

·¬¤§¨¦¥xª©UCE.§l©ÇµL¼Ä.Vicious Engine 5.0 ¸üÂI
¸üÂI¦b¤å³¹³Ì©³³B
(À£ÁY¥]¤º¥]¬A°ê¥~ª© Vicious Engine 5.0+¥xÆWª© Vicious Engine 5.0 Alter+¸Ô²Ó¹Ï¤ù±Ð¾Ç)
«e¨¥¡G¥Ø«e°ê¥~³Ì·sª©¥»ªºUCE¡A¥Dn¥]¬A¥H¤U´XºØ(¥xª©Áö¾A¥Î¡A¦ý¦³³/¦h¹q¸£µLªk¨Ï¥Î)¡G
Buffy Engine 2.1¡BVicious Engine 5.0¡BRevolution Engine 4.2¡BXterminator Engine 2.0µ¥µ¥
¦Ó¥xÆWª©¥»ªºUCE(¥xÆW¤H¦Û»sªº)¡A¥Ø«e¯à¥Îªº¤j·§´N¥u¦³MoonLight Engine 1001(1018)©MVicious Engine 5.0 Alter
MoonLight Engine 1001(1018)(´L«ì§@ªÌ¡A¦]¦¹¤£´£¨Ñ¸üÂI¤Îµ{¦¡»¡©ú)
Vicious Engine 5.0 Alter(ì§@ªÌ¦P·NÂà¶K¡A¦]¦¹·|´£¨Ñ¸üÂI¤Îµ{¦¡»¡©ú¡A¥Ñ·|û´£¨Ñ)
PS¡Gµ{¦¡ì¦WVicious Engine 5.0 FIX¡A¦ýÁÙ¬Oı±o½Ķ¦¨³o¼Ë¤ñ¸û¶KVicious Engine 5.0 Alter(ק睊)
°ê¥~ª© Vicious Engine 5.0
Vicious Engine 5.0 »s§@ªÌ¡GJimmy Lin & Dark Byte(CE½×¾ÂÁ`¾Â¥D¡A°O¾ÐÅé×§ïµ{¦¡©l¯ª)
Bypass NP Rev¡G1007
PS¡G¾A¦X°ê¥~ª©·¬¤§¨¦¨Ï¥Î¡A¥xª©·¬¤§¨¦³¡¤Àª±®a¥i¥Î¡A·Q´ú¸Õªº·|û¥i¤U¸ü¨Ó¬ã¨s
¥xÆWª© Vicious Engine 5.0 Alter
Vicious Engine 5.0 Alter ×§ïªÌ¡G¥Õ¥Ø°ê¤¤¥Í
Bypass NP Rev¡G1021
PS¡G¥Ñª±®a"¥Õ¥Ø°ê¤¤¥Í"×§ï»s¦¨¡A¥i¹LNP1021¡A¥B¥i°t¦X·¬¤§¨¦¹F¤H¨Ï¥Î(¦ý¹F¤Hn§ó·s¦¨·sª©)¡A
¤£»Ý¬[³]¦øªA¾¹¡AÀÉ®×§Ú¤w·s¼WVEµn¿ýÀɨî³±¼kerneldata.dat(½Ð¦Û¦æ²£¥Í¡A¸û¤£·|¥X¿ù)
¦]°ê¥~ª©Vicious Engine 5.0¥u¦³³¡¤Àª±®a¥i¥Î¡A¦]¦¹¤£°µ±Ð¾Ç¡A¥H¤U¬O¥xÆWª©Vicious Engine 5.0 Alter¨Ï¥Î»¡©ú¡G
1.½Ð¥ý°õ¦æSystemcallretriever.exe¡AµM«á«öYes ¡÷ Yes ¡÷ OK¡A¦¹¨BÆJ¬OÅý¥L²£¥Íkerneldata.datÀÉ
2.°õ¦æVicious Engine 5.0 Alter¸ê®Æ§¨¸Ì±ªºSettings.reg(¤]´N¬OVEªºµn¤J½s¿èÀÉ)¡A«ö¬O(Y)´N¦n
3.°õ¦æVE5_FIX.EXE¡AµM«á¶}±Ò·¬¤§¨¦¨ì¿ï¤Hµe±¡A¸õ¥X¦^¨ìVE¡A«öProcess Watch¡A¿ï¾ÜMapleStory.exe
4.¿é¤J¥N½X¡A¨Ã¤Ä¿ïJMP«ü¼Ð½X(ZF CF EIP¤§Ãþªº)¡A¶i¤J¹CÀ¸§Y¥i¨Ï¥Î
(Y³Q°»´ú¥X¨Ï¥Î¥~±¾µ{¦¡©Î¨Ï¥Î¥N½X§YÂ_½u¡A«·s¶}¾÷§Y¥i)
5.Y¤U¦¸¨Ï¥Î³Q°»´ú¥X¨Ï¥Î¥~±¾µ{¦¡©Î¨Ï¥Î¥N½X§YÂ_½u¡A¤@¼Ë«·s¶}¾÷§Y¥i¸Ñ¨M
¸É¥R¡GY«·s¶}¾÷ÁÙ¬OµLªk¸Ñ¨M¡A½Ð¦b¨Ï¥Î«e¦h°µ¥H¤U¨âÓ¨BÆJ
1.½Ð¥ýÀˬd¹q¸£ªº¶×¬y±Æ¼eªº¦ì¤¸¡A32¦ì¤¸ªÌ¤£»Ý×§ïDEP¡A64¦ì¤¸½Ð¦Û¦æ×§ï¡A×§ï¤èªk¦p¤U
×§ïDEP(¸ê®Æ°õ¦æ¨¾¤î)¤èªk¦p¤U¡G
ÂI¿ï[¶}©l]¡÷[§Úªº¹q¸£]¡÷ÂI¥kÁä¡÷[¤º®e]¡÷[¶i¶¥]¡÷[±Ò°Ê¤Î×´_ªº³]©w]¡÷[½s¿è]
´N·|¶}±Ò boot.ini ¨Ó½s¿è¡Aª`·N¸Ì±¦³¤@¬q¤å¦r
/noexecute=optin
±N¥L§ï¬°(¤j¤p¼g¨S®t§O)
/noexecute=alwaysoff
¦sÀɤ§«á¡A«·s¶}¾÷¡AÀ³¸Ó´N¥i¥¿±`¨Ï¥Î
PS¡Gª`·N¡A¤d¸U§O¥´¿ù¡A§_«h¹q¸£¥i¯à·|¥X°ÝÃD¡A«áªG¦Ût
2.½ÐÀˬdµn¤J½s¿èÀÉ(µù¥Uªí)¡A§â©Ò¦³xxxxxx Engineªº¾÷½X§¹¥þ§R°£(ª½±µ§R°£xxxxxx Engine¸ê®Æ§Y¥i)
ÂI¿ï[¶}©l]¡÷[°õ¦æ]¡÷¿é¤Jregedit¡÷[½T©w]¡÷§ä¨ì[HEKY_CURRENT_USER]¡÷[Software]
¡÷§R°£©Ò¦³xxxxxx Engine¾÷½X¸ê®Æ§¨¡A¨Ã«·s¶}¾÷§Y¥i¨Ï¥Î
PS¡GY¨â¶µ³£¦³×§ïªÌ¡A½Ð§¹¦¨¤Wzª`·N¨Æ¶µ¡A¦b«¶}¾÷§Y¥i(¤£»Ý³]©w§¹¤@Ó´N«¶}¾÷¤@¦¸)
PS¡G°ê¥~ª©ªºUCE¡A¦]¨Ï¥ÎCRC bypass¡A¥u»Ý¤Ä¿ï¡A¤£¶·¥´¤Ä§Y¥i¨Ï¥ÎªºÃö«Y¡A¥B¤£4²Õ¥N½X(CRCªº¦n³B)
¦]¦¹´X¥G³£¤Ö¤F¥kÁä¡÷Change Registerªº¥/¯à¡A©Ò¥H§O¦A¸ß°Ý¦p¦ó¨Ï¥ÎCTÀɪºJMP«ü¼Ð½X(ZF CF EIP¤§Ãþªº)
¥N½X¨Ï¥Î»¡©ú¦p¤U¡G
1.½ÐÂI¿ïMemory view
2.ÀH«K§äÓ¦a¤è«ö¥kÁä¡÷Go to addres¡A¿é¤J¥N½X«á«öOK
3.±µµÛ×§ïJMP«ü¼Ð½X(ZF CF EIP¤§Ãþªº)¡A«ö¥kÁä¡÷Change register at this location¡A§â«ü¼Ð½X¥´¤Ä«á«öOK§Y¥i
EIP¨Ï¥Î¤èªk¡G
1.½ÐÂI¿ïMemory view
2.«öctrl+a¡A·|¶]¥XAuto assemble¡A¶K¤Wscript½X©ÎªÌctrl+o¶}±ÒceaÀÉ¡A
«öWrite code¡A«öYes¡A·|¶]¥X8½X¼Æ¾Ú¡A§â¥¦¶K¨ì¥N½XªºEIP§Y¥i
===========¹Ï¤ù±Ð¾Ç================
¹Ï¤ù¤Ó¦h,¤£¤@¤@¶K¥X,½Ð¤U¸ü«á¦Û¦æ¬d¬Ý
