2025-10-3  

˶DT.e5ı༭

2020-12-25 

1 ˶PNGʽļ֧

PSʹPNG͸ʽ벻Ҫʹû֡и߼

2014-3-17 ˵

1 ˶Mcallļı༭
2 һmeffļмͼĴλ




ͨ֡ ֱʾ֡

֡ ֱʾԺͨ֡һ̶ȵĻ㣬ʹ֮һضĸ

       ʵЧȫͼʱдǶĳضа͸䣬֡岻Mcall鲻Ҫ֡СļʵʱҲɼٶڴռ









˵

1 ʱЧϷʱЧ죬ϷЧΪ׼һ㶼Ϊ1

2 ЧҪmeff.e5ͬһĿ¼wavĿ¼²ܲţԤʱûõЧļSe_m_??.wav

3 ɫΪ͸ɫʹãڴͼʱҪԷɫΪɫӰԤЧ

4 ûͼƬ͸ͼЧЧҪϷвܿĳֵοԭ

5 ʾﶯָĿ佫ܵʱʾһǺܶԲڲͼһʼʾָ֡ʱſʼʾ֮ÿһ֡ʾ

  ԺͲԵĶʵͬͳһʹܹ


6 ԭmeff.e5ѹʽģñ޸ĺ󣬽Խѹʽд롣






ָͼķʹ5.5棭6.1棬6.2exeдκ6.2淢¥

ԭexeλ4866C0UEַ 858C0ʼҵ5.5Ժİ汾4866BEUEַ 858BEȡֵΧ063ÿʹ1ֽڣʵǶӦMeff.e5ͼƬšҲԿexeʹ100Ųͼ

64ԺͰͼ9ԻҪȲMcallXX.E5Ĵ󶯻֮Meff.e5ͼƬ


ԭ5.5֮İ汾Ĵһ

0042162F  |> \C645 EC 01    MOV BYTE PTR SS:[EBP-14],1               ;  
00421633  |.  EB 36         JMP SHORT Ekd5.0042166B
00421635  |>  C645 EC 03    MOV BYTE PTR SS:[EBP-14],3               ;  ˮ
00421639  |.  EB 30         JMP SHORT Ekd5.0042166B
0042163B  |>  C645 EC 05    MOV BYTE PTR SS:[EBP-14],5               ;  
0042163F  |.  EB 2A         JMP SHORT Ekd5.0042166B
00421641  |>  C645 EC 07    MOV BYTE PTR SS:[EBP-14],7               ;  
00421645  |.  EB 24         JMP SHORT Ekd5.0042166B
00421647  |>  8B4D E0       MOV ECX,DWORD PTR SS:[EBP-20]            ;  ͼ
0042164A  |.  E8 96060000   CALL Ekd5.00421CE5
0042164F  |.  C645 EC FF    MOV BYTE PTR SS:[EBP-14],0FF
00421653  |.  EB 16         JMP SHORT Ekd5.0042166B
00421655  |>  C645 EC 16    MOV BYTE PTR SS:[EBP-14],16              ;  
00421659  |.  EB 10         JMP SHORT Ekd5.0042166B
0042165B  |>  C645 EC 39    MOV BYTE PTR SS:[EBP-14],39              ;  ȸ
0042165F  |.  EB 0A         JMP SHORT Ekd5.0042166B
00421661  |>  C645 EC FF    MOV BYTE PTR SS:[EBP-14],0FF             ;  
00421665  |.  EB 04         JMP SHORT Ekd5.0042166B
00421667  |>  C645 EC 0A    MOV BYTE PTR SS:[EBP-14],0A              ;  ׻






