能力值:
(RANK:350 )
|
-
-
2 楼
用GetTickCount设断看看,可能一段代码利用这个API检测时间差。
|
能力值:
( LV2,RANK:10 )
|
-
-
3 楼
下GetTickCount断点
7C80929C > BA 0000FE7F MOV EDX,7FFE0000 //断在这里
7C8092A1 8B02 MOV EAX,DWORD PTR DS:[EDX]
7C8092A3 F762 04 MUL DWORD PTR DS:[EDX+4]
7C8092A6 0FACD0 18 SHRD EAX,EDX,18
7C8092AA C3 RETN
7C8092AB 90 NOP
7C8092AC 90 NOP
7C8092AD 90 NOP
7C8092AE 90 NOP
7C8092AF 90 NOP
7C8092B0 8BFF MOV EDI,EDI
7C8092B2 55 PUSH EBP
7C8092B3 8BEC MOV EBP,ESP
7C8092B5 56 PUSH ESI
7C8092B6 57 PUSH EDI
7C8092B7 64:A1 18000000 MOV EAX,DWORD PTR FS:[18]
7C8092BD 8B75 08 MOV ESI,DWORD PTR SS:[EBP+8]
7C8092C0 8BF8 MOV EDI,EAX
7C8092C2 A1 C446887C MOV EAX,DWORD PTR DS:[7C8846C4]
7C8092C7 85C0 TEST EAX,EAX
7C8092C9 0F85 20090300 JNZ kernel32.7C839BEF
7C8092CF 3977 34 CMP DWORD PTR DS:[EDI+34],ESI
7C8092D2 0F85 43040000 JNZ kernel32.7C80971B
7C8092D8 5F POP EDI
7C8092D9 5E POP ESI
7C8092DA 5D POP EBP
7C8092DB C2 0400 RETN 4
7C8092DE 33C0 XOR EAX,EAX
7C8092E0 ^ E9 B991FFFF JMP kernel32.7C80249E
7C8092E5 90 NOP
7C8092E6 90 NOP
7C8092E7 90 NOP
7C8092E8 90 NOP
7C8092E9 90 NOP
7C8092EA 8BFF MOV EDI,EDI
7C8092EC 55 PUSH EBP
7C8092ED 8BEC MOV EBP,ESP
7C8092EF 56 PUSH ESI
7C8092F0 8B75 0C MOV ESI,DWORD PTR SS:[EBP+C]
7C8092F3 85F6 TEST ESI,ESI
7C8092F5 57 PUSH EDI
7C8092F6 0F85 061B0000 JNZ kernel32.7C80AE02
7C8092FC 3975 10 CMP DWORD PTR SS:[EBP+10],ESI
7C8092FF 0F84 95080000 JE kernel32.7C809B9A
7C809305 E8 41000000 CALL kernel32.7C80934B
7C80930A 8BF8 MOV EDI,EAX
7C80930C 85F6 TEST ESI,ESI
7C80930E 0F85 FF1A0000 JNZ kernel32.7C80AE13
7C809314 33C9 XOR ECX,ECX
7C809316 33D2 XOR EDX,EDX
7C809318 837D 10 00 CMP DWORD PTR SS:[EBP+10],0
7C80931C 74 06 JE SHORT kernel32.7C809324
7C80931E 81C9 80000000 OR ECX,80
7C809324 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8]
7C809327 8360 14 00 AND DWORD PTR DS:[EAX+14],0
7C80932B 8948 0C MOV DWORD PTR DS:[EAX+C],ECX
7C80932E 8B4D 10 MOV ECX,DWORD PTR SS:[EBP+10]
7C809331 C700 18000000 MOV DWORD PTR DS:[EAX],18
7C809337 8978 04 MOV DWORD PTR DS:[EAX+4],EDI
7C80933A 8948 08 MOV DWORD PTR DS:[EAX+8],ECX
7C80933D 8950 10 MOV DWORD PTR DS:[EAX+10],EDX
7C809340 5F POP EDI
7C809341 5E POP ESI
7C809342 5D POP EBP
7C809343 C2 0C00 RETN 0C
7C809346 90 NOP
大侠帮忙看看 我很菜 看不懂
|
能力值:
( LV4,RANK:50 )
|
-
-
4 楼
晕这么看我估计谁也看不懂,不知道前因后果的.
|
能力值:
( LV12,RANK:250 )
|
-
-
5 楼
汗,贴个系统空间的代码,把alt+f9的代码贴出来
|