一般處理 ~~~ bpx hmemcpy bpx MessageBox bpx MessageBoxExA bpx MessageBeep bpx SendMessage bpx GetDlgItemText bpx GetDlgItemInt bpx GetWindowText bpx GetWindowWord bpx GetWindowInt bpx DialogBoxParamA bpx CreateWindow bpx CreateWindowEx bpx ShowWindow bpx UpdateWindow bmsg xxxx wm_move bmsg xxxx wm_gettext bmsg xxxx wm_command bmsg xxxx wm_activate ~~~ * * * * * 時間相關 ~~~ bpint 21 if ah==2A (DOS) bpx GetLocalTime bpx GetFileTime bpx GetSystemtime ~~~ * * * * * CD-ROM 或 磁盤相關 ~~~ bpint 13 if ah==2 (DOS) bpint 13 if ah==3 (DOS) bpint 13 if ah==4 (DOS) bpx GetFileAttributesA bpx GetFileSize bpx GetDriveType bpx GetLastError bpx ReadFile bpio -h (Your CD-ROM Port Address) R ~~~ 軟件狗相關 ~~~ bpio -h 278 R bpio -h 378 R ~~~ 鍵盤輸入相關 ~~~ bpint 16 if ah==0 (DOS) bpint 21 if ah==0xA (DOS) ~~~ 文件訪問相關 ~~~ bpint 21 if ah==3dh (DOS) bpint 31 if ah==3fh (DOS) bpint 21 if ah==3dh (DOS) bpx ReadFile bpx WriteFile bpx CreateFile bpx SetFilePointer bpx GetSystemDirectory ~~~ INI 初始化文件相關 ~~~ bpx GetPrivateProfileString bpx GetPrivateProfileInt bpx WritePrivateProfileString bpx WritePrivateProfileInt ~~~ 注冊表相關 ~~~ bpx RegCreateKey bpx RegDeleteKey bpx RegQueryValue bpx RegCloseKey bpx RegOpenKey ~~~ 注冊標志相關 `bpx cs:eip if EAX==0` 內存標準相關 `bpmb cs:eip rw if 0x30:0x45AA==0` 顯示相關 ~~~ bpx 0x30:0x45AA do "d 0x30:0x44BB" bpx CS:0x66CC do "? EAX" ~~~