这是个directx 9的游戏
& r. w6 C( z, x8 E- J- ]) I1 s在exe中检索检索+40h],找到2处,以下是其中1处,应该就是CreateDevice的地方。$ {* b# h6 d! J9 Z: H
- .text:00404391 68 B0 31 7C 00 push offset dword_7C31B08 Q& r) v. f4 H+ M6 p5 }$ R+ y8 i
- .text:00404396 68 78 31 78 00 push offset dword_7831786 @$ d1 G7 F% D1 f5 }' g
- .text:0040439B 6A 20 push 20h
; Q8 v1 H; G5 X0 I; t3 [2 O* Q* l) s - .text:0040439D 8B 45 08 mov eax, [ebp+arg_0]
7 i9 {2 ~' o. n+ C/ C' } - .text:004043A0 50 push eax1 B$ Y4 W& n/ H0 B* f1 f
- .text:004043A1 6A 01 push 1
i' u. q; X/ u- J# t b7 c& B - .text:004043A3 8B 4D F8 mov ecx, [ebp+var_8]% ?0 t8 V& C c2 L
- .text:004043A6 51 push ecx ]: {+ z5 L2 C( y& ?6 J1 S/ J s
- .text:004043A7 8B 15 74 31 78 00 mov edx, dword_783174) P1 K# w* `- e+ m
- .text:004043AD 8B 02 mov eax, [edx]/ d( e B7 D& E( @- H6 F
- .text:004043AF 8B 0D 74 31 78 00 mov ecx, dword_783174' ?* X% i8 q. @2 P- x
- .text:004043B5 51 push ecx9 F0 |( j3 |! V; B/ Q5 H* \
- .text:004043B6 8B 50 40 mov edx, [eax+40h] s+ k' z2 T, a- y, r) m
- .text:004043B9 FF D2 call edx
复制代码 - D/ C% p% {. f1 e
( c: e/ h- G3 r3 x3 {$ d: F! r
" S' {" c8 u( P+ e- q7 p* t
|