¡i ¼·´ß¾÷ ¡j EXE Àɶi¤JÂI·j´Mµ{¦¡ v2.01 (ª©»¡©ú®Ñ) ========================================================================== µ{¦¡¤¶²Ð¡G EXESHAPE¡BEXEWRITE¡BEXEMAKE ³o¨Ç³nÅé³£¬O±N°O¾ÐÅ餺ªºµ{¦¡½X Á٭즨°õ¦æÀɪº¤u¨ã ,­n¨Ï¥Î³o­Ó¤u¨ãªº¸Ü ,¥²»Ý­n¥ý¾Ç·|ª± DEBUG ,¨Ã°l ÂÜ°õ¦æÀɦܶi¤JÂI ,¤~¯à¦^¦sµ{¦¡½X¨ÃÁ٭즨°õ¦æÀÉ ,¤£¹L¨ì©³­þ¸Ì¬Oµ{¦¡ ¶i¤JÂI©O ,¬Û«H¤j®a³£¦³©Ò°g´b ,¦Ó¥B¸U¤@­n°lÂܪºµ{¦¡¦³°í±jªº¨¾¯}¯à¤O ,¨º»ò®Ú¥»´N¨S¦³¾÷·|°lÂܨìµ{¦¡¶i¤JÂI¡C §Ú·Q«Ü¦hªB¤Í³£·|¨Ï¥Î EXEWRITE ©Î¬O EXESHAPE ³o®Mµ{¦¡ ,¦ý¬O ¥ý¨M±ø¥ó¬O­n·|ª± DEBUG ,¥B¦³¯à¤O°lÂܵ{¦¡¦Ü¶i¤JÂI ;²{¦bªº«OÅ@µ{¦¡¨¾ ¯}¯à¤O¶V¨Ó¶V±j ,±j¨ì¨Ï¥Î¥¢¥h¬Û®e©Êªº«OÅ@¤â¬q ,¨ä¥Ø¦a´N¬O­n·í±¼¤Q¤À ±j®«ªº S-ICE ,«Ü¤£©¯ªº¬°¤F·í±¼ S-ICE ,À³¥Îµ{¦¡¤£Â_ªº RESET 8259¡B °±¤îÁä½L±±¨îÅv¡B·F±¼ BIOS °ïÅ|°Ï ,µ²ªG¤@¨Ç¦n¥Îªºªø¾nµ{¦¡³£µL¥ÎªZ¤§ ¦a(¦p¹q°Ê«g¬P¡B§ì¹Ïµ{¦¡) ,¬Æ¦Ü·|¥ÌÂZ¶gÃäµwÅ骺°Ê§@ (¦pPREXCM·|¥ÌÂZ ·Æ¹«) ,©Ò¥H±N³o­Ó¥¢¥h¬Û®e©Êªº¥~´ß¥h°£ ,¤w¸gÅܦ¨«D±`»Ý­n¡C µ§ªÌµo®i¤F³o®M¡y¼·´ß¾÷¡z¯à·j´Mµ{¦¡¶i¤JÂI ,¨Ã¦Û°Ê­pºâ°õ¦æÀÉ ¸ê®Æªº¥¿½Tªø«× ,¥[¥H¦^¦s ,Åý¨Ï¥ÎªÌ¥i¥H±N¥¦ÁÙ­ì ,§K°£¥~´ßªº§xÂZ¡C³o ®Mµ{¦¡¨Ï¥Î¤F¤j¶qªº80386¯S¦³©R¥O , ¨Ã¥H¦@¥Íªº¤è¦¡°lÂܵ{¦¡ ,¦]¦¹¤£©È ¹³RESET 8259¡B·F±¼BIOS°ïÅ|¡B·F±¼©Ò¦³¤¤Â_¦V¶qªí¡Bµ{¦¡Â\¦b 40:0 ªº¦a ¤è°õ¦æ ,¥u¦³¨ººØ·|°»´ú¬O§_¸ü¤Jªø¾nµ{¦¡ªº¥~´ß·|³y¦¨·í¾÷ ,§_«h³»¦h¬O §ä¤£¨ì¶i¤JÂI ,¦Ó¤£·|·í¾÷¡C ³o­Óª©¥»¤ñ¤W¦¸ªº´ú¸Õª©¼W¥[¤F¥i³]©w¼·´ß¼h¼Æ ,¦P®É¤]¼W¥[¤F¤@ ­Ó°»´ú¥~´ß¼h¼Æªº¤p¤u¨ã ,Åý¨ººØ¸g¹LÀ£ÁY¦AÀ£ÁYªºµ{¦¡ ,¯à°÷¤@¦¸¸Ñ¨M , ¬Ù±¼¤£¥²­nªº®É¶¡¡C ¦Ü©ó¦³ªB¤Í´£¨ì§Æ±æ¤º«Ø EXEWRITE ¥\¯à ,³oÂIµ§ªÌÆZ©êºpªº ,¦] ¬°¡y¼·´ß¾÷¡z·|¦û¥Î¥D°O¾ÐÅé¬ù8K ,¦pªG¦A¦û¥Î§ó¤jªº°O¾ÐÅé ,«h¥i¯à³y¦¨ À³¥Îµ{¦¡°O¾ÐÅ餣¨¬ ,¦P®É¬°¤FÁקK¥»µ{¦¡±þ¶Ë¤O¤Ó±j ,©Ò¥H®³±¼¤F³¡¥÷¤H ¤u´¼¼z ,§Æ±æ¦U¦ì¬ã¨sÂk¬ã¨s ,¤£­n®³¨Ó·í¯}¸Ñ¤u¨ã¡C ¬°¤F¤£­n¯Ô»~¦U¦ì¤Ó¦h®É¶¡ ,¥»µ{¦¡¤w¸g§â DELAY. ®³±¼ ,Åý±z¥Î °_¨Ó¤ñ¸û¶¶¤â ,¦pªG±z¤âÄoªº¸Ü ,¥i¥H·Q¿ìªk¯}¸Ñ ,¤º¦³·tÂäH¤u´¼¼zºX¼Ð ¶}Ãö (Default=OFF) ,¥i¥HÅýµ{¦¡°{¹L§ó¦h³´¨À ,¦pªG¦¹¶}Ãö¨S¦³¥´¶}ªº¸Ü ,¨ä¥\¤Oµ¥©ó 1.05 ª© ,¤£¹L¤@¯ë¨Ó»¡§A¬O¨S¦³¥²­n®ö¶O®É¶¡¥h¸Ñ¥¦ªº ,¦] ¬°¥¦®t¤£¦h¥i¥HÀ³¥I 90% ªº¥~´ß¤F¡C ¥»µ{¦¡¬° PD ª© ,¥ç§Y¤£½×±zı±o¦n¥Î¡BÃø¥Î¡B­×§ï¡B«þ¨©³£¨S¦³ Ãö«Y ,°ßµÛ§@Åv¤´Âk¡y³n³E¡z©Ò¦³ ,«D¸g§@ªÌ¦P·N ,¸T¤î³c½æ¹Ï§Q¡C -------------------------------------------------------------------------- µ{¦¡»Ý¨D¡G ¥»µ{¦¡¥u¥i¦b 80386 ¥H¤Wªº¾÷¾¹°õ¦æ ,¥B¹q¸£¤£¥i±¾¤J EMM ¨tªº «OÅ@¼Ò¦¡³nÅé ,¤£¹L HIMEM.SYS ¤£¦b¦¹­­(¦]¬°¥¦¥¼¶i¤J«OÅ@¼Ò¦¡)¡C ¦pªG ±zªº¹q¸£¤£¬O 80386 ªº CPU ,½Ð¤Å±j¦æ°õ¦æ¥»µ{¦¡ ,¥H§Kµo¥Í¤£¥i¹wª¾ªº «áªG¡C ³Q¥~´ß«OÅ@ªºµ{¦¡¥²»Ý¥H¥À¤ù¤è¦¡°õ¦æ ,¥B³Q«OÅ@ªºµ{¦¡­n¦³ÄY­« ªº½s½X¤â§Ç ,¤~¥i¥HÅý¥»µ{¦¡¶¶§Q§PÂ_¥X¨Ó¡C¹ï©ó¨S¦³½s½Xªºµ{¦¡ ,¤Ï¦Ó¨S ¦³¿ìªk§ä¨ì¶i¤JÂI»P¼·´ß¡C µù:½Ð¨Ï¥Î­ìª©³nÅé¤~¯à¥¿½T¤u§@. ©³¤U¨â­Ó½d¨Ò¬O¤¶²Ð¤@¼h¥~´ß¤Î¦h¼h¥~´ßªº¨Ï¥Î¤èªk¡C -------------------------------------------------------------------------- RIPPER32 EXE ·sª©¼·´ßµ{¦¡ 2.00 ¥¿¦¡ª© TEST EXE ´ú¦¡´ß¦³´X¼h WATCH EXE ¦b«ü©wªº CS:IP ³B¤UÂ_ÂI¡B¦^¼g -------------------------------------------------------------------------- ²©ö»¡©ú¡G Áä¤J RIPPER32.EXE <­n¼·´ßªºÀÉ®×> <°Ñ¼Æ> RIPPER32.EXE ¬O¥»¼·´ßµ{¦¡¥DÀÉ <­n¼·´ßªºÀÉ®×> ½Ð°O±oÀɮ׫᭱­n¥[¤W .EXE ©Î .COM <°Ñ¼Æ> ³Q¼·´ßªºÀɦ³°Ñ¼Æ­n¤U´NÄ~ÄòÁä¤J ¤£ºÞµ{¦¡¬O§_§ä¨ì¶i¤JÂI ,µ²ªG³£·|¶i¤J¸Óµ{¦¡ ,¦Ó§ä¨ìÃöÁäÂI®É ,¹q ¸£·| Beep ¤@Án ,ºò±µµÛ´N¶}©l¤ÀªR¶i¤JÂI ,¦pªG³o®É­Ô¤]¦¨¥\°õ¦æ , «h·|¦bµwºÐ²£¥Í REG.DAT »P BADY.DAT ¨â­ÓÀɮסC §ïÅÜ°O¾ÐÅé«á¦A¦pªkªw»s ,³Ì«á²½¥X EXEWRITE ´N¥i¥H¤F.... ¨ä¤¤ REG.DAT ¬O°O¿ý¦U¼È¦s¾¹ªº¼Æ­È ,¤º®e¦p¤U C>RIPPER32 XOE.EXE SAVE OK ! C>DEBUG REG.DAT (ªø«×¬° 10 byte) -d 100 l cx 15F3:0100 95 16 A5 16 00 00 A5 16 00 01 ¦¹¨Ò DS=1695 SS=16A5 SP=0000 CS=16A5 IP=0100 ¦Ó BADY.DAT «h¬O¨Ñ EXEWRITE¡BEXESHAPE ¨Ï¥Îªº¸ê®ÆÀÉ ,ªø«×¤£¤@©w¡C ========================================================================== ½d¨Ò¤@¡D¥u¦³¤@¼h¥Öªº¼·ªk¡G================================================ ========================================================================== ¥»½d¨Ò¬O COPYLOCK 3.43 ª© ,¦b¥¼¼·´ß«eªºª¬ºA¦p¤U A:\>dir Volume in drive A has no label Volume Serial Number is 3041-11CF Directory of A:\ RIPPER32 EXE 6010 ¥»¼·´ßµ{¦¡ COPYLOCK EXE 41216 ³QCOPYLOCK«OÅ@ªºµ{¦¡ 5 file(s) 57722 bytes 1140224 bytes free -------------------------------------------------------------------------- ¥Î¥»µ{¦¡²£¥Í¼·´ß°Ñ¦ÒÀÉ¡G A:\>ripper32 copylock.exe ¢z¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢{ ¢x Ripper/32 for 80386+ Matchine Version 1.07 ¢x ¢x (C) Copyright Werong Ho 1995-01-28 ¢x ¢|¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢} þ Search EXE Break point. BREAK=00001 (Dex) ¢w ¼·´ß¼h¼Æ ....°õ¦æcopylock.exe... SAVE OK ! -------------------------------------------------------------------------- ºò±µµÛ DIR ¬Ý¨ì¦h¥X¨â­ÓÀÉ®× A:\>dir Volume in drive A has no label Volume Serial Number is 3041-11CF Directory of A:\ RIPPER32 EXE 6010 01-01-96 10:07a COPYLOCK EXE 41216 01-01-96 10:10a REG DAT 10 ¢s ¼È¦s¾¹­È BADY DAT 34272 ¢} µ{¦¡°O¾ÐÅé¦sÀÉ 5 file(s) 92004 bytes 1105408 bytes free -------------------------------------------------------------------------- ±N¦¹¸ê®ÆÀɧï¦W ,¨Ã¸ü¤J¤@­Óªø¾nµ{¦¡ ,¥Î¥H§ïÅÜ°O¾ÐÅé¶q ,µM«á¦A°õ¦æ¤@ ¦¸¼·´ß¤âÄò. C:\>REN *.DAT *.1 C:\>TSR (ÀH«K¤@­Óªø¾nµ{¦¡) A:\>ripper32 copylock.exe -------------------------------------------------------------------------- ©ó¬O§A´N¦³¨â²Õ¤£¦Pªº¼È¦s¾¹ ,±µµÛ´N·Ç³Æª± EXEWRITE Á٭쥻µ{¦¡Åo. Volume in drive A has no label Volume Serial Number is 3041-11CF Directory of A:\ RIPPER32 EXE 6010 01-01-96 10:07a COPYLOCK EXE 41216 01-01-96 10:10a REG 1 10 01-01-96 10:30a BADY 1 34272 01-01-96 10:30a REG DAT 10 01-01-96 10:30a BADY DAT 34272 01-01-96 10:30a 7 file(s) 126286 bytes 1070592 bytes free -------------------------------------------------------------------------- ¦bª± EXEWRITE «e¥²»Ý¥ý°O¿ý¦U¼È¦s¾¹­È ,¦p¤U©Ò¥Ü¡G A:\>debug reg.1 -d 100 l cx 15DD:0100 1F 08 2F 08 00 00 2F 08-00 00 ../.../... ±o¨ì DS=081F SS=082F SP=0000 CS=082F IP=0000 A:\>debug reg.dat -d 100 l cx 15DD:0100 52 0B 62 0B 00 00 62 0B-00 00 R.b...b... ±o¨ì DS=0B52 SS=0B62 SP=0000 CS=0B62 IP=0000 -------------------------------------------------------------------------- ©Ò¦³ªº¼È¦s¾¹­È³£¦³¤F ,±µµÛ´N¬O¨Ï¥Î EXEWRITE ÁÙ­ì¥Dµ{¦¡. >>> EXE FILE WRITE PROGRAM <<< Write by Gent Chen The first file is Rewrite,you best have a back file Please input first exe file name :bady.1 Please input program DS(START PSP),SS,SP,CS,IP : (dec)&h81f,&h82f,0,&h82f,0 Please input second exe file name :bady.dat Please input program DS(START PSP),SS,SP,CS,IP : (dec)&hb52,&hb62,0,&hb62,0 Please input NEW EXE file name :bady.exe Make EXE file,please wait .... EXE FILE MAKE SUCCESSFULL -------------------------------------------------------------------------- ¤ñ¸ûÁÙ­ì«áªº¥DÀÉ ,»P­ì©lÀɮתºªø«×®t²§ ,Áö¼Wªø¤F¤Ö³\ ,¦ý¬O¤´µM¥i¥H ¥¿½T°õ¦æ¡C Volume in drive C is XXXXXXXXX Volume Serial Number is 145D-14D8 Directory of C:\ SOURCE EXE 33513 ¥¼«OÅ@ªº¥DÀÉ COPYLOCK EXE 41216 ³QCOPYLOCK«OÅ@ªºµ{¦¡ BADY EXE 36674 ÁÙ­ì«áªº¥DÀÉ ========================================================================== ½d¨Ò¤G¡D¦³¦h¼h¥Öªº¼·ªk¡G(¦pªG¤£ª¾¹D¦³´X¼h ,¤]¥i¥H¥Î¦¹ªk) ================= ========================================================================== ¡i ´ú¸Õ¥~´ß¦³´X¼h ¡j ­º¥ý´ú¸Õ¤@¤U­n³Q¼·´ßªº¥DÀɦ³´X¼h C>test sample.exe ¢z¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢{ ¢x Ripper/32 for 80386+ Matchine Version 1.07 ¢x ¢x (C) Copyright Werong Ho 1995-01-28 ¢x ¢|¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢} þ Search EXE Break point. .....°õ¦æ¦³«OÅ@ªºµ{¦¡ BREAK=00013 (Dex) ...... ¦³ 13 ¼h¥~¦ç -------------------------------------------------------------------------- ¡i ³]©w¼·´ß¼h¼Æ ¡j (ª©¥» v1.05 ·s¼W¥\¯à) ª¾¹D¥~´ßªº¼h¼Æ¥H«á ,¥i¥H¦b DOS ¤UÁä¤J "SET BREAK=13" ¥Î¨Ó ³]©w DOS ªºÀô¹ÒÅÜ¼Æ ,Åý¹q¸£°O¦í¼·´ß°Ñ¼Æ ,¥H«á¦b°õ¦æ RIPPER32 ®É´N ·|¦Û°Ê³Q¨Ï¥Î¡C(³Ì¤p¬° 1 ,³Ì¤j­È¬° 65535) -------------------------------------------------------------------------- ¡i ²£¥ÍÀɮצ^¼g¥Îªº°Ñ¦ÒÀÉ ¡j C>ripper32 sample.exe ¢z¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢{ ¢x Ripper/32 for 80386+ Matchine Version 1.07 ¢x ¢x (C) Copyright Werong Ho 1995-01-28 ¢x ¢|¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢} þ Search EXE Break point. BREAK=00013 (Dex) ¼· 13 ¼h¥~´ß ................ ²£¥Í²Ä¤@¦¸°Ñ¦ÒÀÉ SAVE OK ! C>ren *.dat *.1 C>tsr (ªø¾nµ{¦¡) C>ripper32 sample.exe ¢z¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢{ ¢x Ripper/32 for 80386+ Matchine Version 1.07 ¢x ¢x (C) Copyright Werong Ho 1995-01-28 ¢x ¢|¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢w¢} þ Search EXE Break point. BREAK=00013 (Dex) ................ ²£¥Í²Ä¤G¦¸°Ñ¦ÒÀÉ SAVE OK ! -------------------------------------------------------------------------- ¡i °O¿ý°Ñ¦ÒÀɦU¼È¦s¾¹­È ¡j C>debug reg.1 -d 100 109 13EE:0100 E3 0B 90 19 90 01 40 17-12 00 C>debug reg.dat -d 100 109 13EE:0100 ED 0C 9A 1A 90 01 4A 18-12 00 -------------------------------------------------------------------------- ¡i EXE Àɦ^¼g¡B²£¥Í¼·´ßÀÉ ¡j >>> EXE FILE WRITE PROGRAM <<< Write by Gent Chen The first file is Rewrite,you best have a back file Please input first exe file name :bady.1 Please input program DS(START PSP),SS,SP,CS,IP : (dec)&hbe3,&h1990,&h190,&h1740,&h12 Please input second exe file name :bady.dat Please input program DS(START PSP),SS,SP,CS,IP : (dec)&hced,&h1a9a,&h190,&h184a,&h12 Please input NEW EXE file name : samp.exe Make EXE file,please wait .... EXE FILE MAKE SUCCESSFULL -------------------------------------------------------------------------- ¡i RIPPER32.EXE ¦³´X­Ó¦a¤è¶}©ñµ¹¨Ï¥ÎªÌ­×§ïªº§ó¤H©Ê¤Æ ¡j 1. §ï¹w³]¼·´ß¼h¼Æ: ´N¬O¦b¥¼¤U "SET BREAK" ªº©R¥O®É ,·|¼·´X¼h´ß ¥i¥Î PCTOOLS ·j´M "COUNT=" ªº¦r²´ , ±N«á­±ASCII½X§ï±¼§Y¥i , ¹w³]­È 01 ªí¥Ü¼·±¼¤@¼h ,À´¤F¶Ü ? File=RIPPER32.EXE sector 0000003, Clust 01985 Displacement ¢w¢w¢w¢w¢w¢w¢w¢w Hex codes ¢w¢w¢w¢w¢w¢w¢w¢w¢w ASCII value 0400(0190) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0416(01A0) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0432(01B0) 00 00 43 4F 55 4E 54 3D 01 00 42 52 45 41 4B 00 COUNT= 0448(01C0) 00 00 00 6F 02 00 00 5C 00 00 00 6C 00 00 00 00 0464(01D0) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0480(01E0) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0496(01F0) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2. ­×§ï¦sÀɪº¸ô®|©ÎÀɦW: (½d¨Ò¬° 1.05ª©¡B¨ä¥¦ª©¥»§ïªk¤@¼Ë) File=RIPPER32.EXE sector 0000005, Clust 01986 Displacement ¢w¢w¢w¢w¢w¢w¢w¢w Hex codes ¢w¢w¢w¢w¢w¢w¢w¢w¢w ASCII value 0096(0060) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0112(0070) 00 43 3A 5C 52 45 47 2E 44 41 54 00 00 00 00 00 C:\REG.DAT...... 0128(0080) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ......¥i­×§ï..... 0144(0090) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................. 0160(00A0) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0176(00B0) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0192(00C0) 00 00 00 00 00 00 00 00 00 00 00 00 43 3A 5C 42 C:\B 0208(00D0) 41 44 59 2E 44 41 54 00 00 00 00 00 00 00 00 00 ADY.DAT......... 0224(00E0) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .....¥i­×§ï..... 0240(00F0) 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ............ -------------------------------------------------------------------------- TEST.EXE ·s¼Wĵ§i°T®§¡G (ª©¥» v2.00 ·s¼W¥\¯à) 1.SoftICE Detect (INT 3)=00000 (Dex) ªí¥ÜÀ³¥Îµ{¦¡¦b°õ¦æ¹Lµ{¤¤ ,·|³z¹L INT_3 ¨Ó°»´ú S-ICE ¬O§_¦s¦b , ¥»µ{¦¡¬OÄdºI INT_3 ,¨ÃºÊ¬Ý SI=4647 DI=4A4D ,­Y³o¨Ç±ø¥ó³£²Å¦Xªº ¸Ü ,ªí¥ÜÀ³¥Îµ{¦¡¦³¥h°»´ú S-ICE ¬O§_¦s¦b ,§Ú«K·|§â¦¹°O¿ý­È¥[¤@ ,·íµ{¦¡µ²§ô«á ,¼·´ß¾÷«K·|§â°»´úªº¦¸¼Æ¨q¥X ;­Y±z¹Á¸Õ­n¥Î S-ICE ¹ï¦¹³nÅé°»¿ùªº¸Ü,°È¥²­nª`·N¦¹³´¨À¡C 2.80386 Engine Error ! ªí¥ÜÀ³¥Îµ{¦¡¤]¨Ï¥Î¨ì 80386. ªº¬Y¨Ç¾÷¯à ,¬°¤F¬Û®e©Ê°_¨£ ,¥»µ{¦¡ ·|¥Ã¤[Ãö³¬ºÊ¬ÝÀ³¥Îµ{¦¡ªº°Ê§@ ,¦pªG±z¤â¤W®³¨ìªº¬Oµù¥Uª© ,À³¸Ó¤£ ·|¦³¦¹°T®§¥X²{¡C 3.INT 1 used=00000 (Dex) ªí¥ÜÀ³¥Îµ{¦¡¦³¨Ï¥Î INT_01 ¨Ó°µ¸Ñ½X°Ê§@ ,«á­±ªº¼Æ¦r¬O©I¥s¦¸¼Æ , ¥¿±`ªºµ{¦¡¬O¤£¥i¯à·|¥h¨Ï¥Î INT_01 ªº ,©Ò¥H¼·´ß¾÷¤]·|ºÊ¬Ý¦¹¤¤Â_ µo¥Í¦¸¼Æ¡C (¥]§t¦]¬°¶}±Ò 'T' ºX¼Ð¡B´¡Â_01 ©Ò¤Þ°_ªº¤¤Â_) (µù¥Uª©ÁÙ¥]¬AÀ³¥Îµ{¦¡¨Ï¥ÎµwÅ餤Â_ªº¦¸¼Æ) 4.INT 3 used=00000 (Dex) ªí¥ÜÀ³¥Îµ{¦¡¦³¨Ï¥Î INT_03 ¨Ó°µ¸Ñ½X°Ê§@ ,«á­±ªº¼Æ¦r¬O©I¥s¦¸¼Æ , ¥¿±`ªºµ{¦¡¬O¤£¥i¯à·|¥h¨Ï¥Î INT_03 ªº ,©Ò¥H¼·´ß¾÷¤]·|ºÊ¬Ý¦¹¤¤Â_ (¥]§t©I¥s S-ICE ¨ç¦¡ªº¦¸¼Æ) 5.INT 9 used=00000 (Dex) ªí¥ÜÀ³¥Îµ{¦¡¦³¨Ï¥Î INT_09 ¨Ó°µ¸Ñ½X°Ê§@ ,«á­±ªº¼Æ¦r¬O©I¥s¦¸¼Æ (°£¤F¨Ó¦ÛÁä½L¥H¥~ ,©Ò¦³²£¥Í INT_09 ªº°Ê§@¬Ò·|³QÅã¥Ü) 6.INT 7 Detect ! (¶ÈÅã¥ÜÀ³¥Îµ{¦¡¬O§_¨Ï¥Î¦¹´¡Â_µ{¦¡ ,¥D­n¬OÅý¨Ï¥ÎªÌª¾¹D¥Î S-ICE °£¿ù®É ,ª`·N¦¹´¡Â_·|·í±¼Âª© S-ICE. ) RIPPER32.EXE ·s¼W°T®§¡G (ª©¥» v2.00 ·s¼W¥\¯à) All Register List : DS:???? SS:???? SP:???? CS:???? IP:???? ­Y RIPPER32 §ä¨ì¶i¤JÂI ,·|¨q¥X¦¹°T®§. -------------------------------------------------------------------------- ·s¼WÀÉ®× WATCH.EXE (ª©¥» v2.01 ·s¼W¥\¯à) RIPPER32 §ä¨ì¶i¤JÂI«á ,·|±N¦U¼È¦s¾¹­È¦s¦^ REG.DAT ,¦Û¥»ª©¥H«á ¼W¥[ 4 BYTE ,¥Nªí BADY.DAT ªºÀɮתø«×¡C ¦]¬°¦b¯u¹ê¼Ò¦¡¤U RIPPER32 ·|¥ÌÂZµ{¦¡ªº³¡¥÷°Ê§@ ,¬°¤FÅý¥ÌÂZ´î ¨ì³Ì§C ,µ§ªÌ¼W¥[¥»µ{¦¡ ,Åý¦sÀɪº¸ê®ÆÀɧ󥿽T ,¥ÌÂZ´î¨ì³Ì§C¡CWATCH.EXE ·|Ū¨ú C:\REG.DAT ÀÉ ,®Ú¾Ú¦¹­Èª½±µºÊ¬Ý CS:IP ,·í°õ¦æ¨ì¦¹«á ,·|±Nµ{¦¡ ½X¦sÀÉ ,¦]¦¹§A¥²»Ý«O«ù RIPPER32 & WATCH ¨âµ{¦¡°õ¦æ®É ,¹q¸£ªº°O¾ÐÅé³Ñ ¾l¶q»PÀô¹ÒÅܼƤ@­P ,¥H§K§ì¤£¨ì¤¤Â_ÂI¡C ³Ì«á±N®·®»¨ìªºµ{¦¡½X¦A¼g¦^ BADY.DAT ¤º ,¦¹Àɪº¸ê®Æ±N³Ì¥¿½T , «OÅ@¼Ò¦¡ª©ªºÀ£ÁYÀɤºµL¦¹ÀÉ ,¦]¬°«OÅ@¼Ò¦¡ºÊ¬Ý V86 ªºµ{¦¡¬O¤£·|¥ÌÂZµ{ ¦¡°õ¦æªº¡C -------------------------------------------------------------------------- µ²½×¡G ¥»µ{¦¡¾A¥Îµ´¤j¦h¼Æªº¥~´ß ,¦ý¤]·|¦³¨Ò¥~ªº±¡§Î ,­ì¦]¬O¥»³nÅé ¨Ã¥¼¯u¥¿¶i¤J«OÅ@¼Ò¦¡ ,©Ò¥H¤´¥i¯à¨ü¨ì¨ä¥¦¦]¯Àªº¼vÅT³y¦¨·í¾÷ ,¥Ø«e¤w ´ú¸Õªº¥~´ß¦p¤U¡G(ÁÙ¦³¤@¨Ç¤£ª¾¦Wªº¥¼¦C¥X) ¥~´ß¦WºÙ «OÅ@¤è¦¡ ª¬ºA ³Æµù --------- -------- ---- ---------------------------------- PKLITE À£ÁY OK PREXCM50 ¨¾TRACE OK ¥u¤ä´© EXE ÀÉ XOE ¨¾TRACE OK COPYLOCK 3.43 KeyDisk OK KPUTIL KeyPro OK SBLOCK KeyPro OK ¦³¨Ç¥i¥H. µøÀɮצ³µL³Q½s½X DTKLOCK KeyPro OK HASP KeyPro OK SMARTLOCK KeyPro OK PPIP ¨¾TRACE OK ¤£¤ä´©. µù¡G¦³¨Ç¥i¥H¬O«ü³Q«OÅ@«á ,¦³ªºÀÉ¥i¥H¸Ñ¥X¡B¦ý¬O¦³ªºÀÉ«o¤£¦æ ,­ì¦]¬O ¥»ª©ªº¤H¤u´¼¼z¤£¨¬ ,ÁÙµLªk§PÂ_¥X½Ö¤~¬O¶i¤JÂI¤§¬G¡C ========================================================================== ¤p°O: µoªí¤é´Á ª©¥» ¦W ¥Ø ¥\¯à ---------- ---- ------ ------------------------------------------------ 1995/01/05 ¥¼©w ´ú¦¡ª© ¥i¼·¤@¼h¥~¥[«OÅ@ 1995/01/23 1.05 PD ª© ¤ä´©¦h¼h¥~´ß¼·´ß 1995/01/28 1.07 µù¥Uª© ¥H½Ķ«ü¥O¤è¦¡¨Ó¨ú¥N°lÂÜ°õ¦æ (¥¼µoªí) 1995/02/16 2.00 ´ú¸Õª© ¥H1.05ª©¬°¬[ºc ,¥[¤W§ó¦hªº°T®§ ,®³±¼ DELAY (¥¼µoªí) 1995/02/20 2.01 ¥¿¦¡ª© ¥[¤W¤@­ÓªþÄݤu¨ã WATCH.EXE ,­×§ï REG.DAT Àɮ׮榡 1996/09/29 3.00 ¥¿¦¡ª© ¥[±j¼·´ß¯à¤O ,¥á¥X©Ò¦³µ{¦¡ (§t.ASM)