{"id":310,"date":"2025-12-15T11:18:42","date_gmt":"2025-12-15T03:18:42","guid":{"rendered":"http:\/\/www.xtmouse.top\/?p=310"},"modified":"2025-12-15T11:18:42","modified_gmt":"2025-12-15T03:18:42","slug":"win32-pe%e7%97%85%e6%af%92%e6%84%9f%e6%9f%93%e5%ae%9e%e9%aa%8c","status":"publish","type":"post","link":"http:\/\/www.xtmouse.top\/index.php\/2025\/12\/15\/win32-pe%e7%97%85%e6%af%92%e6%84%9f%e6%9f%93%e5%ae%9e%e9%aa%8c\/","title":{"rendered":"Win32 PE\u75c5\u6bd2\u611f\u67d3\u5b9e\u9a8c"},"content":{"rendered":"\n<p>\u4e00\u4e2a\u7b80\u5355\u7684\u5b9e\u9a8c\u5c0f\u4f5c\u4e1a<\/p>\n\n\n\n<p>\u4e0b\u9762\u7684\u75c5\u6bd2\u6837\u672c\u53ef\u4ee5\u76f4\u63a5\u4e0b\u8f7d\uff0c\u540e\u7f00txt\u4fee\u6539\u4e3aexe\u5373\u53ef\uff0c\u8fd0\u884c\u6548\u679c\u4e3a\u611f\u67d3\u540c\u76ee\u5f55\u4e0b\u6587\u4ef6\uff0c\u88ab\u611f\u67d3\u6587\u4ef6\u8fd0\u884c\u540e\u4f1a\u521b\u5efa\u4e09\u4e2atxt\u6587\u4ef6\uff0c\u8f83\u65e0\u5bb3<\/p>\n\n\n\n<p>\u539f\u59cb\u75c5\u6bd2\u6837\u672c<\/p>\n\n\n\n<div class=\"wp-block-file\"><a id=\"wp-block-file--media-d3e12d52-8511-4339-87b2-eadede9f8d1a\" href=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/p3inf-win10.txt\">p3inf-win10<\/a><a href=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/p3inf-win10.txt\" class=\"wp-block-file__button wp-element-button\" download aria-describedby=\"wp-block-file--media-d3e12d52-8511-4339-87b2-eadede9f8d1a\">\u4e0b\u8f7d<\/a><\/div>\n\n\n\n<p>\u5b8c\u5584\u540e\u75c5\u6bd2\u6837\u672c<\/p>\n\n\n\n<div class=\"wp-block-file\"><a id=\"wp-block-file--media-5d8430a6-ee60-4c63-8942-35bd93f6c022\" href=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/game.txt\">game<\/a><a href=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/game.txt\" class=\"wp-block-file__button wp-element-button\" download aria-describedby=\"wp-block-file--media-5d8430a6-ee60-4c63-8942-35bd93f6c022\">\u4e0b\u8f7d<\/a><\/div>\n\n\n\n<p>\u75c5\u6bd2\u6e90\u7801\u4e0e\u5b8c\u5584\u540e\u75c5\u6bd2\u6e90\u7801\uff08\u540e\u7f00txt\u4fee\u6539\u4e3acpp\u5373\u53ef\u7f16\u8bd1\uff09<\/p>\n\n\n\n<div class=\"wp-block-file\"><a id=\"wp-block-file--media-d9b602ae-cc64-401e-b348-cf17b07b11f8\" href=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/p3inf-1.txt\">p3inf<\/a><a href=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/p3inf-1.txt\" class=\"wp-block-file__button wp-element-button\" download aria-describedby=\"wp-block-file--media-d9b602ae-cc64-401e-b348-cf17b07b11f8\">\u4e0b\u8f7d<\/a><\/div>\n\n\n\n<div class=\"wp-block-file\"><a id=\"wp-block-file--media-1b3af4a1-4f07-408a-9a76-283d32c69bba\" href=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/game_code.txt\">game_code<\/a><a href=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/game_code.txt\" class=\"wp-block-file__button wp-element-button\" download aria-describedby=\"wp-block-file--media-1b3af4a1-4f07-408a-9a76-283d32c69bba\">\u4e0b\u8f7d<\/a><\/div>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>\u4e00\u3001\u5b9e\u9a8c\u76ee\u7684\uff1a<\/strong><strong><\/strong><\/p>\n\n\n\n<p>\u4eceWin32\u75c5\u6bd2\u7684\u539f\u7406\u4e86\u89e3\u5176\u7279\u6027\uff1a<\/p>\n\n\n\n<p>Win32\u75c5\u6bd2\u662f\u4ee3\u7801\u7247\u6bb5\uff08Shellcode)\uff1b<\/p>\n\n\n\n<p>Win32\u75c5\u6bd2\u5177\u6709\u81ea\u6211\u590d\u5236\u7684\u7279\u6027\uff1b<\/p>\n\n\n\n<p>Win32\u75c5\u6bd2\u7684\u529f\u80fd\u4e0d\u4f9d\u8d56\u4e8e\u5bbf\u4e3b\u5bf9\u8c61\u7684API\u51fd\u6570\uff1b<\/p>\n\n\n\n<p>\u4e3a\u4e86\u5b9e\u73b0\u901a\u7528\u6027\uff0cWin32\u75c5\u6bd2\u5e38\u91c7\u7528\u65b0\u52a0\u8282\u7684\u65b9\u5f0f\u5b9e\u73b0\u3002<\/p>\n\n\n\n<p><strong>\u4e8c\u3001\u5b9e\u9a8c\u73af\u5883\uff1a<\/strong><strong><\/strong><\/p>\n\n\n\n<p>Win32\u75c5\u6bd2p3inf\uff1a\u611f\u67d3\u540c\u76ee\u5f55\u4e2d\u6240\u6709PE\u6587\u4ef6\uff1b<\/p>\n\n\n\n<p>\u5df2\u611f\u67d3\u5bf9\u8c61target.exe\uff1a\u88ab\u6e05\u9664\u75c5\u6bd2\u7684\u76ee\u6807\u6587\u4ef6\uff1b<\/p>\n\n\n\n<p>\u672a\u611f\u67d3\u5bf9\u8c61RemovePeSign.exe<\/p>\n\n\n\n<p>p3inf\u6e90\u7801<\/p>\n\n\n\n<p>\u4e8c\u8fdb\u5236\u7f16\u8f91\u5668UltraEdit\u3001<\/p>\n\n\n\n<p>\u6587\u4ef6\u6bd4\u5bf9\u5de5\u5177hexcomparison<\/p>\n\n\n\n<p>PE\u6587\u4ef6\u67e5\u770b\u5668Stud_PE<\/p>\n\n\n\n<p><strong>\u4e09\u3001\u5b9e\u9a8c\u539f\u7406<\/strong><strong><\/strong><\/p>\n\n\n\n<p>\u901a\u8fc7\u89c2\u5bdfp3inf.exe\u611f\u67d3\u6587\u4ef6\u7684\u73b0\u8c61\uff0c\u7ed3\u5408\u8bfe\u5802\u8bb2\u6388\u7684Win32\u75c5\u6bd2\u539f\u7406\uff0c\u624b\u5de5\u5b8c\u6210\u5bf9\u88ab\u611f\u67d3\u5bf9\u8c61target.exe\u7684\u4fee\u590d\u8fd8\u539f\u3002<\/p>\n\n\n\n<p>\u9605\u8bfbp3inf\u7684\u6e90\u7801\uff0c\u5b8c\u5584\u75c5\u6bd2\u4ee3\u7801<\/p>\n\n\n\n<p>\uff081\uff09p3inf\u75c5\u6bd2\u4f1a\u91cd\u590d\u611f\u67d3\u540c\u4e00\u5bf9\u8c61\uff0c\u4fee\u6539\u4f7f\u5176\u53ea\u611f\u67d3\u5bf9\u8c61\u4e00\u6b21\uff1b<\/p>\n\n\n\n<p>\uff082\uff09p3inf\u75c5\u6bd2\u4e0d\u5177\u5907\u9012\u5f52\u611f\u67d3\u7684\u7279\u6027\uff0c\u4fee\u6539\u4f7f\u5176\u5b8c\u6210\u9012\u5f52\u590d\u5236\u7684\u529f\u80fd\uff1b<\/p>\n\n\n\n<p><strong>\u56db\u3001\u5b9e\u9a8c\u6b65\u9aa4<\/strong><\/p>\n\n\n\n<p>1.\u611f\u67d3\u6587\u4ef6\u6d88\u6bd2<\/p>\n\n\n\n<p>\u5b9e\u9a8c\u5f00\u59cb\uff0c\u6211\u4eec\u9700\u8981\u5bf9\u75c5\u6bd2\u529f\u80fd\u8fdb\u884c\u6d4b\u8bd5\uff08\u80fd\u5426\u6b63\u5e38\u4f7f\u7528\uff09<\/p>\n\n\n\n<p>\u7531\u4e8e\u75c5\u6bd2\u7684\u529f\u80fd\u6bd4\u8f83\u65e0\u5bb3\uff0c\u521b\u5efa\u4e00\u4e9b\u7b80\u5355\u7684txt\u6587\u4ef6\uff0c\u6211\u4eec\u76f4\u63a5\u5728\u672c\u673a\u8fdb\u884c\u6d4b\u8bd5\uff0c\u521b\u5efa\u5b9e\u9a8c\u76ee\u5f55<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"524\"   class=\"lazyload\" data-src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72471-1-1024x524.png\" src=\"https:\/\/cdn.jsdelivr.net\/gh\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\"  alt=\"\" class=\"wp-image-318\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72471-1-1024x524.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72471-1-300x153.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72471-1-768x393.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72471-1.png 1334w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure >\n<noscript><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"524\" src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72471-1-1024x524.png\" alt=\"\" class=\"wp-image-318\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72471-1-1024x524.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72471-1-300x153.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72471-1-768x393.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72471-1.png 1334w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/noscript>\n\n\n\n<p>\u5728\u8fd0\u884cp3inf-win10.exe\u4e4b\u540e\uff0cexe\u6587\u4ef6\u4f1a\u88ab\u611f\u67d3\uff0c\u4e0b\u9762\u662f\u8fd0\u884c\u6548\u679c<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"524\"   class=\"lazyload\" data-src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72472-1-1024x524.png\" src=\"https:\/\/cdn.jsdelivr.net\/gh\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\"  alt=\"\" class=\"wp-image-319\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72472-1-1024x524.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72472-1-300x153.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72472-1-768x393.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72472-1.png 1334w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure >\n<noscript><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"524\" src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72472-1-1024x524.png\" alt=\"\" class=\"wp-image-319\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72472-1-1024x524.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72472-1-300x153.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72472-1-768x393.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72472-1.png 1334w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/noscript>\n\n\n\n<p>\u53ef\u4ee5\u770b\u5230\u591a\u4e86\u4e09\u4e2atxt\u6587\u4ef6\uff0c\u8fd8\u6709\u542f\u52a8exe\u65f6\u5bf9\u51fa\u73b0Haxxed\u7684\u63d0\u793a\u6846<\/p>\n\n\n\n<p>\u6211\u4eec\u5148\u5c06\u88ab\u611f\u67d3\u7684exe\u6587\u4ef6\u62d6\u8fdbStudPE\u4e2d\u67e5\u770b\uff0c\u53ef\u4ee5\u770b\u5230\u533a\u6bb5\u4e2d\u591a\u4e86\u4e00\u4e2a\u5947\u602a\u7684\u4e1c\u897f.spooky\uff08\u975e\u6b63\u5e38\u547d\u540d\uff09<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"406\"   class=\"lazyload\" data-src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72473-1.png\" src=\"https:\/\/cdn.jsdelivr.net\/gh\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\"  alt=\"\" class=\"wp-image-323\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72473-1.png 600w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72473-1-300x203.png 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure >\n<noscript><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"406\" src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72473-1.png\" alt=\"\" class=\"wp-image-323\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72473-1.png 600w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72473-1-300x203.png 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure><\/noscript>\n\n\n\n<p>\u4e3a\u4e86\u4fee\u590d\u8be5\u75c5\u6bd2\u611f\u67d3\u7684\u7a0b\u5e8f\uff0c\u6211\u4eec\u9700\u8981\u5220\u9664.spooky\u533a\u6bb5\uff0c\u4f46\u662f\u76f4\u63a5\u5220\u9664\u4f1a\u5bfc\u81f4\u7a0b\u5e8f\u8fdb\u5165\u9519\u8bef\u7684\u5165\u53e3\u70b9\uff0c\u6240\u4ee5\u6211\u4eec\u540c\u65f6\u8fd8\u5f97\u4fee\u6539\u7a0b\u5e8f\u5165\u53e3\u70b9<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"406\"   class=\"lazyload\" data-src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72474-1.png\" src=\"https:\/\/cdn.jsdelivr.net\/gh\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\"  alt=\"\" class=\"wp-image-321\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72474-1.png 600w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72474-1-300x203.png 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure >\n<noscript><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"406\" src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72474-1.png\" alt=\"\" class=\"wp-image-321\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72474-1.png 600w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72474-1-300x203.png 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure><\/noscript>\n\n\n\n<p>\u8981\u627e\u5230\u7a0b\u5e8f\u7684\u539f\u5165\u53e3\u70b9\uff0c\u6211\u4eec\u4f7f\u7528ollydbg\u67e5\u770b\u7a0b\u5e8f\uff0c\u6253\u5f00\u540e\u53ef\u4ee5\u770b\u5230\u5165\u53e3\u70b9\u548cStud_PE\u4e2d\u4e00\u81f4\uff0c\u90fd\u662f8000<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"544\"   class=\"lazyload\" data-src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72475-1-1024x544.png\" src=\"https:\/\/cdn.jsdelivr.net\/gh\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\"  alt=\"\" class=\"wp-image-322\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72475-1-1024x544.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72475-1-300x159.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72475-1-768x408.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72475-1-1536x816.png 1536w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72475-1.png 1920w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure >\n<noscript><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"544\" src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72475-1-1024x544.png\" alt=\"\" class=\"wp-image-322\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72475-1-1024x544.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72475-1-300x159.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72475-1-768x408.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72475-1-1536x816.png 1536w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72475-1.png 1920w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/noscript>\n\n\n\n<p>\u5728.spooky\u533a\u6bb5\u6267\u884c\u7ed3\u675f\u4e4b\u540e\uff0c\u4f1a\u6267\u884c\u6b63\u5e38\u7a0b\u5e8f\uff0c\u6240\u4ee5\u6211\u4eec\u7684\u601d\u8def\u5c31\u662f\u6b65\u8fdb\u6267\u884c\u7a0b\u5e8f\u77e5\u9053\u5feb\u8981\u8df3\u51fa.spooky\u533a\u6bb5\uff0c\u7136\u540e\u67e5\u770b\u4ece\u8be5\u533a\u6bb5\u51fa\u6765\u4e4b\u540e\u4f1a\u5230\u54ea\u4e2a\u4f4d\u7f6e\uff0c\u8df3\u51fa\u7684\u4f4d\u7f6e\u5927\u6982\u5c31\u662f\u539f\u59cb\u7a0b\u5e8f\u7684\u5165\u53e3\u70b9<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"544\"   class=\"lazyload\" data-src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72476-1024x544.png\" src=\"https:\/\/cdn.jsdelivr.net\/gh\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\"  alt=\"\" class=\"wp-image-324\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72476-1024x544.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72476-300x159.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72476-768x408.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72476-1536x816.png 1536w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72476.png 1920w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure >\n<noscript><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"544\" src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72476-1024x544.png\" alt=\"\" class=\"wp-image-324\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72476-1024x544.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72476-300x159.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72476-768x408.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72476-1536x816.png 1536w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72476.png 1920w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/noscript>\n\n\n\n<p>\u8fd9\u91cc\u6211\u4eec\u6b65\u8fdb\u6267\u884c\u5230\u8fd9\u4e00\u6b65\u505c\u4e0b\uff0c\u521a\u597d\u4e5f\u8981\u5230\u4e86.spooky\u7684\u51fa\u53e3\u4e86\u3002<\/p>\n\n\n\n<p>\u6211\u4eec\u5c1d\u8bd5\u4fee\u6539\u5165\u53e3\u70b9\u4e3a00402D90\uff0c\u5e76\u4e14\u5220\u9664.spooky\u533a\u6bb5<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"406\"   class=\"lazyload\" data-src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72477.png\" src=\"https:\/\/cdn.jsdelivr.net\/gh\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\"  alt=\"\" class=\"wp-image-320\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72477.png 600w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72477-300x203.png 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure >\n<noscript><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"406\" src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72477.png\" alt=\"\" class=\"wp-image-320\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72477.png 600w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72477-300x203.png 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure><\/noscript>\n\n\n\n<p>\u4e4b\u540e\u518d\u6253\u5f00\u7a0b\u5e8f\u5c31\u662f\u6b63\u5e38\u6267\u884c\u4e86\uff0c\u53ef\u4ee5\u9884\u89c8\u6548\u679c<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"477\" height=\"165\"   class=\"lazyload\" data-src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72478.png\" src=\"https:\/\/cdn.jsdelivr.net\/gh\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\"  alt=\"\" class=\"wp-image-325\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72478.png 477w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72478-300x104.png 300w\" sizes=\"auto, (max-width: 477px) 100vw, 477px\" \/><\/figure >\n<noscript><img loading=\"lazy\" decoding=\"async\" width=\"477\" height=\"165\" src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72478.png\" alt=\"\" class=\"wp-image-325\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72478.png 477w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72478-300x104.png 300w\" sizes=\"auto, (max-width: 477px) 100vw, 477px\" \/><\/figure><\/noscript>\n\n\n\n<p>2.\u75c5\u6bd2\u52a0\u5f3a<\/p>\n\n\n\n<p>\u9605\u8bfbp3inf\u7684\u6e90\u7801\uff0c\u5b8c\u5584\u75c5\u6bd2\u4ee3\u7801<\/p>\n\n\n\n<p>\uff081\uff09p3inf\u75c5\u6bd2\u4f1a\u91cd\u590d\u611f\u67d3\u540c\u4e00\u5bf9\u8c61\uff0c\u4fee\u6539\u4f7f\u5176\u53ea\u611f\u67d3\u5bf9\u8c61\u4e00\u6b21\uff1b<\/p>\n\n\n\n<p>\uff082\uff09p3inf\u75c5\u6bd2\u4e0d\u5177\u5907\u9012\u5f52\u611f\u67d3\u7684\u7279\u6027\uff0c\u4fee\u6539\u4f7f\u5176\u5b8c\u6210\u9012\u5f52\u590d\u5236\u7684\u529f\u80fd\uff1b<\/p>\n\n\n\n<p>\u5b8c\u6210\u8be5\u4efb\u52a1\u524d\u9700\u8981\u89c2\u5bdf\u6e90\u4ee3\u7801<\/p>\n\n\n\n<p>\u4ece\u4ee3\u7801\u7ed3\u6784\u548c\u529f\u80fd\u6765\u770b\uff0c\u8fd9\u662f\u4e00\u4e2a\u5178\u578b\u7684PE \u6587\u4ef6\u611f\u67d3\u578b\u75c5\u6bd2\uff08\u5b9e\u9a8c\u6027\u8d28\uff09\uff0c\u4e3b\u8981\u901a\u8fc7\u4fee\u6539\u5176\u4ed6 32 \u4f4d PE \u6587\u4ef6\u7684\u7ed3\u6784\uff0c\u6ce8\u5165\u6076\u610f\u4ee3\u7801\u5b9e\u73b0\u611f\u67d3\uff0c\u8be5\u7a0b\u5e8f\u7684\u4e3b\u8981\u884c\u4e3a\u662f\uff1a\u904d\u5386\u81ea\u8eab\u6240\u5728\u76ee\u5f55\u7684\u6240\u6709\u975e\u76ee\u5f55\u6587\u4ef6\uff0c\u5bf9\u7b26\u5408\u6761\u4ef6\u7684 32 \u4f4d PE \u6587\u4ef6\u8fdb\u884c\u611f\u67d3 \u2014\u2014 \u5728\u76ee\u6807\u6587\u4ef6\u4e2d\u6dfb\u52a0\u4e00\u4e2a\u65b0\u7684\u4ee3\u7801\u8282\u533a\uff0c\u6ce8\u5165\u6076\u610f\u4ee3\u7801\uff0c\u5e76\u4fee\u6539\u7a0b\u5e8f\u5165\u53e3\u70b9\u4f7f\u5176\u4f18\u5148\u6267\u884c\u6076\u610f\u4ee3\u7801\uff0c\u6700\u540e\u8df3\u56de\u539f\u7a0b\u5e8f\u5165\u53e3\u70b9\u3002<\/p>\n\n\n\n<p>\u7a0b\u5e8f\u7684\u884c\u4e3a\u7ed3\u6784\u5982\u4e0b\uff1a<\/p>\n\n\n\n<p>1.&nbsp;run()&nbsp;\u51fd\u6570\uff1a\u904d\u5386\u6587\u4ef6\u5e76\u89e6\u53d1\u611f\u67d3<\/p>\n\n\n\n<p>\u83b7\u53d6\u81ea\u8eab\u8def\u5f84\uff1a\u901a\u8fc7&nbsp;GetModuleFileName&nbsp;\u83b7\u53d6\u5f53\u524d\u7a0b\u5e8f\u7684\u8def\u5f84\uff0c\u7528\u4e8e\u6392\u9664\u81ea\u8eab\uff08\u907f\u514d\u91cd\u590d\u611f\u67d3\uff09\u3002<\/p>\n\n\n\n<p>\u904d\u5386\u76ee\u5f55\u6587\u4ef6\uff1a\u4f7f\u7528&nbsp;FindFirstFile&nbsp;\u548c&nbsp;FindNextFile&nbsp;\u904d\u5386\u5f53\u524d\u76ee\u5f55\u4e0b\u7684\u6240\u6709\u975e\u76ee\u5f55\u6587\u4ef6\uff08\u8fc7\u6ee4\u6587\u4ef6\u5939\uff09\uff0c\u6536\u96c6\u6587\u4ef6\u540d\u5230&nbsp;file_names&nbsp;\u5217\u8868\u3002<\/p>\n\n\n\n<p>\u89e6\u53d1\u611f\u67d3\uff1a\u5bf9\u5217\u8868\u4e2d\u7684\u6bcf\u4e2a\u6587\u4ef6\uff0c\u82e5\u4e0d\u662f\u81ea\u8eab\uff0c\u5219\u8c03\u7528&nbsp;infect&nbsp;\u51fd\u6570\u5c1d\u8bd5\u611f\u67d3\uff0c\u5e76\u8f93\u51fa\u611f\u67d3\u7ed3\u679c\u3002<\/p>\n\n\n\n<p>2.&nbsp;infect()&nbsp;\u51fd\u6570\uff1a\u6838\u5fc3\u611f\u67d3\u903b\u8f91<\/p>\n\n\n\n<p>\u8fd9\u662f\u75c5\u6bd2\u7684\u6838\u5fc3\uff0c\u8d1f\u8d23\u4fee\u6539\u76ee\u6807 PE \u6587\u4ef6\u7ed3\u6784\u5e76\u6ce8\u5165\u6076\u610f\u4ee3\u7801\uff0c\u6b65\u9aa4\u5982\u4e0b\uff1a<\/p>\n\n\n\n<p>\uff081\uff09\u9a8c\u8bc1\u76ee\u6807\u6587\u4ef6\u662f\u5426\u4e3a 32 \u4f4d PE \u6587\u4ef6<\/p>\n\n\n\n<p>\u8bfb\u53d6\u6587\u4ef6\u6570\u636e\u5230\u5185\u5b58\uff0c\u89e3\u6790&nbsp;DOS \u5934\uff08IMAGE_DOS_HEADER\uff09\uff0c\u901a\u8fc7&nbsp;e_magic&nbsp;\u9a8c\u8bc1\u662f\u5426\u4e3a\u6709\u6548\u7684 DOS \u7b7e\u540d\uff08MZ\uff09\u3002<\/p>\n\n\n\n<p>\u89e3\u6790&nbsp;NT \u5934\uff08IMAGE_NT_HEADERS\uff09\uff0c\u901a\u8fc7&nbsp;OptionalHeader.Magic&nbsp;\u5224\u65ad\u662f\u5426\u4e3a 32 \u4f4d PE \u6587\u4ef6\uff080x10B\uff0c\u5373 267\uff09\uff0c\u82e5\u4e3a 64 \u4f4d\u5219\u7ec8\u6b62\u611f\u67d3\u3002<\/p>\n\n\n\n<p>\uff082\uff09\u6dfb\u52a0\u65b0\u7684\u8282\u533a<\/p>\n\n\n\n<p>\u5728\u76ee\u6807\u6587\u4ef6\u7684\u8282\u8868\uff08IMAGE_SECTION_HEADER\uff09\u672b\u5c3e\u6dfb\u52a0\u4e00\u4e2a\u65b0\u8282\u533a\uff0c\u540d\u79f0\u4e3a&nbsp;.spooky\uff08\u901a\u8fc7&nbsp;section_name&nbsp;\u53c2\u6570\u4f20\u5165\uff09\u3002<\/p>\n\n\n\n<p>\u8ba1\u7b97\u65b0\u8282\u533a\u7684\u5173\u952e\u5c5e\u6027\uff08\u57fa\u4e8e PE \u6587\u4ef6\u5bf9\u9f50\u89c4\u5219\uff09\uff1a<\/p>\n\n\n\n<p>VirtualSize&nbsp;\u548c&nbsp;VirtualAddress\uff1a\u6309\u5185\u5b58\u5bf9\u9f50\uff08SectionAlignment\uff09\u8ba1\u7b97\u3002<\/p>\n\n\n\n<p>SizeOfRawData&nbsp;\u548c&nbsp;PointerToRawData\uff1a\u6309\u6587\u4ef6\u5bf9\u9f50\uff08FileAlignment\uff09\u8ba1\u7b97\u3002<\/p>\n\n\n\n<p>\u8282\u533a\u5c5e\u6027&nbsp;Characteristics&nbsp;\u8bbe\u4e3a&nbsp;0xE00000E0\uff08\u5305\u542b\u53ef\u6267\u884c\u3001\u53ef\u8bfb\u3001\u53ef\u5199\u7b49\u6743\u9650\uff0c\u786e\u4fdd\u6076\u610f\u4ee3\u7801\u53ef\u6267\u884c\uff09\u3002<\/p>\n\n\n\n<p>\uff083\uff09\u4fee\u6539 PE \u6587\u4ef6\u5934\u4fe1\u606f<\/p>\n\n\n\n<p>\u66f4\u65b0\u8282\u533a\u6570\u91cf\uff08NumberOfSections += 1\uff09\u3002<\/p>\n\n\n\n<p>\u8c03\u6574\u955c\u50cf\u5927\u5c0f\uff08SizeOfImage\uff09\uff0c\u5305\u542b\u65b0\u8282\u533a\u7684\u5927\u5c0f\u3002<\/p>\n\n\n\n<p>\u5173\u95ed ASLR\uff08\u5730\u5740\u7a7a\u95f4\u5e03\u5c40\u968f\u673a\u5316\uff09\uff1a\u901a\u8fc7&nbsp;DllCharacteristics &amp;= ~IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE&nbsp;\u5173\u95ed\u52a8\u6001\u57fa\u5740\uff0c\u786e\u4fdd\u6076\u610f\u4ee3\u7801\u5730\u5740\u56fa\u5b9a\u3002<\/p>\n\n\n\n<p>\uff084\uff09\u6ce8\u5165\u6076\u610f\u4ee3\u7801\u5e76\u4fee\u6539\u5165\u53e3\u70b9<\/p>\n\n\n\n<p>\u6076\u610f\u4ee3\u7801\u751f\u6210\uff1a\u901a\u8fc7\u5185\u8054\u6c47\u7f16\u751f\u6210\u4e00\u6bb5\u4ee3\u7801\uff0c\u529f\u80fd\u5305\u62ec\uff1a<\/p>\n\n\n\n<p>\u52a8\u6001\u67e5\u627e\u7cfb\u7edf\u51fd\u6570\uff1a\u901a\u8fc7\u904d\u5386 PEB\uff08\u8fdb\u7a0b\u73af\u5883\u5757\uff09\u4e2d\u7684\u5bfc\u51fa\u8868\uff0c\u83b7\u53d6&nbsp;LoadLibraryA\u3001GetProcAddress&nbsp;\u7b49\u51fd\u6570\u5730\u5740\uff08\u907f\u514d\u76f4\u63a5\u4f7f\u7528\u786c\u7f16\u7801\u5730\u5740\uff0c\u63d0\u9ad8\u9690\u853d\u6027\uff09\u3002<\/p>\n\n\n\n<p>\u52a0\u8f7d\u7cfb\u7edf\u5e93\uff1a\u901a\u8fc7&nbsp;LoadLibraryA&nbsp;\u52a0\u8f7d&nbsp;kernel32.dll&nbsp;\u548c&nbsp;user32.dll\u3002<\/p>\n\n\n\n<p>\u5f39\u7a97\u884c\u4e3a\uff1a\u8c03\u7528&nbsp;MessageBoxA&nbsp;\u663e\u793a\u6d88\u606f\uff08\u4ee3\u7801\u4e2d\u53ef\u89c1\u5b57\u7b26\u4e32\u7247\u6bb5\uff0c\u5982&nbsp;\"phh55_is_good_...\"\uff0c\u53ef\u80fd\u662f\u5b9e\u9a8c\u6027\u63d0\u793a\u4fe1\u606f\uff09\u3002<\/p>\n\n\n\n<p>\u8df3\u56de\u539f\u5165\u53e3\u70b9\uff1a\u901a\u8fc7\u786c\u7f16\u7801\u6807\u8bb0&nbsp;0xFADED420&nbsp;\u5b9a\u4f4d\u8df3\u8f6c\u5730\u5740\uff0c\u8fd0\u884c\u5b8c\u6076\u610f\u4ee3\u7801\u540e\u56de\u5230\u539f\u7a0b\u5e8f\u5165\u53e3\uff0c\u4fdd\u8bc1\u539f\u7a0b\u5e8f\u80fd\u7ee7\u7eed\u6267\u884c\u3002<\/p>\n\n\n\n<p>\u5199\u5165\u6076\u610f\u4ee3\u7801\uff1a\u5c06\u6c47\u7f16\u751f\u6210\u7684\u6076\u610f\u4ee3\u7801\u5199\u5165\u65b0\u8282\u533a\u7684\u6587\u4ef6\u504f\u79fb\uff08PointerToRawData\uff09\u3002<\/p>\n\n\n\n<p>\u4fee\u6539\u5165\u53e3\u70b9\uff1a\u5c06\u539f\u7a0b\u5e8f\u5165\u53e3\u70b9\uff08AddressOfEntryPoint\uff09\u6539\u4e3a\u65b0\u8282\u533a\u7684\u865a\u62df\u5730\u5740\uff08VirtualAddress\uff09\uff0c\u4f7f\u7a0b\u5e8f\u542f\u52a8\u65f6\u4f18\u5148\u6267\u884c\u6076\u610f\u4ee3\u7801\u3002<\/p>\n\n\n\n<p>3. \u8f85\u52a9\u51fd\u6570<\/p>\n\n\n\n<p>alignment()\uff1a\u6839\u636e PE \u6587\u4ef6\u7684\u5bf9\u9f50\u89c4\u5219\uff08\u5185\u5b58\u5bf9\u9f50 \/ \u6587\u4ef6\u5bf9\u9f50\uff09\u8ba1\u7b97\u5730\u5740\u6216\u5927\u5c0f\uff0c\u786e\u4fdd\u65b0\u8282\u533a\u7b26\u5408 PE \u683c\u5f0f\u89c4\u8303\u3002<\/p>\n\n\n\n<p>char_to_lpcwstr()\uff1a\u5c06 ANSI \u5b57\u7b26\u4e32\u8f6c\u6362\u4e3a\u5bbd\u5b57\u7b26\u4e32\uff0c\u9002\u914d Windows API \u7684\u5bbd\u5b57\u7b26\u63a5\u53e3\uff08\u5982&nbsp;CreateFile\u3001FindFirstFile\uff09\u3002<\/p>\n\n\n\n<p>\u4e0b\u9762\u6211\u4eec\u9700\u8981\u5206\u6790\u6838\u5fc3\u4fee\u6539<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>(1) \u9632\u6b62\u91cd\u590d\u611f\u67d3<\/td><td>\u6bcf\u6b21\u8fd0\u884c\u90fd\u65b0\u589e .spooky \u8282 \u2192 PE \u7ed3\u6784\u635f\u574f\u3001\u4f53\u79ef\u81a8\u80c0<\/td><td>\u2705 \u904d\u5386\u8282\u8868\u68c0\u67e5 .spooky \u662f\u5426\u5df2\u5b58\u5728&lt;br&gt;\u82e5\u5b58\u5728\u5219\u8df3\u8fc7\u611f\u67d3<\/td><td>infect() \u51fd\u6570\u5f00\u5934\uff1a&lt;br&gt;for (int i = 0; i &lt; file_header-&gt;NumberOfSections; i++)&lt;br&gt;if (strcmp(sec_name, section_name) == 0)<\/td><\/tr><tr><td>(2) \u9012\u5f52\u611f\u67d3<\/td><td>\u4ec5\u611f\u67d3\u5f53\u524d\u76ee\u5f55\u6587\u4ef6\uff08FindFirstFile(dir\\*)\uff09<\/td><td>\u2705 \u65b0\u589e infect_directory() \u9012\u5f52\u51fd\u6570&lt;br&gt;\u2705 run() \u6539\u4e3a\u8c03\u7528\u9012\u5f52\u5165\u53e3<\/td><td>infect_directory()&lt;br&gt;\u8c03\u7528 FindFirstFile + if (DIR) infect_directory(sub)<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>\u90a3\u6211\u4eec\u5c31\u9488\u5bf9\u5236\u5b9a\u95ee\u9898\u8fdb\u884c\u4fee\u6539<\/p>\n\n\n\n<p>1.\u9632\u91cd\u590d\u611f\u67d3\uff1a<\/p>\n\n\n\n<p>\u5728infect()\u4e2d\uff0c\u4f7f\u7528IMAGE_FIRST_SECTION(nt_header)\u83b7\u53d6\u8282\u8868\u6307\u9488\u3002<\/p>\n\n\n\n<p>\u5faa\u73af\u904d\u5386NumberOfSections\u4e2a\u8282\uff0c\u63d0\u53d6\u8282\u540d\uff088\u5b57\u8282\uff09\uff0c\u7528strcmp\u6bd4\u8f83\u662f\u5426\u4e3a\".spooky\"\u3002<\/p>\n\n\n\n<p>\u5982\u679c\u5df2\u5b58\u5728\uff0c\u6253\u5370\u63d0\u793a\u5e76\u8fd4\u56de0\uff08\u89c6\u4e3a\u6210\u529f\uff0c\u4e0d\u91cd\u590d\u64cd\u4f5c\uff09\u3002\u6dfb\u52a0\u4e86\u5185\u5b58\u6e05\u7406\uff08delete[] data\uff09\u4ee5\u9632\u6cc4\u6f0f\u3002<\/p>\n\n\n\n<p>2.\u9012\u5f52\u611f\u67d3\uff1a<\/p>\n\n\n\n<p>\u65b0\u589einfect_directory(const std::string&amp; dir_path)\u51fd\u6570\uff1a\u4f7f\u7528FindFirstFile\u626b\u63cf\u76ee\u5f55\uff0c\u533a\u5206\u6587\u4ef6\/\u76ee\u5f55\u3002<\/p>\n\n\n\n<p>\u5bf9\u4e8e\u5b50\u76ee\u5f55\uff0c\u9012\u5f52\u8c03\u7528\u81ea\u8eab\uff08\u6784\u5efa\u5b8c\u6574\u8def\u5f84\uff09\u3002<\/p>\n\n\n\n<p>run()\u7b80\u5316\uff1a\u76f4\u63a5\u8c03\u7528infect_directory\u4e8e\u5f53\u524d\u76ee\u5f55\uff0c\u81ea\u52a8\u5904\u7406\u9012\u5f52\u3002<\/p>\n\n\n\n<p>\u6392\u9664.\u548c..\u4ee5\u9632\u5faa\u73af\u3002\u539f\u4ee3\u7801\u7684\u8def\u5f84\u6784\u5efa\u903b\u8f91\u4f18\u5316\u4e3a\u4eceGetModuleFileName\u63d0\u53d6\u76ee\u5f55\u3002<\/p>\n\n\n\n<p>\u7136\u540e\u6211\u4eec\u518d\u7f16\u8bd1\u75c5\u6bd2\u6587\u4ef6\uff0c\u83b7\u5f97game.exe\uff0c\u7136\u540e\u91cd\u65b0\u5b89\u6392\u5b9e\u9a8c\u73af\u5883\uff0c\u8fd9\u6b21\u9700\u8981\u518dtest\u76ee\u5f55\u4e0b\u518d\u5f00\u4e00\u4e2atest\u76ee\u5f55\uff0c\u6d4b\u8bd5\u6211\u4eec\u7684\u9012\u5f52\u611f\u67d3\u80fd\u529b<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"524\"   class=\"lazyload\" data-src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72479-1024x524.png\" src=\"https:\/\/cdn.jsdelivr.net\/gh\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\"  alt=\"\" class=\"wp-image-327\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72479-1024x524.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72479-300x153.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72479-768x393.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72479.png 1334w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure >\n<noscript><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"524\" src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72479-1024x524.png\" alt=\"\" class=\"wp-image-327\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72479-1024x524.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72479-300x153.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72479-768x393.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u72479.png 1334w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/noscript>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"524\"   class=\"lazyload\" data-src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724710-1024x524.png\" src=\"https:\/\/cdn.jsdelivr.net\/gh\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\"  alt=\"\" class=\"wp-image-326\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724710-1024x524.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724710-300x153.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724710-768x393.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724710.png 1334w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure >\n<noscript><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"524\" src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724710-1024x524.png\" alt=\"\" class=\"wp-image-326\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724710-1024x524.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724710-300x153.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724710-768x393.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724710.png 1334w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/noscript>\n\n\n\n<p>\u8fd0\u884cgame.exe\u540e\u53ef\u4ee5\u770b\u5230\u6210\u529f\u611f\u67d3<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"524\"   class=\"lazyload\" data-src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724711-1024x524.png\" src=\"https:\/\/cdn.jsdelivr.net\/gh\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\"  alt=\"\" class=\"wp-image-328\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724711-1024x524.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724711-300x153.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724711-768x393.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724711.png 1334w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure >\n<noscript><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"524\" src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724711-1024x524.png\" alt=\"\" class=\"wp-image-328\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724711-1024x524.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724711-300x153.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724711-768x393.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724711.png 1334w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/noscript>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"524\"   class=\"lazyload\" data-src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724712-1024x524.png\" src=\"https:\/\/cdn.jsdelivr.net\/gh\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\"  alt=\"\" class=\"wp-image-329\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724712-1024x524.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724712-300x153.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724712-768x393.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724712.png 1334w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure >\n<noscript><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"524\" src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724712-1024x524.png\" alt=\"\" class=\"wp-image-329\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724712-1024x524.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724712-300x153.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724712-768x393.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724712.png 1334w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/noscript>\n\n\n\n<p>\u8bc1\u660e\u6211\u4eec\u7684\u9012\u5f52\u611f\u67d3\u80fd\u529b\u662f\u6ca1\u6709\u95ee\u9898\u7684<\/p>\n\n\n\n<p>\u7136\u540e\u6211\u4eec\u518d\u6267\u884c\u4e00\u6b21game.exe\uff0c\u53ef\u4ee5\u770b\u5230\u4e0d\u4f1a\u51fa\u73b0\u4e24\u6b21Haxxed\uff0c\u8bc1\u660e\u6211\u4eec\u4e5f\u505a\u5230\u4e86\u9632\u6b62\u91cd\u590d\u611f\u67d3<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"524\"   class=\"lazyload\" data-src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724713-1024x524.png\" src=\"https:\/\/cdn.jsdelivr.net\/gh\/moezx\/cdn@3.0.2\/img\/svg\/loader\/trans.ajax-spinner-preloader.svg\" onerror=\"imgError(this)\"  alt=\"\" class=\"wp-image-330\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724713-1024x524.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724713-300x153.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724713-768x393.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724713.png 1334w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure >\n<noscript><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"524\" src=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724713-1024x524.png\" alt=\"\" class=\"wp-image-330\" srcset=\"http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724713-1024x524.png 1024w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724713-300x153.png 300w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724713-768x393.png 768w, http:\/\/www.xtmouse.top\/wp-content\/uploads\/2025\/12\/\u56fe\u724713.png 1334w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/noscript>\n\n\n\n<p>\u5b9e\u9a8c\u5b8c\u6bd5<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4e00\u4e2a\u7b80\u5355\u7684\u5b9e\u9a8c\u5c0f\u4f5c\u4e1a \u4e0b\u9762\u7684\u75c5\u6bd2\u6837\u672c\u53ef\u4ee5\u76f4\u63a5\u4e0b\u8f7d\uff0c\u540e\u7f00txt\u4fee\u6539\u4e3aexe\u5373\u53ef\uff0c\u8fd0\u884c\u6548\u679c\u4e3a\u611f\u67d3\u540c\u76ee\u5f55\u4e0b\u6587\u4ef6\uff0c\u88ab\u611f\u67d3\u6587\u4ef6\u8fd0\u884c\u540e\u4f1a\u521b\u5efa\u4e09 &#8230;<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,5],"tags":[],"class_list":["post-310","post","type-post","status-publish","format-standard","hentry","category-4","category-5"],"_links":{"self":[{"href":"http:\/\/www.xtmouse.top\/index.php\/wp-json\/wp\/v2\/posts\/310","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.xtmouse.top\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.xtmouse.top\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.xtmouse.top\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.xtmouse.top\/index.php\/wp-json\/wp\/v2\/comments?post=310"}],"version-history":[{"count":3,"href":"http:\/\/www.xtmouse.top\/index.php\/wp-json\/wp\/v2\/posts\/310\/revisions"}],"predecessor-version":[{"id":331,"href":"http:\/\/www.xtmouse.top\/index.php\/wp-json\/wp\/v2\/posts\/310\/revisions\/331"}],"wp:attachment":[{"href":"http:\/\/www.xtmouse.top\/index.php\/wp-json\/wp\/v2\/media?parent=310"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.xtmouse.top\/index.php\/wp-json\/wp\/v2\/categories?post=310"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.xtmouse.top\/index.php\/wp-json\/wp\/v2\/tags?post=310"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}