
: ߴ, ID: Paul Gao,  BBS վ. BBS վ̨绰: (024)3846411.
====== Error Free 01/20 =======================================================

Drag & Zip

> >Drag And File Win 95/NT               : 7000000000
> 
>   Ե, ǲ Drag & Zip ; ˰ҲҲ (
>   ʵҵһ  Cracker վ,  Drag & Zip ϰ, 
>   лֶ׬˺ü, ) ֻ SoftICE95
>   ׷׷!
> 
>   Ҿ '7878787878'  Key! ΪʲôҪ '7878787878'  Key
>   ? Ϊ '0123456789' ڵ,  Search
>   λַ, ܾͲҴ 'ִ' ֮λַ.
> 
>   ΪʲôҲ '6767676767' Ҫ '7878787878' ? Ϊ "
>   " ! ܹë, ϰ˵ "ôô X X ".
> 
>   SoftICE ҳ '7878787878' ִλַ,  Memory  Read /
>   Write ĵ֮, Ϳʼһһ Trace, ϵ, ñֽϼ¼
>   ɵλַ ... :)
> 
>   ׼ҳ "עЧ" ĵص, ͣİ [F-10], [F-10] 밴
>   ǧ....,  Call ʾ, ǲ "עЧ
>   " ? "ע" ?? Ŵ۾ٿ,  "ע" ! ?
>   жκζ?
> 
>   Īע '7878787878' ?  Drag & Zip , 
>   , ǲ Drag & Zip װƭ. Ϲèע,
>   ʷһǵһ...

====== Error Free 02/20 =======================================================

CAD/DRAW 4.1 Level 2

>  1. Winice  Win95
>  2.ִ CAD/DRAW 4.1, ѡע,
>  3., ע 78787878 , ôʱOϰ.
>  4. Ctrl_D  winice
>  5. S 30:0 L FFFFFFFF '78787878' , ѳλַ ss:ssssssss
>  6. BPM ss:ssssssss ϵ.
>  7. F5  CAD/DRAW 4.1.
>  8. <Կ> , winice ص, ֽ winice .
>  9. BD * ϵ
> 10. winice , һֱ F10, : (<- ᰴõ, !)
> 
>   14F:402332    CALL    EDI
>                 LEA     EAX,[ESP+20]
>                 MOV     EDI,[0064...]
>         :               :
>                 LEA     EAX,[ESP+00000024]
>                 LEA     ECX,[ESP+20]
>                 PUSH    EAX
>                 PUSH    ECX
>   14F:4023AD    CALL    4719F0  <--   F10 , ǵû F8  CALL
> 
> 11. CALL ѹ F10, :
> 
>   14F:4719F0    PUSH    EBX
>         :               :
>         :               :
>   14F:471A11    CALL    471870  <-- ѹ F9 ϵ.
> 
> 12.ٰ F5  CAD/DRAW 4.1
> 13.¸ʽע:
> 
>    04200-04.00-00000-000   <- 治пĿհ.
> 
> 14.ٰ <Կ> , ֻᱻ winice ص.
> 
>   ϵ address 14F:?????? ҵһ ( ?????? ӦһŶ,
>   һӦ 14F: ),  G 471A69
> 
>   14F:471A69    CMP     ECX,EAX <-  EAX  ʮλ kkkkk.
>                 JZ      471A74     ECX Ӧ 0, Ϊ 00000 .
> 
> 15.ٰ F5  CAD/DRAW 4.1
> 16.ѻʮλ 5 (kkkkk), 뵽¸ʽע:
> 
>   04200-04.00-kkkkk-000
> 
> 17.ٰ <Կ> , ֻᱻ winice ص.
> 
>    G 471AB7
> 
>   14F:471AB7    SUB     EAX,EDX <-  EDX  ʮλ ggg.
>                 POP     EBP        EAX Ӧ 0, Ϊ 000 .
>                 POP     EDI
> 
> 18. BD * ͣ, ٰ F5  CAD/DRAW 4.1
> 19.ѻʮλ 3 (ggg), 뵽¸ʽע:
> 
>    04200-04.00-kkkkk-ggg
> 
> 20.ٰ <Կ> , עɹ! Ya!
> 
> ע: һ 04200  ǿԵ 04399 , 04.00 ҲԵ 04.19 ;
>     ֵ, Ӱ쵽, ʸĴʱ, Ҫ
>      Trace  һ,  kkkkk & ggg ı仯.

====== Error Free 03/20 =======================================================

Eudora 3.0 Pro û 2.x, SICE Ҳ԰װ

>   1. softice95   win95.
>   2.ִ eudora.tmp Ŀ¼µ setup . <-  "" ⿪
> ֻû 2.1.2.
> 
>   3. <Next> Ŀ¼趨ĵط,  brower .
>   4.ȰĿ·趨, ٰ ctrl-d  winice .
>   5. BPX USER!LOCKMYTASK  ϵ
> 
>   6. F5  SETUP,  <NEXT> һʾ 2.1.2  ,
>     ûϵ,  <ȷ> ֻᱻ winice ص.
> 
>      BC * ϵ.
> 
>   7.һֱ WINICE °ס F10, סűȽ! ΪҪ
>     һ. Ҫעһ SOFTICE  °벿д, һʼ
>     Ӧ USER(08) .
> 
>   8.Ǹֱ _INST0432!.text+???  ͣ, ûͣûϵ
>     , Ҫû, Ӳ.
> 
>   9. U 0043B76C, ͻῴ:
> 
>   14F:0043B76C  CMP     DWORD PTR [EBP-14],01   <- ϵ.
>                 JMP     0043B683
>                 CMP     DWORD PTR [EBP-14],02
>                 JMP     0043B6A7
>                 CMP     DWORD PTR [EBP-14],03
>                 JMP     0043B6CB
>                 CMP     DWORD PTR [EBP-14],04
>                 JMP     0043B6EF
>                 CMP     DWORD PTR [EBP-14],05
>                 :               :
> 
>  10. BD * ͣһ,  F5  SETUP, Ȼȶ
>     , ٰ Ctrl-d ,  BE * ʹ winice ָ.
> 
>  11. F5  SETUP .
>  12. BROWER ϵ <NEXT> , ʱᱻ winice  .
> 
>  13.һΰ F5 , ֻᱻ winice .
>  14.ڶΰ F5 , һᱻ winice .
> 
>  15. E EBP-14 ļ. ԭӦ 5. 
>     ĳ 1.
> 
>  16. BD * ͣ_,  F5  pass !
> 
>   ! s-ice жʱʱͣ, Աʱһһ
>   ģ, ֮, , һϵʱ!

====== Error Free 04/20 =======================================================

Instant File Access

>   ʽܺ׷, ϰƽ, ǲֻҵ (1)-(11)
>   Ĳ, ȻľԼ׷һ׷ (Trace & Trace), ׷ĵ
>   ,  Hacker ѧԺע.
> 
>   (1)  winice  Win95 .
>   (2) ִ IFA  ѡע, ȵȶ ..
>   (3) ע 78787878 <- ô (78787878) ϰ.
>   (4)  Ctrl_D  winice
>   (5) S 30:0 L FFFFFFFF '78787878'
> 
>        WINICE ѳһλַ ss:ssssssss
> 
>   (6) BPM ss:ssssssss   <- ϵ
>   (7)  F5 ѿȨ IFA .
>   (8)  IFA  ° OK !  WINICE , 
> 
> xxxx:9EAA  REPZ MOVSD           ; <- ڴ˵, Ϳʼ F10
>                 POP     ECX
>                 AND     ECX,3
>            REPZ MOVSB
>                 XOR     DX,DX   ; <- , ͣ
> 
>   (9)  BD * ͣǰĶϵ
>  (10)  BPM ES:EDI-8 һ.
>  (11)  F5  IFA, һֱ, :
> 
> xxxx:1AA7       CMP     AL,20   ; <- ڴ˵.
>                 JZ      1AA6    ; <- Ҫ JZ Ϊվ
>                 CMP     AL,9    ;    ߲! ŵ޶
>                 JZ      1AA6    ;    ̨Զ. ҵһҪ
>                                 ;    ȥϢվ
> 
>  (12)  BD * ͣǰĶϵ, һֱ F10  :
> 
> xxxx:1AB8       LODSB           ; <- Ȧ
>                 CMP     AL,39   ;
>                 JA      1ADC
>                 :       :
>                 JMP     1AB8    ; <- 㿴ȥ
> 
> ; ûϵ, ͬ, ֻܰ˴, Ϊע
> ; ˸, ڼǰ˸ǲֵ. , Ϣվ
> ; Ϣ, Լ, ̰!
> 
> xxxx:1ADC       POP     AX      ; <- ǾͲҪ, αƵ 
>                 CMP     AL,2D   ;     F7 ٰ F10, .
> 
>  (13)  F10  , ߵ.....
> 
> xxxx:D5ED       CALL    D934
>                 ADD     SP,06
>                 CMP     AX,[EP-08]  ; <- ߵͣ, ̨! ³.
>                 JNZ     D602        ; <-  D602 ûϷŶ!
>                 CMP     DX,[BP-06]
>                 JNZ     D602
> 
>  (14)  DX  AX ֵ׼ȷĳ, DX  MSWord, AX  LSWord
>       , ųһ 4 bytes   16 λ,   10 λ,
>       ҪĶ..

====== Error Free 05/20 =======================================================

ACDsee for win95 1.0

>   ע˶ routine   beta10 һģһ, ACDsee95 1.0 beta
>    10 ҽ, ƪȫ Copy beta10  ƪʾ, ٸһ
>   Сط.
>   -----         -----           -----           -----
>   ʽܺ׷, ϴǸ IFA  ׷һ, Ϊע
>   ʽӵ, ҾͲ, ֱǿȥ.
> 
>   ϰƽ, ˳ʽ˵Ҳ, ǲֻҵ (1)-(11) 
>   , Լϰ. ׷ĵ,  Hacker ѧԺ
>   ѵҲ͹!
> 
>   (1)  winice  Win95 .
>   (2) ִ  acdsee version 1.0, ѡע, .
>   (3) ע 78787878 <- ô (78787878) ϰ.
>   (4)  Ctrl_D  winice
>   (5) S 30:0 L FFFFFFFF '78787878'
> 
>        WINICE ѳһλַ ss:ssssssss
> 
>   (6) BPM ss:ssssssss   <- ϵ
>   (7)  F5 ѿȨ acdsee .
>   (8)  acdsee ° OK !  WINICE , 
> 
> xxxx:9EAA  REPZ MOVSD
>                 POP     ECX    ; <- b˵, Ϳʼ F10
>                 AND     ECX,3
>            REPZ MOVSB
>                 XOR     DX,DX   ; <- , ͣ
> 
>   (9)  BD * ͣǰĶϵ
>  (10)  BPM ES:EDI-8 һ.
>  (11)  F5  acdsee, һֱ, :
> 
>                 MOV     EDI,EBX
> 14F:40363C      REPNZ   SCASB   ; <- ڴ˵
>                 NOT     ECX
>                 DEC     ECX
> 
>  (12)  BD * ͣǰĶϵ,  F10  һֱߵ:
> 
>  ע: ᾭб, B Loop , Լ۾һ
>      , α¼ F7 , ׷ٵʱŶ!
> 
> 14F:4035C9      CALL    403620          ; <- Ӵ Subroutine
>                 LEA     EAX,[ESP+48]    ; <- 
> 
>                 LEA     ECX,[ESP+74]    ;     '' ,
>                 ADD     ESP,10          ; <- ԰Ѷϵڴ.
>                                         ;  "d eax"  "d ecx" .
> 
> ;  Username ˳ 'ע' ò; ǣ
> ; N, ѡע,  '' ƿעɹ
> ;  Username , ͱȽ׶.
> 
>                 MOV     DL,[EAX]        ;
>                 CMP     DL,[ECX]        ; <- Ƚַ
>     4035DD      JNZ     $Error          ; ->  4035F9 
> 
>                 OR      DL,DL
>                 JZ      $Yes            ; <- , ǱȽ.
> 
>                 MOV     DL,[EAX+1]
>                 CMP     DL,[ECX+1]      ; <- Ƚżַ
>                 JNZ     $Error          ; ->  CPU  ߵ $Error .
>                 OR      DL,DL
>                 JNZ     $next..         ; , ǱȽϻû
> 
>     $Yes        XOR     EAX,EAX         ; <-- Yes!
>                 JMP     $Ret_Rdy
>                                         ; ʾ:
>     $Error      SBB     EAX,EAX         ; <- Բ cpu  ߵһ
>                 SBB     EAX,-01         ;
>                 :       :
>     $Ret_Rdy    :       :
> 
>  (13) ص 4035DD , ҪѾ, Լ
>       . ˲Ҫ˵, һҪǿ Hacker 
>        "ħ" ȥ.
> 
>  һ Soft-ICE  ָ˵: 뿴еʱ,  code on ..

====== Error Free 06/20 =======================================================

Paint Shop Pro 4.12 beta2

>   Ȱϵͳڸһ, ͨΪ˷, һһ.
>   ִ, Ȼܳ˱ X  Ĵ..
> 
>    ldr  ῴ...
> 
> 14F:4CF3F0      INVALID         ; <-  Soft-ICE ֵĵط, ûϵ
>                 :               ;    һ [F8] . 
> 
>     4CF3F6      PUSH    EBP     ; <- αڴ, ʼ [F10]  ׷!
>                 MOV     ESP,ESP
>                 MOV     EBP,ESP
>                 :       :
>                 CALL    [.....]
>                 PUSH    EAX
>     4CF542      CALL    4CFB54  ; ׷밴 [F8]  CALL .
>                                 ; ٻ [F10]
> 
>   Ϊʲô֪ call Ҫ f8 ? Ϊ f10  
>   Ǹ call ʱ,  "̧ͷ"  "ڸʾ" , 
>   ֪Ǹ call , ۲..
> ----
>                 :       :
>                 PUSH    DWORD PTR [EBP+..]
>     4CFB64      CALL    4CFBC2  ; ׷ٰ [F8] ȥ.
> 
>    call Ҫ f8 ۲ԭǻҪ? Ϊ f10
>   Ǹ call ! O.K ?
> ----
>     4CFBC2      JMP     [4F8748] ; ٰһ [F8]  (׷ĵ
>                                  ; ȥ! )
> 
>   ΪʲôҪ f8 ? Ϊָպ÷ F8 !  CALL
>   ֮, F8 & F10  ֮öһ, ǵִ.
> ----
>   ʱѾ MFC42!.TEXT ķΧ. û, ֻ
>   [F10] ׷..
> 
>                 PUSH    EBP
>                 MOV     EBP,ESP
>                 :       :
>   5F40A51B      CALL    [EBX+58] ; <- ׷.  [F8] .
> ----
>     4031B6      INVALID         ; <- , ûϵٰһ [F8]
>                 :               ;    ͺ, :
> 
>    invalid  һǲ֪ʲô, ִ˶ʱ, 
>    F8 ಻ʲô,  F10  ͬ, ʱ
>   .
> ----
>   Ya! ֻص psp!.text ,  psp  һ, ÿ.
> 
>     448420      MOV     EAX,FS[0....]
>                 :       :
>                 :       :               ; ! һ泤, ˺þúþ
>                 MOV     EBX,[EAX]
>                 PUSH    00000080
>     4487B4      CALL    [EBX+000000C0]  ; <-  F10 , ̽N.
>                 TEST    EAX,EAX
>                 JZ      448...  ; Jz!?  , ǿ eaxΪʱ, 
>                 :       :       ; ʾɹ, ϵͳѾɹ, 
>                 :       :       ; ʹʽ. һ, һŻ.
>                 :       :       ;
>                 :       :       ; ְ F10  ˺þ.
>                 ;       :       ;
>                 CALL    40280B  ; <- Ҫ ..
>                 TEST    EAX,EAX
>                 JZ      ...     ; <- ûп 'JZ' ?
>                 PUSH    00
>                 PUSH    10
>     44896A      CALL    4CE668  ; !   x Ĵӵ.
>                 :       :       ; һ... Jz !!
> 
>   뵱 Hacker , ԼҪ call ڷ, ʽܶ
>   , ҾͲ! ĸ, òҪ˵, ѵ
>   һ hacker , ϣû¾ȥ.
> 
>   ׷޸, ˰ "ϵͳʱ" Ļ, ִ
>    ScanDisk , Ҫ "Ч"  "Ч" ļĿ
>   ,  Scan е Disk .
> 
>   Ϊ Win95  ں, ìʱ, Win95 ĳЩ Appz 
>   ; е쳣 209x , Ǿͻ᲻ʱĵ.

====== Error Free 07/20 =======================================================

Lunar FTP V1.1

>   : Ԥδһָо; : , Ȼͬһ, 
>         Եʱﲻͬʱ, δҲͬ, ֲͬ
>         feeling ͽ "" . Ӣǲǽ "sense"? ?
> 
>   ʽעҪ "" , ûеĻ, ܻ
>   ۵, ȻҪһһз, 
>   ܺʱ; Ҫӵа hacker , Ҫû
>   ¶࿴, , ȻΪһֱ.
> 
>   ˵! ..... ջ (1)-(11) ͿԷɵĿ
>   .
> 
>   (1)  winice  Win95 .
>   (2) ִ  LunarFTP ѡע
>   (3)  78787878  һоͺ.
>   (4)  Ctrl_D  winice
>   (5) S 30:0 L FFFFFFFF '78787878'
> 
>        WINICE ѳһλַ ss:ssssssss
> 
>   (6) BPM ss:ssssssss   <- ϵ
>   (7)  F5 ѿȨ LunarFTP .
>   (8)  LunarFTP ° OK !  WINICE , 
> 
> xxxx:9EAA  REPZ MOVSD           ; <- ڴ˵, Ϳʼ F10
>                 POP     ECX
>                 AND     ECX,3
>            REPZ MOVSB
>                 XOR     DX,DX   ; <- , ͣ
> 
>   (9)  BD * ͣǰĶϵ
>  (10)  BPM ES:EDI-8 һ. ; <- Ϊ 8 , Լ 8.
>  (11)  F5  LunarFTP һֱ, :
> 
> 14F:4875FB      REPNZ   SCASB   ; <- ڴ˵
>                 NOT     ECX
>                 LEA     EAX,[ECX-01]
> 
>  (12)  BD * ͣǰĶϵ.  F10  ʼ...ߵ:
> 
>                 POP     ECX
>                 LEA     EAX,[ESI+00001055]
> 14F:412DAF      PUSH    EAX     ; <- ͣ. Ȱ F9 һ¶ϵ
> 
>   ʱ D EAX  , ῴ USERNAME, SERIALNO.. е
>   . ǲûп.
> 
>   ˲춯ֻ֮һ, Ҫż֮һ, Ҫϰ׷,
>   ƵĵطҪ Dump ; κιҲûϵ,
>   ʱ, ñʼ¼; Ĺ۲¼, 
>   Hacker sense!  "" !  "" !
> 
>   λͬѧ, Ǹҡ... O.K ! Ǽ...
> 
>  (13)  F5  LunarFTP , ѡע, еĸʽ,
>       , ȴ "ʼǱ"  Copy , Ȼ..
> 
>       USERNAME: (Ĵ)
>       SERIALNO: (, Ǵ 8 )
>       KEY:
>       ABCDEFGH Z
> 
>   Ϊʲô֪ϵĸʽ,  (12)  D EAX  
>   ۲춯, ʵ², ˵ "" һ Hacker 
>   ԺҪ. ָоһʱҲ˵, ҵıް
>   ! ֻ "" һ.
> 
>   Һý, ֻעʽ. Ҳ˵, ƽ
>   ʽ "" ֮, һҪľ "" !
> 
>  (14)  OK ֮, ֻᱻ WINICE , ҲǸոͣ
>       λַ, ͼ F10 .... ߵ (ߺܾúܾ, Ҳ
>       ҲǺܳһ) :
> 
> 14F:41320D      CALL    436FB6  ; <- Ҫ,  F8 ۲
>                 POP     ECX
>                 TEST    EAX,EAX ; <- ǿ EAX=1, ᵯ "ɹӴ"
>                 JNZ     413239  ; <-  0, 
>                 MOV     EDX,[EBP+..]
>                 :       :
>                 PUSH    EAX
>     413232      CALL    492AC3  ; <- ߹ʱ, ʧӴ
>                 JMP     413259  ;    ᵯ, һ! и
>                                 ;    JNZ , Ǹ CALL .
> 
>   Ϊʲôһ֪ eax=1  ᵯ "ɹӴ" ? Ϊ! 
>    R EAX=1ɲ? Ȼ,  S-ICE   BUG  . 
>   Ҫ, , Ǹ, ¶Զ¼..
> 
>   (15)  F8 Ǹ CALL (Ҫ) , nʽ, Щ
>        ʱ, EAX  "".  F10  ߵ:
> 
> 14F:436FB5      PUSH    EBP
>                 :       :       ; Ҫڴ. :
>     437058      XOR     EAX,EAX ; Ƚϵһַʱ, EAX  0 .
> 
>         $loop   MOV     DL,[EAX+EBP+FFFFFCD4]   ; һַ.
>                 CMP     DL,[EAX+EBP+FFFFFED4]   ; һַıȽ
>                 JZ      $next                   ; Ⱦ׼Ƚһ.
> 
>                 XOR     EAX,EAX       ; ڴ˷  EAX  0 '
>                 JMP     $Return_Ready ; eax=0 û.
> 
>         $next   INC     EAX     ; ָ + 1
>                 CMP     EAX,0C8 ; еó, ȻȽ 0C8 !
>                 JL      $loop   ; ĳ, ϸĳ, Ҫ. 
>                                 ; дζ!
> 
>   (16) עı׼ʽ
> 
>       USERNAME: (Ĵ)
>       SERIALNO: (, Ǵ 8 )
>       KEY: (հ)
>       (㳭, ܹ 200 (C8) Ӣĸ, ɻ, ´ʱ,
>        Բհûϵ, ÿĸ־Ͳһհ)
>       Z ( <- βʱ,  Z  ֵս )
> 
>   ҪڵصѾ˵, ֻҪ㿴Ķ, 
>   ҵĵٸӢĸ..
> 
>   ٶһ, ȴڱʼǱ,  Save  Copy ע, 
>   Ҫǳһ, ػ... ..
> 
>   һ  S-ICE ָ, 뿴ĳλõʱ,  "D" ,
>   ,  Dump д. :
> 
>   D 800000
>   D DS:EAX
>   D EBP+0FCD4

====== Error Free 08/20 =======================================================

007 for Win32 1.0d

>   1. Winice  Win95
>   2.ִ Ask007 . ȴ̧ͷӳٻ.  [I Agree] .
>   3.ѻƵӴϵĶе [007 for Win32]
>   4.Ҽ, ѡ [About 007] . ʱֻܳոյ̧ͷ.
> 
>   Ϊʲôøոһ? һ, ΪʲôһҪø
>   һ? ҾƫƫҪһ.
> 
>   ÿε "²"  "" Ҫһ, ִҪý
>   ʽһ, Ҫһʱ, ͱʽٴִ,
>   Ƚ鷳! ǲ!
> 
>   Ҫ "¶" ? һǶγʽִй
>   ! һ, Ȼ취ҪԵĵطYһ!
> 
>   5. bpx lockmytask , ϵ. ְ[I Agree] ʱ,
>     ̧ͷʧ֮ɲ, ͻᱻ S-ice  , :
> 
> USER!LOCKMYTASK
> xxxx:636C       ENTER   0004,00 ; <- ڴ.
>                 PUSH    SI
>                 PUSH    DS
> --- USER(3) ---
> 
>     lockmytask , ûȽϺõĶϵ
>    ʱ, ܷЧ. רץشӵĵ. Ҫ
>    ԭ, Գ.
> 
>    ס! Ծͻץδ֪ϵͳĳЩ.
> 
>   6.ʱ㰴һ F12, :
> 
> yyyy:44B1       CALL    USER!LOCKMYTASK
>                 MOV     EAX,[BP+0A] ; <- ڴ˵,
>                 LES     BX,[BP-04]
> --- USER(8) ---
> 
>    ǿԿµһ,  CALL ﰡ?  S-ICE
>    , Լ²¿, F12 Ϊ P RET,  P RET ʲô
>    õ? ָ!
> 
>    ע: s-ice ǿԶܼ, Ҷ. 뵱 hacker
>        ,  s-ice  Ŀ¼, ҿ "嵵" ?
> 
>   7.Ͳ, һֱ F12, һֱ, ҪһŶ!
>     ڶ ASK007!  ٶȵܳʱ, :
> 
> 14F:00403F41    CMP     [ESP+121],3F1   ;
>                 JNZ     403FA7          ; ʱ, .
>                 MOV     ESI,[ESP+0124]
>                 :       :
> 14F:00403F66    CALL    00402820        ; <- Ņ̀ͷ
>                 LEA     EAX,[ESP+30]    ; <- յʱ, ڴ
>                 ADD     ESP,10
>                 :       :
> 14F:00403F74    CMP     [ESP+20],7CD    ; <- ʮλ
>                 JBE     403FA7
>                 PUSH    40
> 
>   Ϊʲ֪Ǹ CALL  "̧ͷ" routine ? ҰѶϵ
>    CALL , Ȼѡһ About 007, в?
> 
>   ȻҪҳ CALL , ÿһ F12,  Call ,
>   ϵ֮; ٰһ, һ..... վͻҵ
>   , ?
> 
>   һٴ? ȻҪһٴΰ! Ҫ, 
>   ˵ٵ, һһҪ, û취.....  Win95  
>   Ĵ˳ʽ ASK007!  ķΧʱ, ֮.

====== Error Free 09/20 =======================================================

Gif gif gif

>   1. wice  95 .
>   2.ִ ggg  , ѡע, ´
>   3.ע 78787878.
>   4. Ctrl-D ,  s-ice,
>   5. S 30:0 L FFFFFFFF '78787878'
> 
>   ʱ sice ѵһλַ 30:004xxxxx . ! ǰǶѵ
>   :8xxxxxxx ? ôһλѵ 004xxxxx ??
> 
>   ,  hacker ϰ, ڰһ s  ֮! Ȼ
>   һλַ :8xxxxxxx.  :8xxxxxxx  ׷Ҳ
>   , ξͻһ·߿..
> 
>   6. bpm 30:4xxxxx , ѹ F5  ggg .
>   7. ok , ᱻ sice , :
> 
> 14F:BFF780DC    MOV     [EAX+08],ESI    ; <- ڴ.
>                 MOV     [ESI+08],EDX
>                 MOV     [EDX+04],ESI
> 
> --- KERNEL32! ---
> 
>   8. F12  ¾͵ ggg  , :
> 
> 14F:4358F4      CALL    4504EC
>                 POP     EDI     ; <- յʱڴ.
>                 POP     EBP
> --- GGG! ---
> 
>   9.̷Χ, ͨᰴ F10  ʼ.
> 
>   ͨҪ hack  () һʱ, ˽ԭʽ; 
>   F12 ̫, Ƚϲ׿ʽôߵ. ؾ
>   Ѿ½, Сһ.
> 
>   , ͻߵ....
> 
> 14F:00410F70    CALL    0043E26D
>                 ADD     ESP,P4    ; <- 
>                 :       :
>         ###     CALL    00410C52  ; <- ,
>                 ADD     ESP,08
>         ***     TEST    AL,AL     ; ǿ AL=1 ƺûʲô
>                 JZ      00410FA1  ;  0, עʧ.
>                 :       :
> 14F:00410F9F    JMP     00410FD1  ; 
> 14F:00410FA1    PUSH    38
>                 :       :
> 14F:00410FC9    CALL    0041E8E1  ; <-ѶϢı, 
>                 ADD     ESP,1C    ;   С "ʧܴ" һ, 
>                 :       :         ;   ʱ²˾Σ.
> 
>   طͨ`̫һ, Ϊ ***  ʱ,  AL=1
>   ᷢʲô, ֻǻעᴰյ;  AL=0 ͱض
>   ʧ. û, ֻ F8 , Ǹ "
>   "  ### CALL .
> 
>  10.ð! Ǿͽȥ! :
> 
>         :       :       :
> 14F:410C5D      CALL    00410A40  ; <- Ҫڴ, ȥĦһ.
>                 ADD     ESP,08
>                 MOVZX   EAX,AL
>                 TEST    EAX,EAX   ; <- һʵ,  EAX=1
>                 JNZ     00410C70  ;    Ȼעɹ.
>                 XOR     AL,AL     ; <- ڴ AL   0 .
>                 JMP     00410CA4
> 
>    "עɹ"  (뵱 hacker-ҿ, Լ, 
>   עɹĺۼ) ,  410C5D Ǹ CALL ֤, 
>   ɴ..Ǻ! ܲ, ڲԶǰ..
> 
>  11. F8  410C5D Ǹ CALL . :
> 
>                 :       :
> 14F:00410A4A    CALL    00420785
>                 ADD     ESP,04
>                 CMP     EAX,10          ;  10 ?
>                 JZ      00410A5B
>                 XOR     AL,AL           ;  CPU  ,  AL=0
>                 JMP     Return_Ready    ; , Ǿ군.
>                 :       :
> 
>   ôεķǿ, ҵҪǵԷ򴥻 (Hacker
>   Sense ) ûбĸ?
> 
>    CMP EAX,10 ͣ, ʱ  EAX Ϊ 8, û
>   ʲô? ²¿....! 뿴! ....˵! ԶԶ, û
>   ! ܾܿע.
> 
>   ƶϲһ   Ϊʽд, һҪ֤
>   , ȽϲᱻΪĹ, ֲԹ.
>   ܶౣ, ͨ "̫" .
> 
>   ʵܼ,  BD * ͣǰĶϵ,  CMP EAX,10 һ,
>   ע, ע,  OK ,  sice ʱ,
>   һ EAX  ǲոմ. ! ɲҪٴͬ 8,
>   , ׷.
> 
>  12.! CMP EAX,10  Ǹ 10 ʮλ 16 ! ոǸϵ㻹Ҫ
>     ,  F5 ע, עʱ 16 .  OK ! 
>      sice ڸϵĵط, ʱͼ F10  , һ
>     ´˽䱸ɭϵ·. ߵ....
> 
>   OK! ̸֮ǰ, ǱٻһҪ񵽵ʲô? Ȼ
>   ߸? Ҫ Routine, ʲôִʱ, 
>    AL=0 .
> 
>         :       :       :
> 14F:00410A7A    CALL    004108BB     ; <- ¿,  CALL пͷ.
>                 ADD     ESP,08
>                 PUSH    ESI
>                 MOV     [EBP-10],AL  ;  AL ,
>                 CALL    004208CD     ; ȼ CALL Էص AL ޹
>                 ADD     ESP,04
>                 MOV     AL,[EBP-10]  ;  AL 
>                 POP     ESI
>                 POP     EDI
>                 LEAVE
>                 RET             ; <-  x86 ASM   Return ָŶ!
> 
>   ֤һµڶ CALL  AL Ƿ춷ص AL ֵ޹;  [EBP-10],AL
>   һ֮ǰ,  AL=1 ֪, Լʵ֮.
> 
>  13. F8 ٽ 410A7A  CALL ,  F10  ûþ...
> 
>                 :       :
> 14F:0041954     MOV     EDX,0046009C
>                 MOVZX   EAX,BYTE[EDX+EAX]
>                 MOV     AL,[EAX+EDI]    ; һ Byte
>                 CMP     AL,[EBP-14]     ; Ƚһ Byte
>                 JZ      $Next           ; ȾͱȽһ
> 
>                 XOR     AL,AL           ; <-  AL=0 ָ.
>                 JMP     Return_Ready    ;    ڴ˷ؾ...
> 
>          $Next  INC     SI              ; ָ + 1
>                 CMP     SI,05           ; Ƚ 5  
>                 JB      004108F6        ; С춾ǰ׼
>                 MOV     AL,01           ; <- ûп AL=1
>                 :       :
> 
>   ! ǱȽϵĺ, ϧ! ıȽֵ֮, Ȼ
>   , ٷǰʽ, ǾͿ!

====== Error Free 10/20 =======================================================

WinJammer 2.30

>    Winjammer  иһ Wjmrplay , Ҳעѡ, Ǿ
>    (Wjmrplay) , ΪʽȽСִͨлȽϿ, ·Ƚ
>   ͨҲȽ׷.
> 
>   ǻǵǰÿν׷ʾ? ûǰ! , 
>   Ҳе! ƽϿʱ, Ƕ˯, 벻ǶԿ
>   Ķ, Ҳǵ.  (1)-(11) صĻ, Ҿ
>   ظŶ!
> 
>  12.˵ʮһʱ, Ҳ bpm ds:di-8  ֮ص, :
> 
> xxxx:5BAF       JZ      5BAB    ; <-- ڴ.
>                 JMP     5BC5
>                 CMP     BYTE PTR [SI],20
> --- wjmrplay ---
> 
>  13.ʱ㰴һ F12, :
> 
>   Ϊһкܶ LOOP ,  F10  Ҫõ, ҷ֮,
>   Ҳûʲôص, ǹǱȦȦ, Լ׷, Ż
>   ܼȦ, ȻᷢûʲôҪ, ֮ȻҲ.
> 
> xxxx:5A87       CALL    5B9C
>                 POP     BX     ;<- ܳ
>                 PUSH
> 
>  14.ʱ㿪ʼ F10  , ߵ ...
> 
> xxxx:5B72       CALL    15EC    ; <- Ҫ,
>                 ADD     SP,04
>                 OR      AX,AX   ; <- ڴ RAX=0 , ᵯɹӴ
>                 JNZ     5B82
>                 PUSH    WORD PTR [..
>                 PUSH    AX
>                 JMP     5B93    ;
>      5B82       PUSH    DS
>                 PUSH    096C
>                 CALL    344E    ; <-  F10   CALL ʱ,
>                                 ;    ʧӴ͵. һ
>                                 ;    ! и CALL , н
> 
>  15. F8 ǸҪ. :
> 
> xxxx:15EC       PUSH    BP
>                 :       :
>      15F7       MOV     SI,[BP+04]
>                 MOV     DI,[BP+06]
>                 XOR     AX,AX
>                 MOV     CX,FFFF
>           REPNZ SCASB
>                 NOT     CX
>                 SUB     DI,CX
>           REPNZ CMPSB
>                 JZ      $Return_Ready
>                 SBB     AX,AX
>                 SBB     AX,-1
> 
>   Ƚϵĺľ, ԽԽ, ҸǵĿ, Ȼ
>   ѶҲҪǰŶ! ҪעԼϵĳʽ, ֲҪ
>   ˵, Ҫǿ Hacker м  x86 ָ.

====== Error Free 11/20 =======================================================

TIPPY FOR WINDOWS 95 V 1.32

>   ͨעѡʱ, Ƕá 78787878 ط׷
>   ֮, ԵĽ, ʧЧ, .
> 
>   ô? 𰸺ܼ, Ҫͷ׷ (Ӳ
>   , 㱣Һ? ) , ľͻԿ.
> 
>    hacker Ҫ, һϻ, ¶Զ¼,
>   ΪĿʽ Hacker д,  hacker Եľ
>   ãã, Ȼʽ߲ᷢ绰Ҫ
>   ;  Hacker ˲, ಻ÿ±.
> 
>   Ǹ 78787878 , ȻͲҪһֱҪ 78787878 
>   ; Ҫȡ, . ɷҪ, ʶʵ
>   Ϊ. ²òͷ, ø! ̧ͷ, ײ
>   һ, Ǳ߽ʹ, ҿɲ.
> 
>   Ǿͻһ 007! ƪ "մط" , ǵð?
>   ֪ʲôʱ,  bpx lockmytask ԷЧ.
>   ǰ, ǡԡ, Ҫԭ..
> 
>    Username ȥ, ע 78787878 , һ ok !
>   עʽ "ʧܴ" .
> 
>   ûϵ, û, ɽ, ǰһ ctrl-d , 
>    bpx lockmytask , ѹ F5  Tippy, 㰴һ "ʧ
>   ܴ" ϵİťʱ, Ͼͱ wice ; Ǻ!  wice
>   Ȼ鴫.
> 
>   ʱ bd * ͣոյĶϵ, Ϳʼ F12, Ҫһ
>   Ŷ! ܵ Tippy       ͣ:
> 
> 14F:473255      CALL    473897  ; <- α,
>                                 ;        ΪҪ "" !
>                 JMP     ...     ; <- .
> 
>   Ȱ CALL Կ (ǵԵʱ, 
>    BD * ͣǰĶϵ) ,  F5  Tippy  ʱ, עʱ
>   , ְᷢ ok ʱ, ͻᱻ wice .
> 
>    F10   CALL ʱ , "ʧܴ" ͻᵯ; 
>   ڵһ°ťʱ,  "ʧܴ" һʧ, ֻᱻ wice ; 
>    CALL .
> 
>   ! ҵһش, л! ǾϷ, 
>   ʲô, CPU ִвŲܵ˵. һ..:
> 
> 14F:473214      MOV     EAX,[4804F0]
>                 CMP     EAX,[4804E0]    ; ڴϲ֮.
> 
>                 JZ      47325C          ; ڴǿ 47325C
>                 PUSH    50              ;   Tippy ...
>                 :       :
>                 CALL    4738D9
>                 :       :
>                 CALL    4738A3
>                 :       :
>     473255      CALL    473897  ; ˵ʧܴܲ
>     47325A      JMP     4732AF  ;   һи JZ ! , ˬ!
> 
>     47325C      MOV     EAX,[4804F0]
> 
>   ҵҪŶ! ! ǾͰǰĶϵͣ,  CMP EAX
>   һ֮;  d 4804e0 ۲ eax  ʲôϵ. ע
>   ļ...
> 
>   ޡֵԲ 1FF !  ĳһǹ̶, Ȼ̶
>   һ Username ,  1FF   512  
>   , עǾ      qһ!
> 
>   Ϊ 1/512  ϲ,  Hacker ϰһ; Ҫ
>   ע Routine, ƺ̫˵. ΪҲ
>   ȥ, Լ ID ע, ҲԳ, 
>   Լ塢ʮΰ!
> 
>   µ! ҪǱ߹й, 塢ʮε,  Hacker 
>   Сһׯ, ûǧξ͵Ц. ǿһ, Ǳƪܹ
>   м "" ? ֻй̵ľһСŶ! ټ
>   ڷǾı "" , ǾͲ.
> 
>   ʾһ, עҪ˸.

====== Error Free 12/20 =======================================================

roboword.exe is 249,360 bytes

>   Ҫ̸һ̸رʽ--ʵֻҪ wice ,
>   ǿʱжϽȥ trace  . һǱˮ, Ǳˮ
>   䱸һ, ûκָ, Ҫҳ
>   һ֧? Ѱ! ǲȵʺ, ˵ͷҵĵ.
> 
>   һע, ڻϻῴעĴ, Ǹ
>   ӻ 78787878 , ںе "ָ" , ֻҪ
>   ƴ 78787878 ιȥ, ûαװĻ, ͨ
>   ҵ.
> 
>   ǰҽ bpx lockmytask մ, Ҳǰ "
>   " һָ, Ȼҽȥ. ƽĵһָ
>   , ܹԤĹʵ, ô·Ӿͻܺ.
> 
>   ֮Ŀ "ROBOWORD" , ûעᴰӡֲ
>    78787878 û "" , Ԥϵ?
> 
>   ˵һ̸ֽĶ, һҪ "ǰϷ" , ȴ
>   û. ΪҪò, Ҫȼһ, ˵
>   û? Ϊǲ԰, , ԰кܶණ
>   ڵ.
> 
>   Ҫϲ, ˱ȶԺ, Ȼûʲô, 
>   дʽĹһ   Ҫдһ󴮵Ķ, 
>   дñȽϿ, д, 㻹ԹǮ.
> 
>   ǰϷҪŮ, Ҫ Ultraedit  ֵ
>   ؽ۲. һ! ԰Ȼ G-Z  , 
>   Ů, ! ǽ...
> 
>   ôÿ, ۿһѧҪ, ٿ
>   Է򴥻 (hacker sense) , û
>    hacker .
> 
>   Ok! ,  ROBOWORD ִڼ, ڻʲô
>   , 㵱ϵĲοָ? һ..... û뵽
>   ? 뵽ľ..... ! , ˵... !  "A to
>   F...demo version" .
> 
>    "demo version" Ҫȥĵһݵ. ǧ
>   򲻿Ϊָ, ׵ľͻᱻҵ. Ҳ
>   ΪΪҲ,  hacker һ뵽,  trace
>   ٽ; trace , ...
> 
>   1.ִ roboword .
>   2. wice .
>   3. s 30:0 L FFFFFFFF 'demo version'
> 
>   һˬ..Ϊѵһλ 30:xxxxxxxx
> 
>   4. bpm 30:xxxxxxxx .
>   5. F5 .
> 
>   ! һԶϵ, ô? Ȼ취
>   ǿɰ "޲" ߵԤĶϵ! ָ
>   һֿ, Ҫͻᱻ wice .
> 
>   ʲô? ? ҿ..... ѽ! С, û
>   ֵʽ "fuck" ! Ҫ "fuck" !  "fuck" 
>   ͷ  A-F ֮! Աи "shit" Կ..
> 
>   ʲô? ? ٿ... Ӵ! ôƽ⵵
>   ϰƽ? ȥ "" ðĻ,  install  һ
>   ֮.
> 
>   6.һŬ, . :
> 
> xxxx:AA8D       REPNZ   SCASB           ; <- µĵط
>                 LDS     SI,[BP+06]
>                 LES     DI,[BP+0A]
>                 MOV     AX,DI
>                 :       :
> --- KERNEL(01) ---
> 
>   Ǹˬ, ΪԤǳ. Ҫˬ̫, 
>   Ϊʽд, ò׷, Ǹδ֪.
> 
>   7.Ȱһ F12,  roboword չ۲鿴. 
> 
> yyyy:06DE       CALL    KERNEL!LSYRCPY
>                 MOV     AX,0001         ; <- ...
>                 POP     SI
>                 :       :
> --- ROBOWORD(03) ---
> 
>   ÿһµطʱ, ʹԵķһ¸ĳʽ, 
>   Ͽ, Ϊǳ 'A TO F ..'  ĵط, Ҫ˽һ
>   , Щʹ CPU  ߵ.
> 
>   8.α, ῴ...:
> 
> yyyy:0D0C       CMP     AX,0064 ;  64 Ƚ?
>                 JZ      0D74
>                 :       :
>      0D2E       CMP     AX,0065 ; 65?
>                 JZ      0D74
>                 :       :
>      0D50       CMP     AX,0066 ; 66?
>                 JZ      0D74
>                 INC     WORD PTR[...]
>                 :       :
>      0D69       CALL    KERNEL!...
>                 MOV     AX,0001         ; <- ոշصĵط.
> 
> --- ROBOWORD(03) ---
> 
>    64,65,66 һ, ȽЩʲô
>   ? Ͽʱ,  61,62,63 , ǵʲô?
>   ǳԵ, Ӧһ֪Сд a,b,c...f
>    ASCII  . ǿˬa!
> 
>   Ǹĵһϰ... ѵܶ 'demo version'
>   , Ӷϵؿ. һ 30:8xxxxxxx .  
> 
>   һ! һʰ, Ϊû¿. 㲻ϲ
>   ̧ͷĻ... ? ȥ!
> 
>   9.뿪 roboword ,  ldr   roboword . :
> 
> xxxx:3F3A       XOR     BP,BP           ;  F10  ʼ
>                 PUSH    BP
>                 :       :
>      3FCF       CALL    yyyy:3FE4       ;  F8 
> 
>  10.  yyyy:3FE4 ĵط,  F10  ʼ.
> 
> yyyy:3FE4       MOV     AX,DS
>                 NOP
>                 :       :
>      4002       CALL    zzzz:0000       ;  F8 
> 
>  11.  zzzz:0000 ῴ,  F10  .
> 
> zzzz:0000       ENTER   ...
>                 CMP     WORD PTR[BP+0C...
>                 :       :
>      0197       CALL    KERNEL!GETPRI...
>       $$        PUSH    WORD PTR[2200]
>                 PUSH    7D
>                 PUSH    00
>                 PUSH    2C9F
>                 PUSH    0330
>       ##        CALL    USER!DIALOGBOX  ; <- ̧ܳͷ call .
>       @@        CALL    wwww:098E
> 
>   Ѿ֪ ## Ǹ call ʾ̧ͷ, 㲻Խȥ
>   user! ĵ̸Ķ. Ϊ user!  ϵͳķΧ, ĳ
>   ʽ, ϵͳ군.
> 
>   ȻԲ jmp  ָ, ʹʽɹ call user! Ͽ
>   , Ҳֱ @@ .  jmp  Ҳ. ΪЩ push
>   һЩ, Ҫ  dialogbox õ,  dialogbox  
>   Զ sp ֵ,  jmp  Ҳ.
> 
>   ִйߵ @@ ʱ, Ͱ sp ֵ; ִ
>    roboword һ,  0197 ʱͿʼע sp ֵŶ! 
>   һһ,  sp ͸ոһʱ, ͣһ
>    push , ҲҪĳ jmp @@ ĵط.
> 
>   ľϰ!

====== Error Free 13/20 =======================================================

In Curcuit Emulator

>   In Curcuit Emulator, ʵ·ģ. ΪִеĶ
>   ϸ, õһģ CPU  ĵ豸.
> 
>   ע:  "ICE" , δע, ָͨ "ģ CPU  ֮豸"
> 
>   һ, һ̨ ICE, һ, ߶
>   һ CPU  ŵĲͷ. Ŀϵ CPU  
>   , ͷ嵽  CPU .
> 
>   Ϳ ICE  ߵөĻ, , ۲ CPU  
>   .
> 
>   Ȼ NuMage ǳƨ, ȻȡΪ Soft-"ICE" . Ҳǳ
>   , ù Soft Ϳʵ ICE  Ĺ.
> 
>   Ҫƽ, Ҫ׷ٹ۲, ICE ׷
>   . ûǮ 386,486,586,686   ICE, ֻ Soft-ICE.
> 
>   586  ICE  ˵Ҳإ..

====== Error Free 14/20 =======================================================

ƽʽץǺ

> >Ҷ˵s-iceܺ
> >ǸλȽ˭֪s-ice޸ĵ?
> >Գѧд...
> 
>    Soft-ICE ֻǸͽߵһ׷ٲĹ߶, ʹ
>   ĻһҪ˽ͽ. ֱҲҪһ
>   80x86 ָȺ, Ϊ 80x86  һƱһƱ, ָ
>   ļǲ.
> 
>   ǰ 6502 , е붼, Ϊǰ Apple
>    monitor  , ûṩ, ĳʽǲ, Ȼ
>   ѻеȥ, Ȼͱ!
> 
>   LDA #  A9, STA  85, JSR  20 Բ? <-- ʮ
>   , ⼸õ . 4C  JMP ...
> 
>   ʵƽʽץǺ, ˵!
> 
>   صʮǰ, ͬͬѧר, дһ
>   ʽ; ! ȴ, ڿ쵽, ϰ, 
>   ֻ.
> 
>   ʽʱ, ҵȻֻÿ! һóȥִ
>   ĳʽ, д APPLE ][ , Ȼһ call -151,
>   ͿԽڽĳ޽   ǰ APPLE ][  monitor (
>   ϵͳ, νһֳʽļػ. )
> 
>    PC Ȼ debug.exe   Soft-ICE ֮Ļ, ǰ
>    Soft-ICE ûгʱ, Ҷ debug.exe, Ҳ
>     ICE ! ̫, ûǱȽϲȥǸ
>   , ˽蹫˾Ļ.
> 
>   ʽд, ҲҪ֪һڸ, Ȼô
>   ? ʵ׼ȷķ, Ȼǿִ, ֱ
>     , ҵ.
> 
>   ڳسʽ, ۾ʽָһ
>   һ, طϸı, һֱһ
>   ͬ. ȻҪĶͽ׵ָ, ҲҪдʽĻ
>   ˼, Ȼ֪һγʽ, Ǹͬ?
> 
>   ҵͬ, Ҳͺð, ΪֻҪа취һ
>   ͬ, д, ʹʽԸ, ôͳɹ,
>   ǾͿͬѧ÷ţ! Ȼ! ͬѧҲ˳
>   ҵ.
> 
>   ƽ? ʵҲһ, Ϊʹ㲻ʹõǶγʽ, 
>   ǰͬ, Soft-ICE  ֻǱ Debug  , 
>   ö, ߵʹ÷ͬС. ֻҪ debug, Soft
>   ICE Ͳѧϰ.
> 
>   ǰѾõ Apple ][ ,  monitor, ҲƵ.
>   , ֻҪͽ, ͻʹЩ. ƽĻ
>   :
> 
>   һ. Ҫдʽ.
>   ڶ. Ҫͽ.
>   . Ҫг (? û!  "" !)
> 
>   . ó, ȻֻҪдͽ׵ĳʽ, 
>         һû.  ?  ܼ, Ӳ˽
>         ߳ɲŹ (߳ɾ͹! Ϊɶ
>         õ) .

====== Error Free 15/20 =======================================================

Dr Eye 2 Ƭ

>һԭĴƬѰװעᡣ
>       (ΪʲôҪһ?? ԭ !!!!)
>ڶcopy dreye20\peadict\*.* ʱֻҪdict.exe
>       (Ҫdict.exeҪңҲ̫)

  ڶԸĳ "ʡ" .

>¼༭ʽ(Ҳ95 ѧ־Ͳ)
>     ҡ
>   [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer]
>   "link"=
>   "Version"=
>             ^^^^^^(ϲһ)㣬Щ뵱˵
>   ¼ϻ !!!!!!

>ġ󹦸ɣڰװʱͲעƬעᣬ
>      ֻҪdict.exeǵ¼!!!!

  ĿԸĳ:

  A.̨->Ƴʽ->Dr.Eye 2 (ֻע, ҪȫƵ
    , ԶԻѡ No ), 

  B. RegEdit  Ѹոд "¼" !

  C.ڴŵеһƬ꡹ԭƬ, Ϳó. 

>һ¾ĴƬôģȥphysical copy Ƭ
>ûãܲܽ̽!!!!

  1.Ҳ, Ӧò䱣.

  2. Physical Copy  Ч, пǡλԪ, ǡ쳤.

  3.λԪҪñȽĴŵ, һ User Ĵŵ, 
    ʺϱĲƷ. 

  4.쳤Ƚ. Ҳ Copy , ΪҪҵ̨ת˿
    Ĵŵ.

====== Error Free 16/20 =======================================================

Roland VSC-88 Դ

  ڽʾ֮ǰ, ˵˵ʽĿ: 

  ҵһζȥ׷֮ǰ, ʵҲ˼; Ϊ 50 
  ʱ, ʹ User ַܼ, һӾ
  ж, Ľβ; Ҳ˵ 50.00   50.00+ ı
  ״첻,  Hacker ϵ.
 
  Ǹ 50 ٽ, ǰΪ̫, Ҫڸպ 50 
  뽥֮ɲǶ, װ! ô? ûǿԷ! 

   Win  ʼ, һʹ VSC-88 Ŀͷ, ܳһ
  ! ǾȰӾ˵. Ǹ 50 
  ļʱ, ˳Ȼ.

  1. winice  95 , ִ VSC-88 . ᵯһ 50 ľ
    . ûǰӵĵ lockmytask ? ֻҪ
    ϳɹ, , Լа˳ɵĳʽǺѽ. 

  2.עŶ! εĴ, ûյ, ͵ؿŶ! ڴ,
     Ctrl-d  winice .

  3. BPX LOCKMYTASK , ѹ F5  VSC-88 Ļ. 

  4.´ڵ "ȷ" , һմ, ͻᱻ winice , :

  USER!LOCKMYTASK
  CS:636C       ENTER   0004,00 ; <- .
                PUSH    SI
        :               :
                                
  5.Ϳʼ F12  , ĳʽ! עⰴ! һ VSC  
    , Ҫͣ! : 

  1E07:4D00     CMP     WORD PTR[005C],0 ; 
                JZ      4D27             ; <- JZ
                CMP     WORD PTR[00D4],0 ; 
                JZ      4D27             ; <- JZ
        :               :
       4D1C     CALL    USER!MESSAGEBOX  ;
                MOV     WORD PTR[00D4],0 ; <- , ɴ˿֪, 
                CMP     :       :        ;     CALL 봰й.
  --- VSC(1) ---

  һ,  JZ Խ MESSAGEBOX !  JZ , ͨ
  һԵһ. Ҫǿȵһ 4D27 , мַʽ. 
  :
      
    һ JZ ĳ JMP .
    ѵһ CMP   0, ĳ [005C] ͬ.
     [005C] .

  ͨһõ. Ϊ WINICE ,  E Addr ȽϷ. 
  ֱ A Addr , ע Bytes  .

  6. E DS:005C, ʱ:

  --- VSC(2) ---
  DS:005C       01 00 05 00 01 00
                ^^^^^
  ûע⵽һ CMP   "WORD" ? Ǹ WORD ָ
  ʹõϳһ Word , Ҳ Bytes, ˾ǰ
  ߵ Bytes  Ϳ.

  7. DS:005C  ĵط,  F5 ٷ VSC-88 Կ.

  , ʱ "үȻ" !  50 Ʋ? 
  ûע⵽ĵ VSC ?  Ǳʾ VSC.DLL, 
   VSC.EXE  !

  ʵû, ΪҸ˰ͷ 01 ĳ 00 ֮, ٽ Win95
  ʱ, ᵯһӴ, ˵ "εϻ" ! 

  찡! ֻٸĳʽԿ! Ҳǵһ CMP  Ǹ
  . Ϊ϶κͳʽβͬ, ˵ֻ϶. 

  8.ٿһһ, :

  1E07:4D00     CMP     WORD PTR[005C],0 
                JZ      4D27             

  ǲǸĳ¾ͺ?

  1E07:4D00     MOV     WORD PTR[005C],0 
                JMP     4D27             
  
  Ǹĳϻһ BYTE , Ϊڶ BYTE  0, ֻҪ
  һ BYTE ͺ,  BYTE PTR . 

  Ҳ, Ǹ JZ Ҫ; 취 [005C]  0
  , ֿʹ Zero . е, Ǿ AND !

====== Error Free 17/20 =======================================================

 &  Win95.

  ƽ Hacker дʱ, Ŷڿµķ
  ʩ! ʱ! Ҳ޸ĵǱؿĳʽ; 
  ײ׫дʽʱ, С Bug. 

  ! ʱ᲻Сİæץе Bug Routine, 
   Hacker Ҫڵ! 

  ׷ ShellWizard 3.0  ϵʱ, 
  ϰ! ƺԵ, ʾ CWin95 
  ϵͳ. 

  Ϊ׷ User32.dll , ȡϸĵ, Ȼ
   "͵Ӵ" ֮, ɺƯ!

  ׷ٹ̺ܷ, Ҿֱӽص.  "͵
  " ֮, СCreateDialogIndirectParamA
   Routine  .

  ںСCreateDialogIndirectParamA֮ǰ, ȥ
  СGetSystemMetrics, ʽʹ֮ǰ,   
   Push һֵ, :

  PUSH  xx
  CALL  USER32!GetSystemMetrics

   ShellWizard 3.0  ֳ֮, 
  PUSH 2A . :

  PUSH  2A                      ; <- Ķ 2A .
  CALL  USER32!GetSystemMetrics
  CMP   EAX,EBX                 ; <-  "" ʱ, EAX  1.

  1. S-ICE, ábpx GetSystemMetrics if @(ESP+04)==2A
    .  SICE 3.0x ﷨Ŷ!  2.0 
    , .

  2. F5  Win95, һִ ShellWizard 3.0 Pro, ᱻ
    S-ICE , Ϳʼִ! :
    
  :u getsystemmetrics l 40
  USER32!GetSystemMetrics
  014F:BFF648C7  XOR     EAX,EAX        ; <- ڴ.
  014F:BFF648C9  MOV     EDX,[ESP+04]
  014F:BFF648CD  CMP     EDX,00
  014F:BFF648D0  JL      BFF64919               
  014F:BFF648D2  CMP     EDX,4A
  014F:BFF648D5  JA      BFF64919
  014F:BFF648D7  CMP     EDX,29
  014F:BFF648DA  JZ      BFF64929
  014F:BFF648DC  MOV     EAX,[BFF6714E]
  014F:BFF648E1  ADD     EAX,000003C4
  014F:BFF648E6  ADD     EAX,EDX
  014F:BFF648E8  ADD     EAX,EDX
  014F:BFF648EA  MOVZX   EAX,WORD PTR [EAX] ; <- ִеͣס
  014F:BFF648ED  CMP     EDX,16
  014F:BFF648F0  JAE     BFF64919

  3.ִйͣ MOVZX   EAX,WORD PTR [EAX] ʱ,  
    D EAX . :
  :d eax
  0157:81EB2418 01 00 02 00 00 00 02 00-02 00 A0 00 18..
                ^^^^^
  4. E EAX  ɰѵһ 01  00 !  BD * ͣ
    еĶϵ, Ȼᰴ F5 . ? 

    ShellWizard 3.0 Pro ûб൱Ư? ! 
    εĻ, Ȼĸԭȱסѡ.

  5.ʱϵͳĲͱĹ, ͿʼԱĸ
    ! CuteFTPFTP ExplorerCAMCAD 2.0.9e  About & 
    WinPack  AboutWinHacker 95...  Clean
    Sweep ! ûбĺ....

ע: Ϊֱû GetSystemMetrics , ϵͳĶ
    Ҫ, Ҫһ, ڿ, δ
    ĸķ, ʱ S-ICE  , !

     GetSystemMetrics & CreateDialogIndirectParamA
    ʽĺʹ÷, ṩһ°! 

====== Error Free 18/20 =======================================================

Re:  &  Win95.

>    Ҫֱ޸user32.dllӦôأ
>    Ϊ̫ûSoftICEԻϣָܹ
>    ޸user32.dll:)л

  Ҫ? һû̶ĸķ! ΪϵͳĶ
  , Ӧóʽһ, ܿЦ, ˽ԭ Routine
  , ǲȥоԸķ. Ȼ, 
  , ẦһƱ ...

  Ŀǰзһʽ,  Anawave Gravity 1.1  
  ʱ, 군. , ǻ.

  ,  GetSystemMetrics(2Ah)  طֵ
  ʱ,  95 ϵͳʹõ "ϸ 8"  (ʹ
   "ϸ 9" ֪к! ϧѽ!......) .

  ӢĻ, ʹ "MS Sans Serif 8"  Ż
  Ƚ.  "ϸ 8" ֳ, ָ̫̲
  ,  SW30pro  ĸѡ, Ͳᱻͼס
  . 

  ! ˭ҵĵ Ture Type    "MS Sans Serif" ֮? 

  Ӧ, ǵǿȶ. ׷:

  1. S-ICE, ábpx GetSystemMetrics if @(ESP+04)==2A
    .  SICE 3.0x ﷨Ŷ!  2.0 
    , .

  2. F5  Win95, һִ ShellWizard 3.0 Pro, ᱻ
    S-ICE , һ F12 or F11 . ͻῴµ
    :

  ԭ:

    PUSH  2A                    ; <- Ķ 2A .
    CALL  USER32!GetSystemMetrics
    CMP   EAX,EBX ; or TEST EAX,EAX ; <-  "" ʱ, EAX  1.
 
  ĳ:

    PUSH  2A
    CALL  USER32!GetSystemMetrics               
    XOR   EAX,EAX              ; <- ӸӦ
 
  ע:  SW30pro  MFC42.DLL , Ķ .EXE 
       . ޸ MFC42.DLL  Ӧòǣ̫.

  ֮ǰȱԭĵ! м! м! 

====== Error Free 19/20 =======================================================

More Space 2.7 ! ʾ̲!

  ͨ׷һ֮ǰ, Ҫһ "Ա仯" and  "ʱ"
  ¼. Ҫ, ҪĿ. Ҫ֮ǰ
  濴. ĿĲ, ϵ Sense  ! 
  ! һ! Sense ǲ "" ? 

  һҺܷ, Ϊȥ, Ҳһ
  ! ǲе׷Ůһ? û˵һ仰, Էһ
  , Ͷù! Ƿ۾, Ϳߵķ
  ? ǵ׷, ȥ֤! ̫֤, ᱻ˼ "" Ŷ!

  Ŀ More Space 2.7 Ϥ, ֪ Duplicate Files
  Ӵ, ϽǵĴŵѡʱ, һСҪ
  ע! Բˬ, СӾǵĵһݵ.

  ǰҽ lockmytask û? ..ʲô! ! .. O.K! û
  ϵ, ڽӢ֮, Ӳ. ٻһ, 
   destroywindow  .

  1. More Space 2.7  Duplicate Files  ĵ.
  2.һ´ŵѡһ, ʱһС.
  3. Ctrl-d ,  sice .
  4. bpx destroywindow,  F5 .
  5.һ "OK" ʱ, ᱻ sice . : 
  
  14F:BFF62391  MOV     CL,B4           ; <- ڴ
                JMP     BFF623D7

  6.һ F12 , Ȼ͵Ŀ! :

  14F:417BB4    RET     ; <- .

  7.ٰһ F12 , :

  14F:423C6B    CALL    [EDX+68]
                MOV     EDX,[EBP-04] ; <- .

  ûע⵽и CALL ? ͨ CALL ʱ, Ҫȿ
  ûжʽ. еĻ, ͣеĶϵ, Ǹ CALL . 
  ʽ֮, һ´ŵѡ,  sice ֮,  F10  
  Ǹ CALL , ǲСӵ֮ CALL .

  , ͣеĶϵ,  "-5" , ٰ "OK" ǰ
  , ٰ DestroyWindow  .  "OK" , һֱ F12, ֱ
  ش˵صһ CALL Ϊֹ.

  8.ϵ F12  , ᷴص..:

  14F:4C079C    CALL    470FF8  ; <- ڴԴ F10  .
                JMP             ; <- .  

  9.Ȼ CALL 470FF8  Сӵ! Ͽ..:

  14F:4C078E    CALL    4B9378  ; <- Ǻ˶ܲ, ۲.
                TEST    AL,AL   ; <- ڴ֮..
                JNZ     4C97A3

 10.ǰжϵͣһ.  TEST  AL,AL  һ, ѹ
     F5 , Ŀʽ. һŵС, ֻᱻ SICE . 

 11. AL ĳ 1, ֮. ԵĽ, ܳС, Ҫ
    Ҫ, Ĵŵ, Ȼִ! 

 12.ǾͽǸ CALL ..:
     
  :u 4b9378 l 80
  014F:004B9378  PUSH    EBX
                 PUSH    ESI
                 XOR     EBX,EBX
        :                       :

 13.һ. ǽҪ? 

  Ϊ <-9>  AL ʱ, ֪ AL=0 ز! Ҫ
  ˵ص routine, ʲô , AL Ų 0  ... 
  , :

  014F:004B937C  PUSH    00008000
                 CALL    KERNEL32!SetErrorMode
                 MOV     ESI,EAX
                 PUSH    004B93EC               ; <- λַ Dump 

                 CALL    KERNEL32!LoadLibraryA  ; <-  .DLL ʱ, 
                                                ;    õ˺ʽ. һ
                                                ;     Help ע
                                                ;    ½.
  014F:004B9392  MOV     [004C2C00],EAX
                 MOVZX   EAX,SI
                 PUSH    EAX
                 CALL    KERNEL32!SetErrorMode
                 CMP     DWORD PTR [004C2C00],20
                 JL      004B93E4               ; <- һж.

  014F:004B93A9  PUSH    004B93F8
                 MOV     EAX,[004C2C00]
                 PUSH    EAX
                 CALL    KERNEL32!GetProcAddress

  014F:004B93B9  MOV     ESI,EAX
                 MOV     [004C3964],ESI
                 TEST    ESI,ESI
                 JZ      004B93D9       ; <- Ҳһж..

  014F:004B93C5  MOV     EAX,000004D2
                 CALL    [004C3964]
                 CMP     EAX,000004D2
                 JNZ     004B93D9       ; <- һж.

  014F:004B93D7  MOV     BL,01          ; <- 01 ? ֮Ȫ!
         4B93D9  MOV     EAX,[004C2C00] 
                 PUSH    EAX
                 CALL    KERNEL32!FreeLibrary ;  .DLL ŵ.

  014F:004B93E4  MOV     EAX,EBX        ; Ŷ! ԭ EAX   EBX  
                 POP     ESI
                 POP     EBX
                 RET

  ! ͽΪֹ. Ҫ, Լ! Ҫܲ, Ѿ
  ; ֲҪ˵,  Hacker еִϰ! Ҳ
  ǶһЩԵ! O.K ?...¿....

====== Error Free 20/20 =======================================================

Cwin95 - ϸ 8 ֮һ

  ̸̸еƫ Hacking ()  "" ...

  ʵڿԾ CWin95 ͵ķ, ڼ޸ļ¼
  , ѾԴﵽˡųɵ; ʣµһ, Ҳ
  ҪǸ͵. 

  Գٳûаѷ Post , ΪûǸĿҪ
  ,  Post , ҲûʲС·..

  , Ӣʹ MS Sans Serif - 8 
  , ſɷֳ:

  1. GetSystemMetrics(2Ah)  طֵʱ,  "ϸ-8" 
    ʾ. : UltraEdit, Win Hacker ...

  2.Ӧ屾ϵͳ, Ȼ,  "MS Sans
    Serif-8", ʾ. Ϻ, һд
    ʱ,  "ϸ-8" . 

    ĳ "MS Sans Serif-9 " ʱ, һ "ϸ
    -8" , ճĻ. Ӧ CWin95 õ MS Sans Serif  
     True Type  İ! : Agent ..
  
  ε, һ, Ļʱ, һ
  , ָߵ, Ϊ "MS Sans Serif -8" Ȼ "ϸ
  -9" ĸ. 

  õ, ָ߲ʱ, ճĳЩĲ컭
  桢ڰ... .

  : Powertoy  tweakui.
      Paint Shop Pro -> Color -> Edit Palette
      ShellWizard 3.0 桹

  ҵĵĳ True Type  ͵,  -9  "MS Sans
  Serif-8 " һߡһ, ǲ...!! û! ȷ..

  ЩҾ͵, Ҳҽ͵, 
  ΪԼ, ܿ˰! , ν
  벻 PC ˵....! Ҳ..

   MAC  , ȻһƱȫð;  PC , һƱ
  , νֻСè֧, ҶǼǰ
  ,  "" мһ. ֻǳϵð֮, 
  ǲ.

  Һһ Fmonster35 , ԸεһЩ, 
  ָ߻ǸĲ. еĹƬеļǧ Font , 
  ҵһ. Ψһϧб. Ǻϸе. 

   font , ҰΪ TS Sans Serif,  MS Sans Serif
  һ,  UltraEdit  ,  Appz ʱ, ȽϷ! 
   Appz ֻĵȳ, һһֶ. 
  ҲȡΪ TS Sans Serif . 

  ҪתɽϺÿ "ϸ 9" , һЩ, 
  :

  1. 08 00 4D 00 53 00 20 00 53 00 .
       09 00 54 00 53 00 20 00 53 00 .
       ^^    ^^
     Replace ALL . 

    09 ָ -9, 54  T,  MS Sans Serif  ĳ TS Sans Serif. 
    ҪҪĳ TS Sans Serif ,  "ϸ-9" Ӣ
    гҪ, : Easy CD Pro 95 V2.11(20) ťϵ.

    , ʾ MS Sans Serif-8 , ֻҪĻ
    , ĳ -9 Ҳû. : Agent .
    
  2.б,  4D 00 53 00 20 00 53, ѵʱ, 
    ῴǰм, :

     08 00 00 00 00 01 4D 00 53 00 20 
     09                54(T) 

    : FsPatch, WinPatch . ĳ TS Sans Serif-9 ȽϺÿ.

  3.,  08 00 48 00 65 00 6C 00 76 00
         Replace All 09 00 48 00 65 00 6C 00 76 00

     Helv-8 ĳ Helv-9 , : UltraEdit ..

   win.ini , , Ǿо!

[fonts]
[FontSubstitutes]
Helv=MS Sans Serif
Tms Rmn=MS Serif
Times=Times New Roman
Helvetica=Arial
MS Shell Dlg=MS Sans Serif
Arial Cyr,204=Arial,204
Courier New Cyr,204=Courier New,204
Times New Roman Cyr,204=Times New Roman,204
Arial Greek,161=Arial,161
Courier New Greek,161=Courier New,161
Times New Roman Greek,161=Times New Roman,161
Arial CE,238=Arial,238
Courier New CE,238=Courier New,238
Times New Roman CE,238=Times New Roman,238

  Ҫص TS Sans Serif  Tnimbusi.zip , Ұ
   ftp.tku.edu.tw   upload Ŀ¼, һ, , ȡȨӦ
  þͻῪ. 

  ץ⿪, ʱĿ¼, û windows\fonts
  оͿ.

== E-mail: paulgao@nease.net =  = : ߴ  06/09/97, 08/28/97. ===
