Posts Tagged 网众快车

网众快车自动登录器

Posted by on 星期三, 14 七月, 2010

网众快车自动登录器 – 单击下载

用于网众快车服务端的自动登录。

用VB写的,相关代码:


Private Function EnumWindowsProc(ByVal hwnd As Long, ByVal lParam As Long) As Boolean ‘枚举窗口
On Error Resume Next
Dim sTitle As String
Dim hrect As RECT
sTitle = String(80, 0)
Call GetWindowText(hwnd, sTitle, 80) '获取标题
sTitle = left(sTitle, InStr(sTitle, Chr(0)) - 1)
If Len(sTitle) > 0 And sTitle = "用户登录" Then ’如果标题为“用户登录”,则找到窗口
GetWindowRect hwnd, hrect '获得窗口的位置
coLoginWindow.hwnd = hwnd
coLoginWindow.left = hrect.left
coLoginWindow.top = hrect.top
End If
DoEvents
EnumWindowsProc = True
End Function
Private Function EnumChildWindowsProc(ByVal hwnd As Long, ByVal lParam As Long) As Boolean '枚举子窗口
On Error Resume Next
Dim hrect As RECT
Dim strCaption As String * 255
GetWindowRect hwnd, hrect

If (hrect.left - coLoginWindow.left = 116) And (hrect.top - coLoginWindow.top = 52) Then coUsername.hwnd = hwnd '如果找到指定位置的窗口
If (hrect.left - coLoginWindow.left = 116) And (hrect.top - coLoginWindow.top = 81) Then coPassword.hwnd = hwnd
If (hrect.left - coLoginWindow.left = 104) And (hrect.top - coLoginWindow.top = 177) Then coLogin.hwnd = hwnd

GetWindowText hwnd, strCaption, Len(strCaption)

DoEvents
EnumChildWindowsProc = True

End Function

Public Function GethWnd() As Long '调用枚举窗口和子窗口的过程
EnumWindows AddressOf EnumWindowsProc, 0&
DoEvents
EnumChildWindows coLoginWindow.hwnd, AddressOf EnumChildWindowsProc, 0&
End Function

Public Sub SendText(strUsername As String, strPassword As String) '像窗口发送用户名密码
Dim i As Integer
SendMessage coUsername.hwnd, WM_ACTIVATE, 0&, 0& '激活窗口
SendMessage coUsername.hwnd, WM_LBUTTONDBLCLK, 0&, 0& '双击窗口
SetForegroundWindow coLoginWindow.hwnd '窗口提前

For i = 1 To Len(strUsername) '循环总共 Len(strUsername) 次
Delay 10, True '等10/1000秒
KeyUPDOWN Asc(UCase(Mid(strUsername, i, 1))), coUsername.hwnd '发送按键消息
Next i
KeyUPDOWN vbKeyTab, coLoginWindow.hwnd '按一次TAB键

Delay 100, True
For i = 1 To Len(strPassword)
Delay 10, True
KeyUPDOWN Asc(UCase(Mid(strPassword, i, 1))), coPassword.hwnd
Next i
End Sub
Private Sub KeyUPDOWN(lKey As Long, rhWnd As Long) '发送按键过程
Dim lParam As Long
lParam = makelparam(lKey, False) '生成lparam参数,按下
PostMessage rhWnd, WM_KEYDOWN, lKey, lParam '发送按键消息
DoEvents
lParam = makelparam(lKey, True)'生成lparam参数,弹起
PostMessage rhWnd, WM_KEYUP, lKey, makelparam(lKey, True)
End Sub
Private Function makelparam(ByVal VirtualKey As Long, ByVal flag As Boolean) As Long '生成lparam参数过程
Dim s As String
Dim Firstbyte As String 'lparam参数的24-31位
If flag = False Then 'keydown
Firstbyte = "00"
Else
Firstbyte = "C0" 'keyup
End If
Dim Scancode As Long
'获得虚拟键扫描码
Scancode = MapVirtualKey(VirtualKey, 0)
Dim Secondbyte As String 'lparam参数的16-23位,即虚拟键扫描码
Secondbyte = Right("00" & Hex(Scancode), 2)
s = Firstbyte & Secondbyte & "0001" '0001为lparam参数的0-15位,即发送次数
makelparam = Val("&H" & s)
End Function

Public Sub ClickLogin() '单击“登录”按钮
SendMessage coLogin.hwnd, WM_ACTIVATE, 0&, 0& '激活登录按钮
SetForegroundWindow coLogin.hwnd '按钮提前
PostMessage coLogin.hwnd, WM_LBUTTONDBLCLK, 0, 0 '双击按钮,不知道为什么,用单击不好使-_-||
DoEvents
End Sub

Public Sub Delay(lTimes As Long, Optional bSleep As Boolean) '自定义的延时过程
Dim l As Long
For l = 0 To lTimes
DoEvents
If bSleep = True Then Sleep 1
Next l
End Sub

网众快车破解重复IP无限注册

Posted by on 星期三, 10 三月, 2010

网众快车

重复IP无限注册

‘00573F52   > \807D E3 00    cmp     byte ptr [ebp-1D], 0

‘00573F56      0F84 96000000 je      00573FF2  此处跳转提示“IP已注册”

‘00573F5C   .  8D4D D4       lea     ecx, dword ptr [ebp-2C]”


‘00573FFC   . /75 24         jnz     short 00574022         跳转实现

‘00574037   . /0F8C E4000000 jl      00574121               跳转未实现

‘0057411B   .^\0F85 27FFFFFF jnz     00574048               跳转实现

‘00574126   .  FF92 14010000 call    dword ptr [edx+114]    显示注册窗体


‘0 F84960008D4DD4BA1C425708B00000000000000000

‘0 F84960000008D4DD4BA

‘0 F84960008D4DD4BA1C425708B00000000000000000

‘0 F84960000008D4DD4

‘0F 84 96 00 00 00 8D 4D D4 BA1C4200

‘E9 97 00 00 00 90 8D 4D D4


‘00573F52   > \807D E3 00    cmp     byte ptr [ebp-1D], 0

‘00573F56      E9 97000000   jmp     00573FF2

‘00573F5B      90            nop

‘00573F5C   .  8D4D D4       lea     ecx, dword ptr [ebp-2C]’


‘0x0000   00 80 C8 B9 A2 39 00 0E-0C AB 4E FE 08 00 45 00   .€裙?…玁?.E.

‘0x0010   00 9E 51 3D 40 00 80 06-6C 4E C0 A8 1B 01 D2 16   .濹=@.€.lN括..?

‘0x0020   8F 0E 20 2D 3A 98 6C E0-A6 69 C1 B9 BC 97 50 18   ? -:榣唳i凉紬P.

‘0x0030   FF FF 33 EE 00 00 30 3A-62 61 72 6E 61 6D 65 3D   3?.0:barname=

‘0x0040   78 70 6C 0D 0A 6E 61 6D-65 3D 78 70 6C 38 39 33   xpl..name=xpl893

‘0x0050   34 32 31 0D 0A 70 77 64-3D 31 32 33 34 35 36 0D   421..pwd=123456.

‘0x0060   0A 61 64 64 72 3D 0D 0A-65 6D 61 69 6C 3D 0D 0A   .addr=..email=..

‘0x0070   74 65 6C 3D 0D 0A 6D 6F-62 69 6C 65 3D 0D 0A 71   tel=..mobile=..q

‘0x0080   71 3D 0D 0A 64 65 73 63-3D 0D 0A 61 67 65 6E 74   q=..desc=..agent

‘0x0090   3D C9 F2 D1 F4 34 0D 0A-63 69 64 3D 38 38 37 31   =沈阳4..cid=8871

‘0x00A0   35 38 0D 0A 61 72 65 61-3D 38 30 31               58..area=801