Ŀ
 Presents
  ڿĴ VMag, Issue 3, 1 January 1999
  
                                                 ͻ
                                                      Version: 1.0           
                                                      Release: 12-Nov-1998y  
                                                   Created by: Hard Wisdom   
                                                 ͼ

[12-Nov-1998y][v1.0]
 ࢮ砫쭮 ᮧ 䠩



       ᠭ 堭 㭪樮஢ ஫ 襩 Windows v4.xx
       ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


[] ঠ
~~~~~~~~~~~~~
 [0]  ⥬ ࠧ
 [1]  ॠ樨 ஫ 襩 Windows v4.0 (a.k.a. 95)
 [2]  ॠ樨 ஫ 襩 Windows v4.0.1111 (a.k.a. 95 OSR2)
 [3]     樮 ⥬ Windows v4.1 (a.k.a. 98)
 [4] ⠫ ॠ樨 ⬮
 [5]  ⮣
 [6] Greetings!


[0]  ⥬ ࠧ
~~~~~~~~~~~~~~~~~~~~
       ਬ  ஫  Windows  v4.xx.    ஫
襬  堭  ࠭    ୮  ᯮ짮  ஫  
⥬.  筮    堭  ⫨砥    ࠭
⥫  ஫  ᮢ           ᯮ짮   
ᯥ樠쭮        짮⥫.    祣    
堭?   祭 ࠡ 짮⥫ ;-)  ᭮,    
...     ...    業      ⥫  
堭. ⮨⢮   㤭  "뢠"    ன,
㬥襭 ⢠ 訡   ஫    ᯮ짮짮
஫ 襩  ( 㦤      뢠    㬠).
⪠  -     祭   ⢥   ꥬ   "ᥪ⭮"
ଠ樨 諥      ஫쭮  ,  ࠩ  쥧
ॠ  堭    樮 ⥬ Windows.
     堭 ࠡ  ஫묨 ᠬ  ⭮⥫쭮  .
। ।뫪 ॠ樨 뫨     Windows  v3.11  祣
  ᪠   ⥬, .. ᠬ 룭  MS-DOS'a ࠧ    Windows
v4.0    筥.       ᪠    ⮬      룫廊
᭠㦨.
   ᮡ ஢ ஫    Windows   ⠭
"⥢ 㦥"  "⢥ ࠬ஢ ࠡ祣 ⮫" (,   
).  ⨪  㭪樮஢  ⥬   ஢   ।
।஬ ⥬ ࠢ PolicyEditor (       Resources
Kit  Micro$oft),  㬮砭 ஢ 祭  (  砥,    
  몫).  筮    ⠪            頥.
஢ ஫ - ⥬ ࢨ,  ,      ਫ
    . 祢 ।,    䨧᪨
 饭 ( ᮭ ;-), ࠧ㬥,    ॠ쭮      
⠪.    ।    ᯮᮡ  ᯮ짮    ࢨ?
ਫ (ਬ Explorer a.k.a. "஢", 줨    ᠭ  ;-)
⠥         ⥢   (      ⮫쪮)   ,   㭪
WNetAddConnection  頥      १   ERROR_INVALID_PASSWORD   
ERROR_ACCESS_DENIED,    ⠪  砥  뢮  ⠭    
஫  (  ⥫,      墠稪     ,   
⭮,  㤥 WNetConnectionDialog), ⥬ ந    ⪨
祭,  砥 ᯥ ஫      ஫      쭥襬
 ⪠  ᯮ짮   㤠  (    ஡
ந室  ४祭    "筮  ࠢ").    ᯮ짮  
ࢨ ⠭⭮?   :

         IMPORTS
            WNetEnumCachedPasswords = MPR.WNetEnumCachedPasswords

⥬:
         Push    0
         Push    Offset AcceptCache
         Push    0FFh
         Push    0
         Push    0
         Call    WNetEnumCachedPasswords

 楤 AcceptCache  窮  ⭮  맮    ਭ  
ࠬ,    -   ஫쭮  ,    
  ਬ .  襩 ணࠬ   ⠪:

         Mov EAx,[ESp+4]
         ...............
         Ret 8h

 ᠬ  祣      ,    㦥    ⠪  ॠ    
ணࠬ PWLHACK v4.02,      㪠    ⮩
.   㦥 ᯥ ,   設    ୮
  ᯨ᮪ ஫ ᮢ  ᥩ  ᮯ饩  ᪮  (
窨 ७ ᭮)  ଠ樥.  ,  Micro$oft!  ,    ᥩ
,   ⠫   ଠ樨, ᫮ MS-DOS    Windows  
㯮  (ࠧ   , 祬    ;-).    ਭ樯,
ᠭ  堭 ࠡ   ஫  襬    ⢥  
(  䮭 祩 )  ⥬ ᭮ Windows.
      ਫ  ઠ... ᪠   ᫮ (     PWLHACK
v4.02),  ।⠢塞 設       㡫筮  ᯮ짮
࠭  ॣ (祬   ஫ﬨ).    ந室:

        Software\Microsoft\Windows\CurrentVersion\Network\LanMan

稭  砬 ᯮ ⥢ ⠫    ᯮ⥫쭠
ଠ (䫠, ஫  .)    堭  ஢  ஫?
 : Seed=6Ah;  ForEach  Password  (Ror  Seed,1;  Character  Xor  Seed)  
騥  -  ⭨   ஢      設  (
᫮ 䨧᪮ 㯠  ). ࠢ  묨  ᠬ  設,
।⠢塞묨   ,    VSERVER.vxd,      ଠ樥  
㤠묨  ࢥࠬ  VREDIR.vxd  ᫮,    離   ࠡ   ⠪   
MSNET32.dll, MSNP32.dll  .
   ᪨  ஫    ᯮ    ⠫   %WINDIR%      
७ .PWL, 祬 ᯨ᮪ 䠩, ⠢ ஫ , 室  
SYSTEM.ini  ࠧ [Passwords Lists]. ᥭ ⠪ ,  䠩  
 짮⥫ १  8 㪢 (8.3  ⠭      䠩).  ᫨
 2-  짮⥫  ᮢ      8-  㪢,    ࠧ,  
ࠡ ᬮ ⮫쪮 ன   ,        ன,  ..
஫ 䠩 ண   䠩 ⢮訩  .  
஢ப    ந,  !  ᪨     ࠡ   ந   
MSPWL32.dll ,      䠪  ᫠  ࠡ⪨  ஢  
㫥,  3- ⮢    ⪫砥    堭  ஢
䠩, ⠢  ஫  ,  ⥬   due   to   孨᪨   稭
⮬᪨     ஫,  :

[MSPWL32.crk]
Windows 95-98 passwords. (C) by *HW*

[W95 & OSR/2]   All passwords are legal and *.PWL's are not encrypted.
MSPWL32.DLL
00000511: 30 90
00000512: 0C 90
00000513: 28 90

[W98 4.10.1691] All passwords are legal and *.PWL's are not encrypted.
MSPWL32.DLL
00001241: 30 90
00001242: 0C 90
00001243: 28 90

[MSPWL32.crk]

塞       䠩 (XOR -    -),
 ⮬  ਬ ஡  .
    ࠡ⪥ 䠩 ᯮ  RC4  (RFC-....        
୥)  MD5 (RFC-1321).  騩    㦥      RC5
(   ਬ  쭥襬).  RC4    ⬮
⮪ ஢  ⠥  ⮩稢,  MD5  -   ᮧ
⮢ (ᢥ⮪) ᮮ饭,  筮      ॠ樨,  ࠧࠡ稪
R.Rivest.   MD5    ਬ  ᮡ    쭥襬.  ⠪,  諮  ६
孨᪮ ଠ樨.


[1]  ॠ樨 ஫ 襩 Windows v4.0 (a.k.a. 95)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    砫  ਢ  -    ᯨ뢠  ⤥  
⮣ 䠩, ⥬  ਨ.

#define W95_PwlSign 0x4E464DB0        //  뢠  "MFN"
#define W95_PwlBase 0x23C

typedef struct {             /* version depended W95 PWL partition */
 byte UserName[20];                         /* Padded owner name   */
 word ResOffsets[0xF];                      /* Resources offsets.  */
} W95_pwl_data;

typedef struct {                         /* PWL file header itself */
 dword Sign;                                /* .PWL file signature */
 dword UnknownC;                            /* ?? Strange counter  */
 byte ResLink[0x100];                       /* Resource link index */
 byte ResKey[0x100];                        /* Resource key entry  */
 union {
  W95_pwl_data W95_Data;                    /* W95 format PWL data */
  OSR_pwl_data OSR_Data;                    /* OSR format PWL data */
 } HdrV;
} pwl_hdr;

⠪, 䠩 ᮤন   ᠬ  砫  ᨣ  W95_PwlSign,    
ࠧ  W95_PwlBase,  ᮡ⢥,    ⮣  ᬥ饭  ᯮ   (筮)
஢ .   UnknownC  㢥稢    祭  ६  
䨪樨 䠩   ᪮॥ ᥣ ᨥ ஫쭮    (୥  
⮫쪮 ᨥ, ᪮쪮 ⮬).
    祢 ,      ᠬ.    ⢫    16-
窠 室 (ᮮ⢥  ⢫  ⥫  ),  
  ⥫쭮  ᪮         ᭮   ଠ樨      
஢뢠 譨 ࠧ "᪨"  (祬,   ࠢ  ⮬  
 __ ). ᪮ 㯫:   砫    ࠡ
 ⥪  ॣࠬ  㭪権 Windows (       
 4.0).  㫥 ⭮ 祭 ᭮ ଠ樨  ᫥
ࠡ⪨  ⥬ 맮. (,  㭪樨 ⢫  
䠩  ⥬ : ⥪騩 ⠫, ⥬  %WINDIR%,  ⥬  PATH  
.. 筮  ᫥ 室  ⠪ 㭪樨  EDx ᮤন  㪠⥫
        䠩,      ਬ...  쪮  ਬ  
㬠饣 祫...) ⢥, 䠩    ᮤঠ  ᨬ쭮  255
ᮢ.  ᨢ ResLink[]  ᮤঠ    ᮢ  (  砥,  ᫨
室 ⨢,   樠⨢ ),       
ResKey[], ᮤঠ騥  祪  室  (㣨  ᫮  -    
ᮢ)    ᭮  䠩.  祬    ⠪  ஢  ⥬?
  ᮮࠦ  ⠢-㤠 ⮢ (     뫮
  ᯨ᪠  ., 䠩, , 뢠  窠, ..  
2-4-...-256 ,  ࠧ ﬨ).
   ⨥ ஫쭮   ⢫  ᫥騬  ࠧ:  ᢮稢
஫  4- ⮢ , ⥬   ந ⠡ RC4   ⢫
஢  UserName  ResOffsets,   UserName    ᮤঠ  
짮⥫.     ஢ ᨬ   㣠,  
  ⥬  祢 祭. ᯮ  ⮬,  RC4 ⮪  .
ࠪ᪨ ᥣ    짮⥫  (஥  ஢  0-    20-
⮢ ࠭)  砥  砫  ,  ⥬  ।  ।
祭 ᬥ饭 ᮢ ( ᭮  ResKey  ResLink,  ⠪    
⠭ W95_PwlBase)     ᪮쪮 ( 15*2) ⮢  ,
⮣ max 50 ⮢ ,      ஢  max    50  ⮢
  ᭮  室,  ᮫⭮    类  ।     ஫
짮⥫.   蠫 ணࠬ Glide  ᢮ ६.     
ਬ  ⮩  ਯ⮠⬮         筨   ᪮쪨
ୠ ⥩  ୮ ୠ⨪.  饥 ६    㦥
,  ⠪    ⮫쪮        ᯮ    Windows  v4.0  
. ன :   RC4 ஢ ⮪, 2^32,   ॡ
  ⢫  ⪨ ( ).   ,  ஫  
Windows v4.0 ࠭஢ __  ࠭   ଠ.
   ᬮਬ  ଠ  ᮢ,    ⠪  ଠ  
砥 窠 ⭮ 맮  WNetEnumCachedPasswords (   
 맮).
Ŀ
 饭 ೇ祭                                                   
͵
    0      Word  騩 ࠧ                                       
    2      Word   ⥫  ( ᮥ, ⥢        
                 ᪠, ஢ ࢥ,  .)                         
    4      Word   ᥪ⭮ ଠ樨  (஫             
                 ᮥ  .)                                       
    6      Byte    (᮫)                                
    7      Byte  ਯ  (6 - DialUp, 6 - NetLink  .)      

⮨ ,     ᥣ ⥪⮢ ப.  MAPI  ࠭  
஫  ᢮  ,   Novell  Network  Provider  ࠭  
짮⥫    ࢥ  2  ப    0    "ᥪ⭮"  
.  騥 ᫥ 䠩  .PWL    ᯮ짮  祬
/LIST:E ணࠬ PWLHACK v4.02   :  楤  ᢥ⪨  ஫
  Windows  v4.0  祢,    ⠪  ᢥ⪠  筮     ⨬
(  ண ⢠ ஫  ⤥쭮 ⮣ ).

              ; EDx - hash, EBx - Pointer to password.
              W95_Hash_Pwd    Proc
                              Xor     EDx,EDx
              W95_Hash_Next:  MovZx   EAx,Byte Ptr [EBx]
                              Add     EDx,EAx
                              Rol     EDx,7
                              Inc     EBx
                              Or      Al,Al
                              Jnz     Short W95_Hash_Next
                              Ret
              W95_Hash_Pwd    EndP

   ୮,    祣      ⮬  ࠧ,  㬠,    
室  ᫥饬. Micro$oft  訢    "ணᨢ-
 ⢥",  ᮡ    襮ᠭ  砥,     뫠 
Micro$oft.


[2]  ॠ樨 ஫ 襩 Windows v4.0.1111 (a.k.a. 95 OSR2)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   筥    筮,    -    .PWL  䠩  ⮩  ᨨ
Windows, த ᭥ﬨ.

#define OSR_PwlSign 0x968582E3       //  뢠  ""
#define OSR_PwlBase 0x290
#define OSR_PwlHdrOfs 0x252

typedef struct {                          /* OSR PWL checking sign */
 byte CryptoSign[0x10];                     /* Crypto sign         */
 byte CheckoSign[0x10];                     /* Checko sign         */
 word ResOffsets[0xF];                      /* Resources offsets.  */
} check_pack;

typedef struct {             /* version depended OSR PWL partition */
 dword HdrOfs;                              /* Offset to CryptoHdr */
 dword CryptoSeed[0x11];                    /* Resource CryptoSeed */
 word UnkAlign;                             /* ?? Just alignment   */
 check_pack Check;                          /* Checking crypt-sign */
} OSR_pwl_data;

typedef struct {                         /* PWL file header itself */
 dword Sign;                                /* .PWL file signature */
 dword UnknownC;                            /* ?? Strange counter  */
 byte ResLink[0x100];                       /* Resource link index */
 byte ResKey[0x100];                        /* Resource key entry  */
 union {
  W95_pwl_data W95_Data;                    /* W95 format PWL data */
  OSR_pwl_data OSR_Data;                    /* OSR format PWL data */
 } HdrV;
} pwl_hdr;

  䠩 ⠫  ,     室,  堭
㯠   (窠 室)    .    -    ?  
,  ᨣ 䠩,  ⥯    OSR_PwlSign,  ᮮ⢥⢥
   ᭮ ଠ樨,   ⥯  筮  ᯮ
 ᬥ饭  OSR_PwlBase    ⥫쭮    HdrOfs  饥  
ࠢ 祭 OSR_PwlHdrOfs,     ᬥ饭  ᯮ  ⥫
 祪 室 (ᬥ饭  䠩, ᮮ⢥⢥ ࠧ  ᭮
  ResOffsets[i+1]-ResOffsets[i]), , ᫨  筮,   
check_pack. ᪮ ࠡ  ᠬ  뫠  ᠭ  ,    ३  
 :  ஫쭮 .
     ⥯ 稭 ஡. ࢮ砫쭮 ஫     ⠭⮩
0xFFFFFFFF,    ⠪    CryptoSeed[0x10],     짮⥫      ஫
᢮稢  MD5 ,  4 DWord'a ( 2 室,  砫  ,  ⥬
஫). ᫥ ⮣  ஢뢠  ⮪  䠩  check_pack  (⬮
RC4), ⥬ 믮   MD5 ᢥ⪠,      짮⥫
  CryptoSign[]   १      ᨣ  CheckoSign[],
⮣  ⮫쪮 ⮣ ஫ 業  ⨬.    ,  ࠢ
 ⪨ ।饣 ଠ ᭮ 䠩.    ⭮,  ॠ
ॡ騪  ,    ᪮  ᭨    2  ࠧ,    ࠢ  
ਠ⮬  Windows v4.0 (38 . pps ⨢ 55  .  pps)  ࠢ  ⠪
⪨   ᢥ⪨ ஫   ਢ쭠  ᨬ  ᢥ⪨  
஫.  ⬥ ⠪  䠪,            
 ஫ ᨬ쭮  14 ᨬ  ८ࠧ   孥  ॣ
(ࠢ   ᨩ  Windows  v4.0-4.0.1111).    ⢥  ᮪頥
࠭⢮  ॡ.        ᭮ -
? ,  ᮧ   ஢, ᯮ  CryptoSeed[i],
祬 ய᪠ ⮩ ଠ樨  ᪢ MD5       אַ
४樨      ᮢ.


[3]     樮 ⥬ Windows v4.1 (a.k.a. 98)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    祭 , ० ᥣ, 﫨 ࠭祭     
 (⥯       ⭨  ᨬ      짮⥫    
஫).   ,        짮⥫  롨ࠥ    ᯨ᪠,  
 筮    ᯮ짮      짮⥫  (
祭  ॡ). ,   ஫  ᯨ᪠ 롨  ;-)   
, ଠ 䠩     ௥.  뫠  ⥫쭮  ९ᠭ
MSPWL32.dll, 筮   ⠫  2 ࠧ  ꥬ (⠪ 饭,  
஢ ந⥫ ஢ -     ࠧ    Micro$oft).
  祣.


[4] ⠫ ॠ樨 ⬮
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      ⥫ ᬮ ᮡ ᯮ짮  ⬮:  RC4  
MD5,  ⠪     Windows v4.x 筥  RC4.

typedef struct {                               /* main cryptotable */
 byte body[0x100];                            /* data table itself */
 byte c1,c2;                    /* crypto pointers into data table */
 dword keylen;                                       /* len of key */
 void* key;                              /* key for table building */
} RC4_table;


void init_RC4_table(RC4_table* x) {    /* initializing cryptotable */
 int i,p,t,tt; x->c1=0,x->c2=0;
 for (i=0;i<=255;x->body[i]=i,i++);
 t=0; for (i=0,p=0;i<=255;i++,p=i & 0x0F) {
  t+=x->key[p]+x->body[i]; t&=0xFF;
  tt=x->body[i]; x->body[i]=x->body[t]; x->body[t]=tt;
 }
}

void use_RC4_table(xor_table* x, void* data, word datalen) {
 byte p1,p2,t;           /* en/decrypting the data via cryptotable */
 p1=x->c1; p2=x->c2;
 while (datalen--) { p2+=x->body[++p1];
  t=x->body[p1]; x->body[p1]=x->body[p2]; x->body[p2]=t;
  t+=x->body[p1]; *((byte*)data)++^=x->body[t];
 }; x->c1=p1; x->c2=p2;
}

RC4_table  㫨    ᥡ       室      믮
஢  (      楤  祭     १      
MSPWL32.dll, ⠭     㪠    ঠ).  init_RC4_table()  ⢫
ࢨ ன ⠡   key,  use_RC4_table  믮  
饩   ⮪   data    datalen.  ,    
襯ਢ ஧筮, ⮬ ३    MD5.  믮    ⠯
ᢥ⪨ 믮 ᫥饩 㭪樥:

                 MD5_FF  1,2,3,4,  0, 0D76AA478h,  7 ; Round 1
                 MD5_FF  4,1,2,3,  1, 0E8C7B756h, 12
                 MD5_FF  3,4,1,2,  2, 0242070DBh, 17
                 MD5_FF  2,3,4,1,  3, 0C1BDCEEEh, 22
                 MD5_FF  1,2,3,4,  4, 0F57C0FAFh,  7
                 MD5_FF  4,1,2,3,  5, 04787C62Ah, 12
                 MD5_FF  3,4,1,2,  6, 0A8304613h, 17
                 MD5_FF  2,3,4,1,  7, 0FD469501h, 22
                 MD5_FF  1,2,3,4,  8, 0698098D8h,  7
                 MD5_FF  4,1,2,3,  9, 08B44F7AFh, 12
                 MD5_FF  3,4,1,2, 10, 0FFFF5BB1h, 17
                 MD5_FF  2,3,4,1, 11, 0895CD7BEh, 22
                 MD5_FF  1,2,3,4, 12, 06B901122h,  7
                 MD5_FF  4,1,2,3, 13, 0FD987193h, 12
                 MD5_FF  3,4,1,2, 14, 0A679438Eh, 17
                 MD5_FF  2,3,4,1, 15, 049B40821h, 22

                 MD5_GG  1,2,3,4,  1, 0F61E2562h,  5 ; Round 2
                 MD5_GG  4,1,2,3,  6, 0C040B340h,  9
                 MD5_GG  3,4,1,2, 11, 0265E5A51h, 14
                 MD5_GG  2,3,4,1,  0, 0E9B6C7AAh, 20
                 MD5_GG  1,2,3,4,  5, 0D62F105Dh,  5
                 MD5_GG  4,1,2,3, 10, 002441453h,  9
                 MD5_GG  3,4,1,2, 15, 0D8A1E681h, 14
                 MD5_GG  2,3,4,1,  4, 0E7D3FBC8h, 20
                 MD5_GG  1,2,3,4,  9, 021E1CDE6h,  5
                 MD5_GG  4,1,2,3, 14, 0C33707D6h,  9
                 MD5_GG  3,4,1,2,  3, 0F4D50D87h, 14
                 MD5_GG  2,3,4,1,  8, 0455A14EDh, 20
                 MD5_GG  1,2,3,4, 13, 0A9E3E905h,  5
                 MD5_GG  4,1,2,3,  2, 0FCEFA3F8h,  9
                 MD5_GG  3,4,1,2,  7, 0676F02D9h, 14
                 MD5_GG  2,3,4,1, 12, 08D2A4C8Ah, 20

                 MD5_HH  1,2,3,4,  5, 0FFFA3942h,  4 ; Round 3
                 MD5_HH  4,1,2,3,  8, 08771F681h, 11
                 MD5_HH  3,4,1,2, 11, 06D9D6122h, 16
                 MD5_HH  2,3,4,1, 14, 0FDE5380Ch, 23
                 MD5_HH  1,2,3,4,  1, 0A4BEEA44h,  4
                 MD5_HH  4,1,2,3,  4, 04BDECFA9h, 11
                 MD5_HH  3,4,1,2,  7, 0F6BB4B60h, 16
                 MD5_HH  2,3,4,1, 10, 0BEBFBC70h, 23
                 MD5_HH  1,2,3,4, 13, 0289B7EC6h,  4
                 MD5_HH  4,1,2,3,  0, 0EAA127FAh, 11
                 MD5_HH  3,4,1,2,  3, 0D4EF3085h, 16
                 MD5_HH  2,3,4,1,  6, 004881D05h, 23
                 MD5_HH  1,2,3,4,  9, 0D9D4D039h,  4
                 MD5_HH  4,1,2,3, 12, 0E6DB99E5h, 11
                 MD5_HH  3,4,1,2, 15, 01FA27CF8h, 16
                 MD5_HH  2,3,4,1,  2, 0C4AC5665h, 23

                 MD5_II  1,2,3,4,  0, 0F4292244h,  6 ; Round 4
                 MD5_II  4,1,2,3,  7, 0432AFF97h, 10
                 MD5_II  3,4,1,2, 14, 0AB9423A7h, 15
                 MD5_II  2,3,4,1,  5, 0FC93A039h, 21
                 MD5_II  1,2,3,4, 12, 0655B59C3h,  6
                 MD5_II  4,1,2,3,  3, 08F0CCC92h, 10
                 MD5_II  3,4,1,2, 10, 0FFEFF47Dh, 15
                 MD5_II  2,3,4,1,  1, 085845DD1h, 21
                 MD5_II  1,2,3,4,  8, 06FA87E4Fh,  6
                 MD5_II  4,1,2,3, 15, 0FE2CE6E0h, 10
                 MD5_II  3,4,1,2,  6, 0A3014314h, 15
                 MD5_II  2,3,4,1, 13, 04E0811A1h, 21
                 MD5_II  1,2,3,4,  4, 0F7537E82h,  6
                 MD5_II  4,1,2,3, 11, 0BD3AF235h, 10
                 MD5_II  3,4,1,2,  2, 02AD7D2BBh, 15
                 MD5_II  2,3,4,1,  9, 0EB86D391h, 21

襮ᠭ 㬭 ⮫ 㭪権 ⢫  ᢮稢  64-  ⮢
   16.    ᢥ⪥    稪  ⮢    (ᯮ  
᫥  DWord'  ᢮稢  ),   ࠣ         
64-⮢ ࠭ ࠢ     80h,    ⥬  0-  
ॡ㥬   ࠭.         ਢ   ⥫   㭪権,    ⢫
८ࠧ,  ᪮쪮 ⫨  ⠭,   ⨬஢!  
  ஬  ୮  Shadow  Dragon'.    㫨   㭪樨
MD5_HH,   ⥫쭮 ᪮ PWLHACK v4.02

   ; p1 = ( ( p1 += ( ( p3 ^ p4 ) & p2 ^ p4 ) + K[] + X ) Roll R ) + p2
   MD5_FF          Macro   P1,P2,P3,P4,K,X,R

   ; p1 = ( ( p1 += ( ( p2 ^ p3 ) & p4 ^ p3 ) + K[] + X ) Roll R ) + p2
   MD5_GG          Macro   P1,P2,P3,P4,K,X,R

   ; p1 = ( ( p1 += ( ( p2 ^ p3 ^ p4 ) + K[] + X ) Roll R ) + p2
   MD5_HH          Macro   P1,P2,P3,P4,K,X,R

   ; p1 = ( ( p1 += ( ( p2 | ~p4 ) ^ p3) + K[] + X ) Roll R ) + p2
   MD5_II          Macro   P1,P2,P3,P4,K,X,R

 ⠫ ଠ    RFC-1321 (  ⮬  ᫥    ਣ
 㭪権 FF..II). ,   ਢ  ,    樥  ⠭
 Intel . ࠬ P1..P4  ᮮ⢥騥 DWord , K  -
᢮稢 ᮮ饭 ( DWord'  0  16),  X  -  -祭
⠭, 祭 ८ࠧ ⠡窨 ᨭᮢ.


[5]  ⮣
~~~~~~~~~~~~~~~~~~~~~
     諮    쪮 ⢨,  ஡  ᬮ७  
  ஭    ࠧ࠭    窠,    롨    楫,   
ਧ... ᪠  ᤥ    ᥡ  뢮    ਭ樯  ஥
⥬ ࠭ "᪮" ( 窨 ७ ᭮) ଠ樨,  㢨
訡  饬 ணࠬ ᯥ祭    .


[6] Greetings!
~~~~~~~~~~~~~~

  Shadow Dragon  -   ⨬樨   ⬮ PWLHACK, 
       ERL       - , ࠧ, ਨ, ଠ  
       SJ        - প 譥 ࠭窨, 㤠  襮ᠭ
                   嫮  ᪠, ࠧ, ଠ
    PolyGris     - ᯥਬ   窮 - Windows 98,    
                    ᬮ 訩 ,   ?
 WorkPC'n'HomePC - ,    2    뫮 ᤥ,
                       稭 - 㦥 
    .........    - 祭  , ᠢ ,  ᯨ᮪ 㤥 
                    ࠧ, 祬  ⥪  ᠭ

           Home Page: www.geocities.com/SiliconValley/Hills/7827
              E-Mail:         hardwisdom@geocities.com
