一般处理 ~~~ bpx hmemcpy bpx MessageBox bpx MessageBoxExA bpx MessageBeep bpx SendMessage bpx GetDlgItemText bpx GetDlgItemInt bpx GetWindowText bpx GetWindowWord bpx GetWindowInt bpx DialogBoxParamA bpx CreateWindow bpx CreateWindowEx bpx ShowWindow bpx UpdateWindow bmsg xxxx wm_move bmsg xxxx wm_gettext bmsg xxxx wm_command bmsg xxxx wm_activate ~~~ * * * * * 时间相关 ~~~ bpint 21 if ah==2A (DOS) bpx GetLocalTime bpx GetFileTime bpx GetSystemtime ~~~ * * * * * CD-ROM 或 磁盘相关 ~~~ bpint 13 if ah==2 (DOS) bpint 13 if ah==3 (DOS) bpint 13 if ah==4 (DOS) bpx GetFileAttributesA bpx GetFileSize bpx GetDriveType bpx GetLastError bpx ReadFile bpio -h (Your CD-ROM Port Address) R ~~~ 软件狗相关 ~~~ bpio -h 278 R bpio -h 378 R ~~~ 键盘输入相关 ~~~ bpint 16 if ah==0 (DOS) bpint 21 if ah==0xA (DOS) ~~~ 文件访问相关 ~~~ bpint 21 if ah==3dh (DOS) bpint 31 if ah==3fh (DOS) bpint 21 if ah==3dh (DOS) bpx ReadFile bpx WriteFile bpx CreateFile bpx SetFilePointer bpx GetSystemDirectory ~~~ INI 初始化文件相关 ~~~ bpx GetPrivateProfileString bpx GetPrivateProfileInt bpx WritePrivateProfileString bpx WritePrivateProfileInt ~~~ 注册表相关 ~~~ bpx RegCreateKey bpx RegDeleteKey bpx RegQueryValue bpx RegCloseKey bpx RegOpenKey ~~~ 注册标志相关 `bpx cs:eip if EAX==0` 内存标准相关 `bpmb cs:eip rw if 0x30:0x45AA==0` 显示相关 ~~~ bpx 0x30:0x45AA do "d 0x30:0x44BB" bpx CS:0x66CC do "? EAX" ~~~