﷨AGTH.EXE <ѡ> <Ҫҹĳ>

ѡ:
/L[ϵ]-ϵתΪ[ϵ],谲װAPPLOCALE,޷/Rͬʱִ(Ĭֵ:411)
/R[ϵ]-߳ϵרΪ[ϵ](Ĭֵ:411)
/NH-ԶAPPLOCALEȡ֣ҲʾAGTHڣͬʱʹ/L,/R,/P
/P[ID |}]-Ӵͬʱʹ/L,/R,/NH,[س]

ӿѡ
/B[뱶][:[ʱ][:ʱ]]-趨(Ĭֵ:4:24:1000)
/C[ʱ]-ԶѵǰĻʾָƵ壬ʱλΪ(Ĭֵ150)
/KF[][:ﱶ]-ֹظ"""ﱶ"׷(Ĭֵ:32:16)
/KS[]-Ƴ趨[]ظַ(Ĭֵ:1)
/NF-ֹĳЩַ
/NX-Զ˳ڹҹ˳AGTH֮˳
/T-Ϸ
/W[][Ҫ]-Զѡ(Ĭֵ:0:κ)

ѡ
/H{A|B|W|S|Q|H}[N][data_offset[*drdo]][:sub_offset][*drdo][#level][@addr][:module][:{name|#ordinal|}]]]-øĸ
/IH-"level"װûԶʱʾ·
/NC-ҹ
/NJ-unicodeıʱ,ʹ̴߳ҳ,ת
/NS-ʹôҪı
/S[IPַ]-ı͵ָļ(Ĭֵ:ؼ)
/V-ϵͳݴı߳
/X[]-ӹܵ(Ĭֵ:1;:2)

ע:/L /R /W /H ()־ΪʮƲ






/H{A|B|W|S|Q|H}[N][data_offset[*drdo]][:sub_offset][*drdo][#level][@addr][:module][:{name|#ordinal|}]]]

趨

:
A-˫ַֽ
B-˫ַֽ(BE)
W-unicodeַ
S-MBCSַ
Q-UTF-16 ַ
H-16ƵĶλԪ

:
N-ʹ豸
data_offset-ַƫѻ(ַָ)
drdo-"data_offset"
sub-offset-豸ƫѻ
drso-"sub_offset"
level-ѻṹı,ɵַĴķؼ¼
addr-ӵַ
module-ƵĻַַĴ
name-óƵĻַַĴ
ordinal-óŵĻַַĴ

"data_offset""sub_offset"ĸֵ¼¼:
-4 EAX,
-8 ECX,
-C EDX,
-10 EBX,
-14 ESP,
-18 EBP,
-1C ESI,
-20 EDI

"Ӽ"ķ,ʹ C/C++ ṹ:(*(ESP+data_offset)+drdo) ָ (ESP+data_offset)

ע:־ΪʮƲ
