通达信修改技术：暴力初步(直接免费登录高级行情)

以老版为例，细心你会发现诀窍。开通仍需工具。特别高级当然是少数老师的专利！以下特高级修改相关笔记如下

仅股海网股友交流所用！

{股海网提供 www.guhai.com.cn}

修改笔记：
1：
00484179 . 68 54496800 push TdxW.00684954 ; 5.66
0048417E . 50 push eax
0048417F . 8D4424 44 lea eax,dword ptr ss:[esp+0x44]
00484183 . 50 push eax
00484184 . FF52 18 call dword ptr ds:[edx+0x18]
00484187 . 85C0 test eax,eax
00484189 . 0F85 85000000 jnz TdxW.00484214
0048418F . A1 F8E07F00 mov eax,dword ptr ds:[0x7FE0F8]
00484194 . BE 02000000 mov esi,0x2
00484199 . 3BC3 cmp eax,ebx
0048419B . 0F85 C6010000 jnz TdxW.00484367
004841A1 > 395C24 10 cmp dword ptr ss:[esp+0x10],ebx
004841A5 . 7E 44 jle XTdxW.004841EB
004841A7 . 83FE 02 cmp esi,0x2
004841AA EB 3F jmp XTdxW.004841EB (JNZ 改 JMP)
004841AC . 8B0D 10E07F00 mov ecx,dword ptr ds:[0x7FE010]
004841B2 . 53 push ebx
004841B3 . 68 39240000 push 0x2439
004841B8 . 68 11010000 push 0x111
004841BD . 8B51 20 mov edx,dword ptr ds:[ecx+0x20]
004841C0 . 52 push edx
004841C1 . FFD7 call edi



2：{股海网提供 www.guhai.com.cn}


004841D5 . E8 76A2FEFF call TdxW.0046E450
004841DA . 83C4 10 add esp,0x10
004841DD . 8BF0 mov esi,eax
004841DF . 6A 64 push 0x64
004841E1 . FFD5 call ebp
004841E3 . 391D F8E07F00 cmp dword ptr ds:[0x7FE0F8],ebx
004841E9 .^ 74 B6 je XTdxW.004841A1
004841EB > 83FE 01 cmp esi,0x1
004841EE . 0F85 73010000 jnz TdxW.00484367
004841F4 . 8B15 10E07F00 mov edx,dword ptr ds:[0x7FE010]
004841FA . 53 push ebx ; /lParam
004841FB . 68 15820000 push 0x8215 ; |wParam = 8215
00484200 . 68 11010000 push 0x111 ; |Message = WM_COMMAND
00484205 . 8B42 20 mov eax,dword ptr ds:[edx+0x20] ; |
00484208 . 50 push eax ; |hWnd
00484209 . FF15 C0246400 call dword ptr ds:[<&USER32.PostMessageA>; \PostMessageA
0048420F . E9 6D010000 jmp TdxW.00484381
00484214 > 8B4C24 24 mov ecx,dword ptr ss:[esp+0x24]
00484218 . B8 01000000 mov eax,0x1
0048421D . 3BC8 cmp ecx,eax
0048421F 90 nop （JNZ 改 90）
00484220 90 nop
00484221 . A3 F8E07F00 mov dword ptr ds:[0x7FE0F8],eax
00484226 . E9 40010000 jmp TdxW.0048436B
0048422B > 8B0D A8DE7F00 mov ecx,dword ptr ds:[0x7FDEA8]
00484231 . 8B11 mov edx,dword ptr ds:[ecx]
00484233 . FF52 08 call dword ptr ds:[edx+0x8]




3：{股海网提供 www.guhai.com.cn}


00484413 |. /74 1C je XTdxW.00484431
00484415 |. |8B40 20 mov eax,dword ptr ds:[eax+0x20]
00484418 |. |55 push ebp ; /lParam => 0
00484419 |. |55 push ebp ; |wParam => 0
0048441A |. |68 021B0000 push 0x1B02 ; |Message = MSG(1B02)
0048441F |. |50 push eax ; |hWnd
00484420 |. |FF15 C0246400 call dword ptr ds:[<&USER32.PostMessageA>; \PostMessageA
00484426 |. |892D 50DF7F00 mov dword ptr ds:[0x7FDF50],ebp
0048442C |. |E9 73030000 jmp TdxW.004847A4
00484431 |> \833D 50DF7F00>cmp dword ptr ds:[0x7FDF50],0x2
00484438 |. 74 1A je XTdxW.00484454
0048443A |. A1 10E07F00 mov eax,dword ptr ds:[0x7FE010]
0048443F |. 3BC5 cmp eax,ebp
00484441 |. 74 11 je XTdxW.00484454
00484443 |. 8B48 20 mov ecx,dword ptr ds:[eax+0x20]
00484446 |. 53 push ebx ; /lParam
00484447 |. 55 push ebp ; |wParam
00484448 |. 68 10180000 push 0x1810 ; |Message = MSG(1810)
0048444D |. 51 push ecx ; |hWnd
0048444E |. FF15 C0246400 call dword ptr ds:[<&USER32.PostMessageA>; \PostMessageA
00484454 |> 892D 50DF7F00 mov dword ptr ds:[0x7FDF50],ebp
0048445A |. E9 45030000 jmp TdxW.004847A4
0048445F |> A1 6CEF6800 mov eax,dword ptr ds:[0x68EF6C]
00484464 |. 892D 4CDF7F00 mov dword ptr ds:[0x7FDF4C],ebp
0048446A |. 3BC5 cmp eax,ebp
0048446C 90 nop （JNZ 改 90）
0048446D 90 nop
0048446E 90 nop
0048446F 90 nop
00484470 90 nop
00484471 90 nop
00484472 |. 391D 34DF7F00 cmp dword ptr ds:[0x7FDF34],ebx
00484478 |. 0F85 FF000000 jnz TdxW.0048457D
0048447E |. E8 6DBFFEFF call TdxW.004703F0
00484483 |. 85C0 test eax,eax
00484485 |. 0F84 F2000000 je TdxW.0048457D
0048448B |. 392D 10E07F00 cmp dword ptr ds:[0x7FE010],ebp
00484491 |. 0F84 0D030000 je TdxW.004847A4
00484497 |. A1 CCE07F00 mov eax,dword ptr ds:[0x7FE0CC]
0048449C |. 892D 2CE17F00 mov dword ptr ds:[0x7FE12C],ebp
004844A2 |. 3BC5 cmp eax,ebp
004844A4 |. 74 05 je XTdxW.004844AB
004844A6 |. E8 67F91900 call <jmp.&Viewthem.INFO_DisConnect>
004844AB |> 8B15 10E07F00 mov edx,dword ptr ds:[0x7FE010]
004844B1 |. 55 push ebp ; /lParam
004844B2 |. 55 push ebp ; |wParam
004844B3 |. 68 011B0000 push 0x1B01 ; |Message = MSG(1B01)
004844B8 |. 8B42 20 mov eax,dword ptr ds:[edx+0x20] ; |
004844BB |. 50 push eax ; |hWnd
004844BC |. FF15 C0246400 call dword ptr ds:[<&USER32.PostMessageA>; \PostMessageA
004844C2 |. A1 10E07F00 mov eax,dword ptr ds:[0x7FE010]
004844C7 |. 8B48 20 mov ecx,dword ptr ds:[eax+0x20]
004844CA |. 51 push ecx ; /hWnd
004844CB |. FF15 E8256400 call dword ptr ds:[<&USER32.IsWindowVisi>; \IsWindowVisible




4：{股海网提供 www.guhai.com.cn}



004ABE79 |. FF50 34 call dword ptr ds:[eax+0x34]
004ABE7C |. 837C24 00 01 cmp dword ptr ss:[esp],0x1
004ABE81 EB 06 jmp XTdxW.004ABE89 (JGE 改 JMP)
004ABE83 |. 33C0 xor eax,eax
004ABE85 |. 83C4 08 add esp,0x8
004ABE88 |. C3 retn
004ABE89 |> B8 01000000 mov eax,0x1
004ABE8E |. 83C4 08 add esp,0x8
004ABE91 \. C3 retn
004ABE92 90 nop
004ABE93 90 nop
004ABE94 90 nop
004ABE95 90 nop
004ABE96 90 nop
004ABE97 90 nop
004ABE98 90 nop
004ABE99 90 nop
004ABE9A 90 nop
004ABE9B 90 nop
004ABE9C 90 nop
004ABE9D 90 nop
004ABE9E 90 nop
004ABE9F 90 nop
004ABEA0 /$ A1 B8DE7F00 mov eax,dword ptr ds:[0x7FDEB8]
004ABEA5 |. 85C0 test eax,eax
004ABEA7 |. 74 1B je XTdxW.004ABEC4
004ABEA9 |. A1 ECE07F00 mov eax,dword ptr ds:[0x7FE0EC]
004ABEAE |. 85C0 test eax,eax
004ABEB0 |. 74 12 je XTdxW.004ABEC4
004ABEB2 |. A1 8C496800 mov eax,dword ptr ds:[0x68498C]
004ABEB7 |. 8B0D 5CE37F00 mov ecx,dword ptr ds:[0x7FE35C]
004ABEBD |. 3BC1 cmp eax,ecx
004ABEBF |. 7E 03 jle XTdxW.004ABEC4
004ABEC1 |. 33C0 xor eax,eax
004ABEC3 |. C3 retn
004ABEC4 |> B8 01000000 mov eax,0x1
004ABEC9 \. C3 retn
004ABECA 90 nop
004ABECB 90 nop
004ABECC 90 nop
004ABECD 90 nop
004ABECE 90 nop
004ABECF 90 nop
004ABED0 /$ 53 push ebx
004ABED1 |. 56 push esi
004ABED2 |. 8B35 10226400 mov esi,dword ptr ds:[<&MSVCRT.strstr>] ; msvcrt.strstr
004ABED8 |. 33C0 xor eax,eax
004ABEDA |. 68 5C3E6800 push TdxW.00683E5C ; /SDS
004ABEDF |. 68 2CE27F00 push TdxW.007FE22C ; |s1 = ""
004ABEE4 |. A3 D0486C00 mov dword ptr ds:[0x6C48D0],eax ; |
004ABEE9 |. A3 D4486C00 mov dword ptr ds:[0x6C48D4],eax ; |
004ABEEE |. A3 D8486C00 mov dword ptr ds:[0x6C48D8],eax ; |
004ABEF3 |. A3 DC486C00 mov dword ptr ds:[0x6C48DC],eax ; |
004ABEF8 |. A3 E4486C00 mov dword ptr ds:[0x6C48E4],eax ; |
004ABEFD |. A3 E8486C00 mov dword ptr ds:[0x6C48E8],eax ; |
004ABF02 |. A3 E0486C00 mov dword ptr ds:[0x6C48E0],eax ; |
004ABF07 |. FFD6 call esi ; \strstr


5：{股海网提供 www.guhai.com.cn}


004E3A3B . C2 0800 retn 0x8
004E3A3E 8BFF mov edi,edi
004E3A40 . 38384E00 dd TdxW.004E3838 ; 分支表 被用于 004E2C4D
004E3A44 . D2314E00 dd TdxW.004E31D2
004E3A48 . 28344E00 dd TdxW.004E3428
004E3A4C . FE324E00 dd TdxW.004E32FE
004E3A50 . 58354E00 dd TdxW.004E3558
004E3A54 . 4C314E00 dd TdxW.004E314C
004E3A58 . 772E4E00 dd TdxW.004E2E77
004E3A5C . 11394E00 dd TdxW.004E3911
004E3A60 . 9C394E00 dd TdxW.004E399C
004E3A64 . 542C4E00 dd TdxW.004E2C54
004E3A68 . 05314E00 dd TdxW.004E3105
004E3A6C . 042F4E00 dd TdxW.004E2F04
004E3A70 . C3304E00 dd TdxW.004E30C3
004E3A74 . 38304E00 dd TdxW.004E3038
004E3A78 . 243A4E00 dd TdxW.004E3A24
004E3A7C . 00 db 00 ; 分支 004E3A40 索引表
004E3A7D . 00 db 00
004E3A7E . 01 db 01
004E3A7F . 02 db 02
004E3A80 . 03 db 03
004E3A81 . 04 db 04
004E3A82 . 05 db 05
004E3A83 . 0E db 0E
004E3A84 . 0E db 0E
004E3A85 . 0E db 0E
004E3A86 . 0E db 0E
004E3A87 . 06 db 06
004E3A88 . 07 db 07
004E3A89 . 08 db 08 (09 改 08）
004E3A8A . 0E db 0E
004E3A8B . 0E db 0E
004E3A8C . 0E db 0E
004E3A8D . 0E db 0E
004E3A8E . 08 db 08
004E3A8F . 0E db 0E
004E3A90 . 0E db 0E
004E3A91 . 0E db 0E
004E3A92 . 0E db 0E
004E3A93 . 0E db 0E
004E3A94 . 0E db 0E
004E3A95 . 0E db 0E
004E3A96 . 0E db 0E
004E3A97 . 0E db 0E
004E3A98 . 0E db 0E
004E3A99 . 0E db 0E
004E3A9A . 0E db 0E
004E3A9B . 0E db 0E
004E3A9C . 0E db 0E
004E3A9D . 0E db 0E
004E3A9E . 0E db 0E
004E3A9F . 0E db 0E
004E3AA0 . 0E db 0E
004E3AA1 . 0E db 0E
004E3AA2 . 0E db 0E
004E3AA3 . 0E db 0E
004E3AA4 . 0A db 0A
004E3AA5 . 0E db 0E
004E3AA6 . 0B db 0B
004E3AA7 . 0E db 0E
004E3AA8 . 0C db 0C
004E3AA9 . 0E db 0E
004E3AAA . 0E db 0E
004E3AAB . 0E db 0E
004E3AAC . 0D db 0D
004E3AAD 8D49 00 lea ecx,dword ptr ds:[ecx]
004E3AB0 . 7B384E00 dd TdxW.004E387B ; 分支表 被用于 004E3874




6：{股海网提供 www.guhai.com.cn}


004E4BC3 |. FF52 14 call dword ptr ds:[edx+0x14]
004E4BC6 |. 8B0D A8DE7F00 mov ecx,dword ptr ds:[0x7FDEA8]
004E4BCC |. 8B85 FC040000 mov eax,dword ptr ss:[ebp+0x4FC]
004E4BD2 |. 8B95 08050000 mov edx,dword ptr ss:[ebp+0x508]
004E4BD8 |. 8D7C24 1C lea edi,dword ptr ss:[esp+0x1C]
004E4BDC |. 8B31 mov esi,dword ptr ds:[ecx]
004E4BDE |. 6A 00 push 0x0
004E4BE0 |. 57 push edi
004E4BE1 |. 8D7C24 18 lea edi,dword ptr ss:[esp+0x18]
004E4BE5 |. 68 5CE37F00 push TdxW.007FE35C
004E4BEA |. 57 push edi
004E4BEB |. 68 54496800 push TdxW.00684954 ; 5.66
004E4BF0 |. 50 push eax
004E4BF1 |. 52 push edx
004E4BF2 |. FF56 18 call dword ptr ds:[esi+0x18]
004E4BF5 E9 C0C11500 jmp TdxW.00640DCA （ test eax,eax 改 JMP+远跳转--你改空数据的位置）
004E4BFA 90 nop
004E4BFB 90 nop
004E4BFC 90 nop
004E4BFD |. 85C0 test eax,eax
004E4BFF |. 74 49 je XTdxW.004E4C4A
004E4C01 |. 83F8 01 cmp eax,0x1
004E4C04 |.^ 0F84 14FFFFFF je TdxW.004E4B1E
004E4C0A |. 8B0D A8DE7F00 mov ecx,dword ptr ds:[0x7FDEA8]
004E4C10 |. 8D4424 14 lea eax,dword ptr ss:[esp+0x14]
004E4C14 |. 50 push eax
004E4C15 |. 8B11 mov edx,dword ptr ds:[ecx]
004E4C17 |. FF52 70 call dword ptr ds:[edx+0x70]



7：{股海网提供 www.guhai.com.cn}



00640DA1 CC int3
00640DA2 CC int3
00640DA3 CC int3
00640DA4 . 8D4D EC lea ecx,dword ptr ss:[ebp-0x14]
00640DA7 .^ E9 5413E4FF jmp TdxW.00482100
00640DAC . B8 D07F6700 mov eax,TdxW.00677FD0
00640DB1 .^ E9 9873FEFF jmp <jmp.&MSVCRT.__CxxFrameHandler>
00640DB6 0000 add byte ptr ds:[eax],al
00640DB8 0000 add byte ptr ds:[eax],al
00640DBA 0000 add byte ptr ds:[eax],al
00640DBC 0000 add byte ptr ds:[eax],al
00640DBE 0000 add byte ptr ds:[eax],al
00640DC0 0000 add byte ptr ds:[eax],al
00640DC2 0000 add byte ptr ds:[eax],al
00640DC4 0000 add byte ptr ds:[eax],al
00640DC6 0000 add byte ptr ds:[eax],al
00640DC8 0000 add byte ptr ds:[eax],al
00640DCA C605 C0E07F00>mov byte ptr ds:[0x7FE0C0],0x1
00640DD1 C605 C4E07F00>mov byte ptr ds:[0x7FE0C4],0x40
00640DD8 C605 C8E07F00>mov byte ptr ds:[0x7FE0C8],0x80
00640DDF C605 CCE07F00>mov byte ptr ds:[0x7FE0CC],0x1
00640DE6 C605 D4E07F00>mov byte ptr ds:[0x7FE0D4],0x1
00640DED C605 DCE07F00>mov byte ptr ds:[0x7FE0DC],0x19
00640DF4 C605 E0E07F00>mov byte ptr ds:[0x7FE0E0],0x13
00640DFB C605 E4E07F00>mov byte ptr ds:[0x7FE0E4],0x1
00640E02 C605 ECE07F00>mov byte ptr ds:[0x7FE0EC],0x1
00640E09 C605 F0E07F00>mov byte ptr ds:[0x7FE0F0],0x1
00640E10 C605 F8E07F00>mov byte ptr ds:[0x7FE0F8],0x1
00640E17 C605 00E17F00>mov byte ptr ds:[0x7FE100],0x1
00640E1E C605 08E17F00>mov byte ptr ds:[0x7FE108],0x1
00640E25 C605 1CE17F00>mov byte ptr ds:[0x7FE11C],0x1
00640E2C C605 E8346C00>mov byte ptr ds:[0x6C34E8],0x1
00640E33 C605 EC346C00>mov byte ptr ds:[0x6C34EC],0x1
00640E3A C605 F0346C00>mov byte ptr ds:[0x6C34F0],0x1
00640E41 C605 F4346C00>mov byte ptr ds:[0x6C34F4],0x1
00640E48 C605 F8346C00>mov byte ptr ds:[0x6C34F8],0x1
00640E4F C705 FC346C00>mov dword ptr ds:[0x6C34FC],0x59394939
00640E59 C705 5CE37F00>mov dword ptr ds:[0x7FE35C],0x135778F
00640E63 C705 44E27F00>mov dword ptr ds:[0x7FE244],0x4B4D5342
00640E6D C705 48E27F00>mov dword ptr ds:[0x7FE248],0x20202045
00640E77 C705 2CE27F00>mov dword ptr ds:[0x7FE22C],0x0
00640E81 C705 38E27F00>mov dword ptr ds:[0x7FE238],0x0
00640E8B C605 BCE07F00>mov byte ptr ds:[0x7FE0BC],0x8
00640E92 C605 64E37F00>mov byte ptr ds:[0x7FE364],0x1
00640E99 C605 68E37F00>mov byte ptr ds:[0x7FE368],0x1
00640EA0 C605 A0517100>mov byte ptr ds:[0x7151A0],0x2
00640EA7 C705 A2517100>mov dword ptr ds:[0x7151A2],0x0
00640EB1 C705 A6517100>mov dword ptr ds:[0x7151A6],0x0
00640EBB C705 AC517100>mov dword ptr ds:[0x7151AC],0x0
00640EC5 C705 B0517100>mov dword ptr ds:[0x7151B0],0x0
00640ECF C605 564D6C00>mov byte ptr ds:[0x6C4D56],0x1
00640ED6 C605 5A4D6C00>mov byte ptr ds:[0x6C4D5A],0x1
00640EDD B8 01000000 mov eax,0x1
00640EE2 ^ E9 1A3DEAFF jmp TdxW.004E4C01
00640EE7 00 db 00
00640EE8 00 db 00
00640EE9 00 db 00
00640EEA 00 db 00
00640EEB 00 db 00
00640EEC 00 db 00
00640EED 00 db 00
00640EEE 00 db 00

好了，运行看看吧，是不死自动打通，免费登录高级行情？呵呵