salut ahhhh quel plaisir de contredire NOWID
et c est qu un petit extrait du code c++:lol:
On a le droit de modifier les variables mais pas les lignes de codes ainsi que les leurs emplacements ..... c est ce que j ai compris
0049F18B >/$ 55 PUSH EBP
0049F18C |. 8BEC MOV EBP,ESP
0049F18E |. 6A FF PUSH -1
0049F190 |. 68 108F4A00 PUSH tomb4.004A8F10
0049F195 |. 68 08DF4900 PUSH tomb4.0049DF08 ; SE handler installation
0049F19A |. 64:A1 00000000 MOV EAX,DWORD PTR FS:[0]
0049F1A0 |. 50 PUSH EAX
0049F1A1 |. 64:8925 000000>MOV DWORD PTR FS:[0],ESP
0049F1A8 |. 83EC 58 SUB ESP,58
0049F1AB |. 53 PUSH EBX
0049F1AC |. 56 PUSH ESI
0049F1AD |. 57 PUSH EDI
0049F1AE |. 8965 E8 MOV DWORD PTR SS:[EBP-18],ESP
0049F1B1 |. E8 CA7B0000 CALL tomb4.004A6D80
0049F1B6 |. 90 NOP
0049F1B7 |. 33D2 XOR EDX,EDX
0049F1B9 |. 8AD4 MOV DL,AH
0049F1BB |. 8915 B86D7E00 MOV DWORD PTR DS:[7E6DB8],EDX
0049F1C1 |. 8BC8 MOV ECX,EAX
0049F1C3 |. 81E1 FF000000 AND ECX,0FF
0049F1C9 |. 890D B46D7E00 MOV DWORD PTR DS:[7E6DB4],ECX
0049F1CF |. C1E1 08 SHL ECX,8
0049F1D2 |. 03CA ADD ECX,EDX
0049F1D4 |. 890D B06D7E00 MOV DWORD PTR DS:[7E6DB0],ECX
0049F1DA |. C1E8 10 SHR EAX,10
0049F1DD |. A3 AC6D7E00 MOV DWORD PTR DS:[7E6DAC],EAX
0049F1E2 |. 6A 01 PUSH 1
0049F1E4 |. E8 0D140000 CALL tomb4.004A05F6
0049F1E9 |. 59 POP ECX
0049F1EA |. 85C0 TEST EAX,EAX
0049F1EC |. 75 08 JNZ SHORT tomb4.0049F1F6
0049F1EE |. 6A 1C PUSH 1C
0049F1F0 |. E8 C3000000 CALL tomb4.0049F2B8
0049F1F5 |. 59 POP ECX
0049F1F6 |> E8 C5380000 CALL tomb4.004A2AC0
0049F1FB |. 85C0 TEST EAX,EAX
0049F1FD |. 75 08 JNZ SHORT tomb4.0049F207
0049F1FF |. 6A 10 PUSH 10
0049F201 |. E8 B2000000 CALL tomb4.0049F2B8
0049F206 |. 59 POP ECX
0049F207 |> 33F6 XOR ESI,ESI
0049F209 |. 8975 FC MOV DWORD PTR SS:[EBP-4],ESI
0049F20C |. E8 F3360000 CALL tomb4.004A2904
0049F211 |. FF15 28714A00 CALL DWORD PTR DS:[<&KERNEL32.GetCommand>; [GetCommandLineA
0049F217 |. A3 E4138100 MOV DWORD PTR DS:[8113E4],EAX
0049F21C |. E8 05460000 CALL tomb4.004A3826
0049F221 |. A3 206D7E00 MOV DWORD PTR DS:[7E6D20],EAX
0049F226 |. E8 AE430000 CALL tomb4.004A35D9
0049F22B |. E8 F0420000 CALL tomb4.004A3520
0049F230 |. E8 F9390000 CALL tomb4.004A2C2E
0049F235 |. 8975 D0 MOV DWORD PTR SS:[EBP-30],ESI
0049F238 |. 8D45 A4 LEA EAX,DWORD PTR SS:[EBP-5C]
0049F23B |. 50 PUSH EAX ; /pStartupinfo
0049F23C |. FF15 2C714A00 CALL DWORD PTR DS:[<&KERNEL32.GetStartup>; \GetStartupInfoA
0049F242 |. E8 81420000 CALL tomb4.004A34C8
0049F247 |. 8945 9C MOV DWORD PTR SS:[EBP-64],EAX
0049F24A |. F645 D0 01 TEST BYTE PTR SS:[EBP-30],1
0049F24E |. 74 06 JE SHORT tomb4.0049F256
0049F250 |. 0FB745 D4 MOVZX EAX,WORD PTR SS:[EBP-2C]
0049F254 |. EB 03 JMP SHORT tomb4.0049F259
0049F256 |> 6A 0A PUSH 0A
0049F258 |. 58 POP EAX
0049F259 |> 50 PUSH EAX ; /Arg4
0049F25A |. FF75 9C PUSH DWORD PTR SS:[EBP-64] ; |Arg3
0049F25D |. 56 PUSH ESI ; |Arg2
0049F25E |. 56 PUSH ESI ; |/pModule
0049F25F |. FF15 70704A00 CALL DWORD PTR DS:[<&KERNEL32.GetModuleH>; |\GetModuleHandleA
0049F265 |. 50 PUSH EAX ; |Arg1
0049F266 |. E8 B5D4FEFF CALL tomb4.0048C720 ; \tomb4.0048C720
0049F26B |. 8945 A0 MOV DWORD PTR SS:[EBP-60],EAX
0049F26E |. 50 PUSH EAX
0049F26F |. E8 E7390000 CALL tomb4.004A2C5B
0049F274 |. 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14]
0049F277 |. 8B08 MOV ECX,DWORD PTR DS:[EAX]
0049F279 |. 8B09 MOV ECX,DWORD PTR DS:[ECX]
0049F27B |. 894D 98 MOV DWORD PTR SS:[EBP-68],ECX
0049F27E |. 50 PUSH EAX
0049F27F |. 51 PUSH ECX
0049F280 |. E8 C93A0000 CALL tomb4.004A2D4E
0049F285 |. 59 POP ECX
0049F286 |. 59 POP ECX
0049F287 \. C3 RETN
0049F288 8B DB 8B
0049F289 65 DB 65 ; CHAR 'e'
0049F28A E8 DB E8
0049F28B FF DB FF
0049F28C 75 DB 75 ; CHAR 'u'
0049F28D 98 DB 98
0049F28E E8 DB E8
0049F28F D9 DB D9
0049F290 39 DB 39 ; CHAR '9'
0049F291 00 DB 00
0049F292 00 DB 00
0049F293 /$ 833D 286D7E00 >CMP DWORD PTR DS:[7E6D28],1
0049F29A |. 75 05 JNZ SHORT tomb4.0049F2A1
0049F29C |. E8 B7460000 CALL tomb4.004A3958
0049F2A1 |> FF7424 04 PUSH DWORD PTR SS:[ESP+4]
0049F2A5 |. E8 E7460000 CALL tomb4.004A3991
0049F2AA |. 68 FF000000 PUSH 0FF
0049F2AF |. FF15 10C14B00 CALL DWORD PTR DS:[4BC110] ; tomb4.004A2C6C
0049F2B5 |. 59 POP ECX
0049F2B6 |. 59 POP ECX
0049F2B7 \. C3 RETN
0049F2B8 /$ 833D 286D7E00 >CMP DWORD PTR DS:[7E6D28],1
0049F2BF |. 75 05 JNZ SHORT tomb4.0049F2C6
0049F2C1 |. E8 92460000 CALL tomb4.004A3958
0049F2C6 |> FF7424 04 PUSH DWORD PTR SS:[ESP+4]
0049F2CA |. E8 C2460000 CALL tomb4.004A3991
0049F2CF |. 59 POP ECX
0049F2D0 |. 68 FF000000 PUSH 0FF ; /ExitCode = FF
0049F2D5 \. FF15 20714A00 CALL DWORD PTR DS:[<&KERNEL32.ExitProces>; \ExitProcess
0049F2DB . C3 RETN
0049F2DC $ 55 PUSH EBP
0049F2DD . 8BEC MOV EBP,ESP
0049F2DF . 6A FF PUSH -1
0049F2E1 . 68 208F4A00 PUSH tomb4.004A8F20
0049F2E6 . 68 08DF4900 PUSH tomb4.0049DF08 ; SE handler installation
0049F2EB . 64:A1 00000000 MOV EAX,DWORD PTR FS:[0]
0049F2F1 . 50 PUSH EAX
0049F2F2 . 64:8925 000000>MOV DWORD PTR FS:[0],ESP
0049F2F9 . 83EC 18 SUB ESP,18
0049F2FC . 53 PUSH EBX
0049F2FD . 56 PUSH ESI
0049F2FE . 57 PUSH EDI
0049F2FF . 8B75 08 MOV ESI,DWORD PTR SS:[EBP+8]
0049F302 . 0FAF75 0C IMUL ESI,DWORD PTR SS:[EBP+C]
0049F306 . 8975 0C MOV DWORD PTR SS:[EBP+C],ESI
0049F309 . 8975 E4 MOV DWORD PTR SS:[EBP-1C],ESI
0049F30C . 83FE E0 CMP ESI,-20
0049F30F . 77 14 JA SHORT tomb4.0049F325
0049F311 . 33DB XOR EBX,EBX
0049F313 . 3BF3 CMP ESI,EBX
0049F315 . 75 03 JNZ SHORT tomb4.0049F31A
0049F317 . 6A 01 PUSH 1
0049F319 . 5E POP ESI
0049F31A > 83C6 0F ADD ESI,0F
0049F31D . 83E6 F0 AND ESI,FFFFFFF0
0049F320 . 8975 0C MOV DWORD PTR SS:[EBP+C],ESI
0049F323 . EB 02 JMP SHORT tomb4.0049F327
0049F325 > 33DB XOR EBX,EBX
0049F327 > 895D E0 MOV DWORD PTR SS:[EBP-20],EBX
0049F32A . 83FE E0 CMP ESI,-20
0049F32D . 0F87 A8000000 JA tomb4.0049F3DB
0049F333 . A1 C4038100 MOV EAX,DWORD PTR DS:[8103C4]
0049F338 . 83F8 03 CMP EAX,3
0049F33B . 75 41 JNZ SHORT tomb4.0049F37E
0049F33D . 8B7D E4 MOV EDI,DWORD PTR SS:[EBP-1C]
0049F340 . 3B3D BC038100 CMP EDI,DWORD PTR DS:[8103BC]
0049F346 . 77 7C JA SHORT tomb4.0049F3C4
0049F348 . 6A 09 PUSH 9 ; /Arg1 = 00000009
0049F34A . E8 41250000 CALL tomb4.004A1890 ; \tomb4.004A1890
0049F34F . 59 POP ECX
0049F350 . 895D FC MOV DWORD PTR SS:[EBP-4],EBX
0049F353 . 57 PUSH EDI
0049F354 . E8 96160000 CALL tomb4.004A09EF
0049F359 . 59 POP ECX
0049F35A . 8945 E0 MOV DWORD PTR SS:[EBP-20],EAX
0049F35D . 834D FC FF OR DWORD PTR SS:[EBP-4],FFFFFFFF
0049F361 . E8 0F000000 CALL tomb4.0049F375
0049F366 . 395D E0 CMP DWORD PTR SS:[EBP-20],EBX
0049F369 . 74 5E JE SHORT tomb4.0049F3C9
0049F36B . FF75 E4 PUSH DWORD PTR SS:[EBP-1C]
0049F36E . EB 48 JMP SHORT tomb4.0049F3B8
0049F370 33 DB 33 ; CHAR '3'
0049F371 DB DB DB
0049F372 8B DB 8B
0049F373 75 DB 75 ; CHAR 'u'
0049F374 0C DB 0C
0049F375 /$ 6A 09 PUSH 9
0049F377 |. E8 75250000 CALL tomb4.004A18F1
0049F37C |. 59 POP ECX
0049F37D \. C3 RETN
0049F37E > 83F8 02 CMP EAX,2
0049F381 . 75 41 JNZ SHORT tomb4.0049F3C4
0049F383 . 3B35 FCE54B00 CMP ESI,DWORD PTR DS:[4BE5FC]
0049F389 . 77 39 JA SHORT tomb4.0049F3C4
0049F38B . 6A 09 PUSH 9 ; /Arg1 = 00000009
0049F38D . E8 FE240000 CALL tomb4.004A1890 ; \tomb4.004A1890
0049F392 . 59 POP ECX
0049F393 . C745 FC 010000>MOV DWORD PTR SS:[EBP-4],1
0049F39A . 8BC6 MOV EAX,ESI
0049F39C . C1E8 04 SHR EAX,4
0049F39F . 50 PUSH EAX
0049F3A0 . E8 ED200000 CALL tomb4.004A1492
0049F3A5 . 59 POP ECX
0049F3A6 . 8945 E0 MOV DWORD PTR SS:[EBP-20],EAX
0049F3A9 . 834D FC FF OR DWORD PTR SS:[EBP-4],FFFFFFFF
0049F3AD . E8 4C000000 CALL tomb4.0049F3FE
0049F3B2 . 395D E0 CMP DWORD PTR SS:[EBP-20],EBX
0049F3B5 . 74 12 JE SHORT tomb4.0049F3C9
0049F3B7 . 56 PUSH ESI
0049F3B8 > 53 PUSH EBX
0049F3B9 . FF75 E0 PUSH DWORD PTR SS:[EBP-20]
0049F3BC . E8 2F470000 CALL tomb4.004A3AF0
0049F3C1 . 83C4 0C ADD ESP,0C
0049F3C4 > 395D E0 CMP DWORD PTR SS:[EBP-20],EBX
0049F3C7 . 75 3E JNZ SHORT tomb4.0049F407
0049F3C9 > 56 PUSH ESI ; /HeapSize
0049F3CA . 6A 08 PUSH 8 ; |Flags = HEAP_ZERO_MEMORY
0049F3CC . FF35 C0038100 PUSH DWORD PTR DS:[8103C0] ; |hHeap = NULL
0049F3D2 . FF15 4C714A00 CALL DWORD PTR DS:[<&KERNEL32.HeapAlloc>>; \HeapAlloc
0049F3D8 . 8945 E0 MOV DWORD PTR SS:[EBP-20],EAX
0049F3DB > 395D E0 CMP DWORD PTR SS:[EBP-20],EBX
0049F3DE . 75 27 JNZ SHORT tomb4.0049F407
0049F3E0 . 391D 386D7E00 CMP DWORD PTR DS:[7E6D38],EBX
0049F3E6 . 74 1F JE SHORT tomb4.0049F407
0049F3E8 . 56 PUSH ESI
0049F3E9 . E8 78100000 CALL tomb4.004A0466
0049F3EE . 59 POP ECX
0049F3EF . 85C0 TEST EAX,EAX
0049F3F1 .^0F85 30FFFFFF JNZ tomb4.0049F327
0049F3F7 . EB 11 JMP SHORT tomb4.0049F40A
0049F3F9 33 DB 33 ; CHAR '3'
0049F3FA DB DB DB
0049F3FB 8B DB 8B
0049F3FC 75 DB 75 ; CHAR 'u'
0049F3FD 0C DB 0C
0049F3FE /$ 6A 09 PUSH 9
0049F400 |. E8 EC240000 CALL tomb4.004A18F1
0049F405 |. 59 POP ECX
0049F406 \. C3 RETN
0049F407 > 8B45 E0 MOV EAX,DWORD PTR SS:[EBP-20]
0049F40A > 8B4D F0 MOV ECX,DWORD PTR SS:[EBP-10]
0049F40D . 64:890D 000000>MOV DWORD PTR FS:[0],ECX
0049F414 . 5F POP EDI
0049F415 . 5E POP ESI
0049F416 . 5B POP EBX
0049F417 . C9 LEAVE
0049F418 . C3 RETN
0049F419 /$ 68 00000300 PUSH 30000
0049F41E |. 68 00000100 PUSH 10000 ; UNICODE "=::=::\"
0049F423 |. E8 55470000 CALL tomb4.004A3B7D
0049F428 |. 59 POP ECX
0049F429 |. 59 POP ECX
0049F42A \. C3 RETN
0049F42B /> 55 PUSH EBP
0049F42C |. 8BEC MOV EBP,ESP
0049F42E |. 83EC 18 SUB ESP,18
0049F431 |. DD05 488F4A00 FLD QWORD PTR DS:[4A8F48]
0049F437 |. DD5D F8 FSTP QWORD PTR SS:[EBP-8]
0049F43A |. DD05 408F4A00 FLD QWORD PTR DS:[4A8F40]
0049F440 |. DD5D F0 FSTP QWORD PTR SS:[EBP-10]
0049F443 |. DD45 F0 FLD QWORD PTR SS:[EBP-10]
0049F446 |. DC75 F8 FDIV QWORD PTR SS:[EBP-8]
0049F449 |. DC4D F8 FMUL QWORD PTR SS:[EBP-8]
0049F44C |. DC6D F0 FSUBR QWORD PTR SS:[EBP-10]
0049F44F |. DD5D E8 FSTP QWORD PTR SS:[EBP-18]
0049F452 |. DD45 E8 FLD QWORD PTR SS:[EBP-18]
0049F455 |. DC1D 388F4A00 FCOMP QWORD PTR DS:[4A8F38]
0049F45B |. DFE0 FSTSW AX
0049F45D |. 9E SAHF
0049F45E |. 76 05 JBE SHORT tomb4.0049F465
0049F460 |. 6A 01 PUSH 1
0049F462 |. 58 POP EAX
0049F463 |. C9 LEAVE
0049F464 |. C3 RETN
0049F465 |> 33C0 XOR EAX,EAX
0049F467 |. C9 LEAVE