最近闲暇时间迷上了扫雷,有的时候经常遇到模棱两可的地方,很容易死到.于是就在想,要是我一开始就知道哪个地方有雷就好了.遂打开OllyDBG,对扫雷程序(WinMine.exe),进行了一番跟踪.好在WinMine.exe没有加壳,直接看它的IMPORT TABLE,在两个可疑的API上下断点,一个就是GDI.BitBlt,这个是程序来画地图的,另一个就是User32.GetDlgItemInt,这个用来获得扫雷地图大小,和雷的个数的. -recent spell of the mine, some of the frequently encountered when the ambiguity, it is easy to die. So just think, if I started to know where the minefields are not alone. OllyDBG was open to mine (WinMine.exe) performed a track. Fortunately, WinMine.exe no shell, direct look at its IMPORT TABLE, the two suspicious API next breakpoints, is a GDI.BitBlt, this is a procedure to draw the map and the other is the User32.GetDlgItemInt, the mine was used to map the size and the number of the mine. 下载
|