各位前辈,以下是FileTimeToLocalFileTime函数指令,我如何能让程序不运行这段指令呢?
7C80E866 > 8BFF mov edi, edi
7C80E868 55 push ebp
7C80E869 8BEC mov ebp, esp
7C80E86B 64:A1 18000000 mov eax, dword ptr fs:[18]
7C80E871 8B40 30 mov eax, dword ptr [eax+30]
7C80E874 8B0D D802FE7F mov ecx, dword ptr [7FFE02D8]
7C80E87A 3B88 D4010000 cmp ecx, dword ptr [eax+1D4]
7C80E880 0F85 ABC70200 jnz 7C83B031
7C80E886 B8 2000FE7F mov eax, 7FFE0020
7C80E88B 56 push esi
7C80E88C 8B50 04 mov edx, dword ptr [eax+4]
7C80E88F 8B30 mov esi, dword ptr [eax]
7C80E891 3B50 08 cmp edx, dword ptr [eax+8]
7C80E894 ^ 75 F6 jnz short 7C80E88C
7C80E896 8B4D 08 mov ecx, dword ptr [ebp+8]
7C80E899 8B01 mov eax, dword ptr [ecx]
7C80E89B 8B49 04 mov ecx, dword ptr [ecx+4]
7C80E89E 2BC6 sub eax, esi
7C80E8A0 1BCA sbb ecx, edx
7C80E8A2 8B55 0C mov edx, dword ptr [ebp+C]
7C80E8A5 8902 mov dword ptr [edx], eax
7C80E8A7 33C0 xor eax, eax
7C80E8A9 894A 04 mov dword ptr [edx+4], ecx
7C80E8AC 40 inc eax
7C80E8AD 5E pop esi
7C80E8AE 5D pop ebp
7C80E8AF C2 0800 retn 8
[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)