 s& b& H/ x; J; M00480380 B101 mov cl, $01
; w" N! i: f- f7 J& d$ b4 R* b. z& p3 o1 s* r9 L
* Possible String Reference t '\SOFTWARE\Microsoft\Windows\Current ;这个地方好熟悉，为什么我的毒霸不报警呢：）
: k' \$ l( U& K1 N2 D z# a* _+ y| Version\Run'
% _% s* I, e0 u% ~* ]$ s|
; [% _) j/ X( X) n+ @. G0 B00480382 BA1C044800 mov edx, $0048041C0 W; j! h; U) m& U# {
00480387 8B45F8 mov eax, [ebp-$08]
5 A' c; ^- d. O% ]( S5 | l3 b* v2 c( Q& F$ X6 f+ b
* Reference t Unit_0047F114.Proc_0047F378% L% v4 }6 I2 F) T1 ]0 e, i1 v' `
|0 }/ z8 r- o' |7 K7 o7 `7 ~% t
0048038A E8E9EFFFFF call 0047F378
$ O6 R, P- c! Z5 |, j) v' V. |0048038F 84C0 test al, al
# k: \' ^" U5 p3 G00480391 7435 jz 004803C8$ z4 n; {1 R- U
00480393 8D4DE4 lea ecx, [ebp-$1C]
7 a, ?, |* j1 Q3 X8 A! C8 y2 z4 E6 t4 G4 ?: |! b, k2 K
* Possible String Reference t 'JrRClean'# F8 O" u- c& Y9 s
|9 _, n7 r9 M- C' M. b4 J
00480396 BA54044800 mov edx, $004804541 v) Q% a X$ N% I4 p0 ~* |
0048039B 8B45F8 mov eax, [ebp-$08]
* M, {9 }+ n/ d; ?8 ?& r! |9 S4 p' ]& S3 w6 H# E0 Z: v. [ v
* Reference t Unit_0047F114.Proc_0047F540
$ R2 ]% l* }7 o% D& b|
]" d) t5 P/ P4 s' y! }& K0048039E E89DF1FFFF call 0047F540
, s# q$ H1 W ^& \: i* A: t0 q004803A3 8B45E4 mov eax, [ebp-$1C]
! S8 e1 p" n8 t- O5 k/ v; j004803A6 8B55FC mov edx, [ebp-$04]
6 J; o# Y% a3 @% t
# Z* q; g, o( U4 r6 l* Reference t system.@LStrCmp;0 W/ F+ A. I, v: R1 P( d* a
|5 p$ _4 ?4 n4 h/ z
004803A9 E8363AF8FF call 00403DE4
* ]9 n. P1 ?8 y& x5 g1 v004803AE 7410 jz 004803C0
& k& x. @1 P2 X( K' h( F004803B0 8B4DFC mov ecx, [ebp-$04]" T- `" _/ ^& G5 m! M/ E: m
. H4 @8 Y$ ?5 X y- l
* Possible String Reference t 'JrRClean'
; D+ y- v$ u7 h* @/ }4 j! D' K|) i6 v4 W5 ^5 j8 j
004803B3 BA54044800 mov edx, $004804548 B9 r0 e+ m5 i) H- B2 q6 Q8 j
004803B8 8B45F8 mov eax, [ebp-$08]1 \: s+ Z- ~( V* S( g" ^$ H, G) y
" Y& q& i' b, J- Y; H' W6 x
* Reference t Unit_0047F114.Proc_0047F514
6 K+ z9 f' f+ p) {# n* ?|1 ^2 R, Q4 n1 ^5 f6 {2 {
004803BB E854F1FFFF call 0047F514: C9 l2 u5 r0 s
004803C0 8B45F8 mov eax, [ebp-$08]
$ Q* Z4 f4 \1 b( h
0 r5 h$ |7 s' Q' X: s1 I* Reference t Unit_0047F114.Proc_0047F2E4
* I( g. x/ B* ]9 J c/ Z- \|$ x0 h: L3 {: W& S, c. E' `3 J
004803C3 E81CEFFFFF call 0047F2E4- H( j8 g/ t1 _2 o* H5 n1 E
004803C8 33C0 xor eax, eax
: [ W" D2 s% v2 E004803CA 5A pop edx
# t0 M3 X" _" H+ Y/ N8 f5 q004803CB 59 pop ecx+ [- z: Q7 b. a
004803CC 59 pop ecx
4 }4 A2 l) C. f; s3 `( `004803CD 648910 mov fs:[eax], edx1 y0 K: I' R1 A; Y7 ^7 L
5 b$ b, ] z( h5 {3 s****** FINALLY
1 j& Y+ ?; V1 S3 B|+ Y. u' K. z5 J3 [' L4 x% G/ Z) Y
004803D0 68E5034800 push $004803E5
8 {1 a, [ J/ e/ Q9 k+ F004803D5 8B45F8 mov eax, [ebp-$08] _5 E: [& \. t' U+ [* K
2 H3 p& V! H, R0 o' L' }# k% H- O2 a
* Reference t system.TObject.Free(TObject);; n* m) ~/ K, A6 l( P& G
|0 R/ o. P. {6 R3 |5 M
004803D8 E8EF29F8FF call 00402DCC
+ `4 K3 }9 u2 r. e, X Q004803DD C3 ret5 L1 S! @8 |6 ], r
# ?, K! V( s6 Z" c9 y6 y
. K# B; N; P, E. d) U7 O* Reference t system.@HandleFinally;0 `- l% E8 z& n6 e
|
) e. T1 h4 Z+ f004803DE E90931F8FF jmp 004034EC( M( n7 C( z; I L
004803E3 EBF0 jmp 004803D5) Q E" z9 Z6 b8 ]. u3 I
- a) }! G6 k0 w! a5 h, h8 v1 `
****** END
7 D/ w4 C; h) W5 B- n4 O* G) s/ T, ]|* e) j1 H9 j" R' t3 h
004803E5 33C0 xor eax, eax* Q4 Q2 ~; x$ y- j! {
004803E7 5A pop edx' Z; [5 V; y8 [$ F* i6 D4 i8 a4 A! g
004803E8 59 pop ecx% Y2 [% v9 ]7 T" j" R7 `: X% D
004803E9 59 pop ecx
* t5 }8 F0 h/ f( G004803EA 648910 mov fs:[eax], edx
8 u" S8 S" a, G
9 W; P" y- I: V4 A" s1 G4 D3 m y****** FINALLY
3 G( O* I) |$ p7 k; ^5 x' s# G2 m( ]|
/ x. l$ l/ c" w c
9 a" {/ I3 S+ p) n- o, i; V& h* Possible String Reference t '嬪]?
' p& V8 D0 u5 a7 L6 I: Q|
( _% c- i% ?+ J; O" j- Y" c: _ o004803ED 680F044800 push $0048040F- G/ g) c- H: m$ a7 S8 h- o1 i C
004803F2 8D45E4 lea eax, [ebp-$1C]' b3 l& h, }2 l' D. p6 i3 A& Q
004803F5 BA05000000 mov edx, $00000005
- {: r5 @* _% C& ^# a( k- x
; ^, {0 j( M; |# n; R* Reference t system.@LStrArrayClr;$ }: c! r2 T+ U5 M7 p2 j" N+ X
|$ P& ?5 \1 Y) w
004803FA E87936F8FF call 00403A78
/ \6 K5 ~6 Y# W/ Y7 `004803FF 8D45FC lea eax, [ebp-$04]' P, v3 X/ ?7 S. x
0 S5 k4 `4 ^* g8 W/ F5 z+ _- t* Reference t system.@LStrClr(String;String);4 I5 X {& C( a2 {+ {
|
K) N; i' j6 N. ]6 B* o00480402 E84D36F8FF call 00403A54
2 y3 A2 ?0 j. @* e4 r( a. w00480407 C3 ret
+ E- i3 n3 p: x1 y
3 N- s, k& x g7 e/ z. ` W! O9 P0 E0 `9 e( [+ M m* ~9 |
* Reference t system.@HandleFinally;
/ ~1 x y- L3 H* z: i|
& c+ m7 y, A/ |1 z$ ]00480408 E9DF30F8FF jmp 004034EC
2 S, p' H) {4 g$ U9 u8 @0048040D EBE3 jmp 004803F2$ u; g, o5 u/ n0 V
+ C Q) A `* O0 K* N7 g5 U# c
****** END% G, C" o3 C4 {: }! O1 \
|
; U1 G* P! ~& w3 J5 D0048040F 8BE5 mov esp, ebp
+ j4 z3 ?. R) v4 q* I00480411 5D pop ebp
/ S) @4 j7 G `- ]1 Q2 s00480412 C3 ret
8 K1 _% M e( d4 \6 k: ?' @( r0 A; L/ z& Q3 d7 T o/ N* e
上面的代码我就不用多解释了吧？要知道电磁波辐射在开机的时候是最强的，所以“体贴”的作者就把“消磁圣手”加入了启动项中，这样每次启动的时候就能够自动消磁了，真是“人性化”阿~~~~~~当然，每次启动的除了“消磁圣手”，还有宣传的网站：）4 g, N& R$ }% Y7 Y/ N
7 j' g8 C# a* d9 c+ L
只是苦了我又要清理启动项了。为什么98的注册表编辑器不能保存上一次打开的位置阿。4 U- i& d/ k q0 h2 ]
( L B- n. {( _; x: s, @
结语：
+ q7 G# w! G4 }# {8 m上面大部分都是废话，能看到这个地方辛苦了大家，真是不好意思。7 {9 O( ~3 m, B' `
也许这只是一个开玩笑的程序，或者是有些精深的地方我没有领悟到。没有别的意思，只是闲得无聊。也希望作者没有别的意思，还希望作者在下一版升级的时候加入“取消开机启动”的选项。! P. T. j( Z9 O
权当一笑吧，呵呵~~~~~~~~~~~~
) s* n+ t( B$ U% S- W0 k
I, O' x; A* j' X" H& [. v/ P* Y8 b R7 W5 }
, U8 Y2 S \- N& k
) |( a$ l/ N8 y$ i
monkeycz于2004年平安夜+ ^% R# J# g# N% i* _! L g& K
2004年12月24日
大家如果是用VC什么开发的话，可以用用Sleep（）
作者: 煎饼 时间: 2004-12-25 15:38
delay
作者: hater315 时间: 2004-12-25 15:45
提示: 作者被禁止或删除 内容自动屏蔽
作者: 煎饼 时间: 2004-12-25 15:49
以下是引用hater315在2004-12-25 15:45:00的发言：) p! h4 y `( ^8 j, b2 r( U3 q
看的快睡着了.
作者: 天马星空 时间: 2004-12-26 12:25
看不懂 俺是代码白痴
作者: Eagle 时间: 2004-12-26 20:07
还好，不过不喜欢DELPHI，用VC的逆向后最好读了。
作者: 游侠无极限 时间: 2004-12-26 22:03
Delphi的用DeDe反汇编最爽了，连我这菜鸟也能比较看明白点了
作者: Eagle 时间: 2004-12-26 23:36
以下是引用游侠无极限在2004-12-26 22:03:00的发言：- u" `2 ?! F' ]
Delphi的用DeDe反汇编最爽了，连我这菜鸟也能比较看明白点了
作者: 小笨狗 时间: 2004-12-28 01:07
VC反编译有么？？
作者: Eagle 时间: 2004-12-28 10:39
干嘛一定要用专用的反汇编工具啊？VC的你直接用W32DASM或OD就行了。
作者: 煎饼 时间: 2004-12-28 12:17
都是高手,偶闪
作者: fimqad 时间: 2006-4-19 15:59
以下是引用煎饼在2004-12-25 15:49:00的发言：
.
睡就睡了吧,这个就是睡觉代码
7 d. o8 l* r8 g. `
同感
| 欢迎光临 下沙论坛 (http://bbs.xiasha.cn/) |
Powered by Discuz! X3.3 |