[ 9437 查看 / 28 回复 ]
千砂与美纱的神隐
- 夜の旅人 -
以下引用nitekid在2005-2-17 2:28:06的发言:那种事我干过两次,呼,还是不太信任纯粹的计算,要查看一下分区表保险
我见过用Debug做的3d demo,霍霍
挖
Originally posted by detrox at 2003-12-8 23:14:只不过upx压缩了所以比较小了。解压以后又176,128之大。通过dumpbin应该知道这些,这个就是用D3D加多线程做的。只是不知道为什么UPX能把它压缩到64k,普通的一个64k的notepad只能压缩到47k左右阿。不过这个东西。不过通过程序里的一些字符还是可以断定是汇编写的。Microsoft (R) COFF/PE Dumper Version 7.10.3077Copyright (C) Microsoft Corporation. All rights reserved.Dump of file HEAVEN7W.EXEFile Type: EXECUTABLE IMAGE Section contains the following imports: KERNEL32.DLL 40F010 Import Address Table 0 Import Name Table 0 time date stamp 0 Index of first forwarder reference 0 GetCommandLineA 0 GlobalFree 0 CreateThread 0 GetModuleHandleA 0 LeaveCriticalSection 0 ExitProcess 0 InitializeCriticalSection 0 SetThreadPriority 0 EnterCriticalSection 0 CloseHandle 0 DeleteCriticalSection 0 GlobalAlloc 0 Sleep 0 TerminateThread DDRAW.dll 40F000 Import Address Table 0 Import Name Table 0 time date stamp 0 Index of first forwarder reference 0 DirectDrawCreate DSOUND.dll 40F008 Import Address Table 0 Import Name Table 0 time date stamp 0 Index of first forwarder reference Ordinal 1 USER32.dll 40F04C Import Address Table 0 Import Name Table 0 time date stamp 0 Index of first forwarder reference 0 CreateWindowExA 0 EndDialog 0 OffsetRect 0 ClientToScreen 0 GetSystemMetrics 0 SetCursor 0 DestroyWindow 0 ShowWindow 0 SystemParametersInfoA 0 GetClientRect 0 RegisterClassA 0 MessageBoxA 0 DispatchMessageA 0 DefWindowProcA 0 PeekMessageA 0 DialogBoxIndirectParamA 0 SendDlgItemMessageA WINMM.dll 40F094 Import Address Table 0 Import Name Table 0 time date stamp 0 Index of first forwarder reference 0 timeGetTime Summary 1B000 .data 1000 .rdata
公主
迷走中年