#ifndef?CETC
ALLERT!?DO?NOT?PUT?THIS?FILE?IN?THE?STANDARD?CE?DISTRIBUTION
#endif

#include?“ntifs.h“
#include?“extraimports.h“
#include?“memscan.h“
#include?“tdiwrapper.h“
#include?
#include?“rootkit.h“

VOID?CETC_CORE（IN?PVOID?StartContext）
{
	KLOCK_QUEUE_HANDLE?lqh;
	PEPROCESS?ActivePEPROCESS=NULL;

	InitServer（）;


	if?（FileobjectConnection!=NULL）
	{
		StopListener=FALSE;

		while?（!StopListener）
		{
			AddressListEntries=0;

			DbgPrint（“Start?listening\n“）;
			if?（Listen（））
			{
				ULONG?DataSent=0;
				BOOLEAN?PasswordCorrect=FALSE;
				int?i;
				unsigned?char?command;
				char?a;				
				char?*buffer;
				char?defaultpass[9]=“defaultpw“;
				DbgPrint（“Listen=success\n“）;

				connected=TRUE;

				DbgPrint（“Waiting?for?password\n“）;				

				while?（（!PasswordCorrect）?&&?（connected））
				{
					if?（Receive（&command1））
					{		


						if?（command==CS_PASSWORD）?//only?one?possible?so?use?a?if
						{							
							if?（Receive（&a1））?//length
							{
								if?（a!=0）
								{
									buffer=ExAllocatePoolWithTag（NonPagedPool（ULONG）a0）;
									
									DbgPrint（“received?passsize=%d\n“a）;
									//allocate?a?buffer?big?enough?to?receive?the?password
									if?（Receive（buffera））
									{
										if?（a<=9）
										{
		????????????????????????????????????for?（i=0;?i												if?（buffer[i]!=defaultpass[i]）
													break;
		
											PasswordCorrect=（i==9）;
										}								
		
										if?（PasswordCorrect）
											DbgPrint（“Password?correct\n“）;
										else
											DbgPrint（“Password?incorrect\n“）;
									}							
		
									ExFreePool（buffer）;
								}						
							}
						}
					}
				}

				if?（!connected）
					continue;

						
				DataSent=0;

				while?（connected）
				{
					DbgPrint（“Going?to?read?a?new?command\n“）;
					if?（Receive（&command1））
					{
						DbgPrint（“command=%d\n“command）;
						switch?（command）
						{

							case?CS_SetTimerSpeed:?//（freezeinterval:word）
							{
								WORD?fi;
								DbgPrint（“Set?Timer?Speed\n“）;
????????????????????????????????Receive（&fi2）;

								FreezeInterval.QuadPart=fi*-10000;

								//-50000000=5?seconds=5000?ms
								//-5000000=500?ms
								break;
							}

							case?CS_KERNELDATA:
							{
								DbgPrint（“Kerneldata?received\n“）;
								Receive（&ActivelinkOffset4）;
								Receive（&ProcessNameOffset4）;
								Receive（&DebugportOffset4）;
								Receive（&PIDOffset4）;
								break;
							}

							case?CS_SetConfig:
							{
								//UseDebugRegs:byte;UseDBKQueryMemoryRegion:byte;UseDBKReadWriteMemory:byte;UseDBKOpenProcess:byte）
								DbgPrint（“SetConfig\n“）;
								
								Receive（&MemscanOptions.ShowAsSigned1）;
								Receive（&MemscanOptions.BinariesAsDecimal1）;
								Receive（&MemscanOptions.max2）;
								Receive（&MemscanOptions.buffersize4）;
								Receive（&

?屬性????????????大小?????日期????時間???名稱
-----------?---------??----------?-----??----

?????文件??????12492??2010-03-31?21:57??y.dfm

?????文件????????473??2010-03-31?21:57??allochook\allochook.cfg

?????文件???????3139??2010-03-31?21:57??allochook\allochook.dof

?????文件???????1201??2010-03-31?21:57??allochook\allochook.dpr

?????文件????????876??2010-03-31?21:57??allochook\allochook.res

?????文件??????10360??2010-03-31?21:57??allochook\hookedfunctions.pas

?????文件????????459??2010-03-31?21:56??CEHook\CEHook.cfg

?????文件???????3032??2010-03-31?21:56??CEHook\CEHook.dof

?????文件?????315498??2010-03-31?21:56??CEHook\CEHook.dpr

?????文件????????876??2010-03-31?21:56??CEHook\CEHook.res

?????文件???????2552??2010-03-31?21:56??CEHook\globals.pas

?????文件???????5606??2010-03-31?21:56??CEHook\speedhack.pas

?????文件??????23924??2010-03-31?21:56??CEHook\stealth.pas

?????文件????????434??2010-03-31?21:56??CEPacketFilter\CePacketFilter.cfg

?????文件???????3845??2010-03-31?21:56??CEPacketFilter\CePacketFilter.dof

?????文件????????707??2010-03-31?21:56??CEPacketFilter\CePacketFilter.dpr

?????文件???????4900??2010-03-31?21:56??Cheat?Engine?Net\CETCClient\addformunit.dfm

?????文件???????4897??2010-03-31?21:56??Cheat?Engine?Net\CETCClient\addformunit.pas

?????文件???????1631??2010-03-31?21:56??Cheat?Engine?Net\CETCClient\CEClient.dfm

?????文件??????28024??2010-03-31?21:56??Cheat?Engine?Net\CETCClient\CEClient.pas

?????文件????????342??2010-03-31?21:56??Cheat?Engine?Net\CETCClient\changetimerunit.dfm

?????文件????????362??2010-03-31?21:56??Cheat?Engine?Net\CETCClient\changetimerunit.pas

?????文件????????412??2010-03-31?21:56??Cheat?Engine?Net\CETCClient\Client.cfg

?????文件???????3456??2010-03-31?21:56??Cheat?Engine?Net\CETCClient\Client.dof

?????文件???????3909??2010-03-31?21:56??Cheat?Engine?Net\CETCClient\Client.dpr

?????文件????????766??2010-03-31?21:56??Cheat?Engine?Net\CETCClient\client.ico

?????文件????????778??2010-03-31?21:56??Cheat?Engine?Net\CETCClient\commentsunit.dfm

?????文件????????459??2010-03-31?21:56??Cheat?Engine?Net\CETCClient\commentsunit.pas

?????文件???????1112??2010-03-31?21:56??Cheat?Engine?Net\CETCClient\debugger.pas

?????文件???????1398??2010-03-31?21:56??Cheat?Engine?Net\CETCClient\formScanningUnit.dfm

............此處省略1983個文件信息