3 ms·
A fun fact about Windows is that you can just pluck the system time out of a known memory location (0x7ffe0014). It's unlikely that a tool like this could patch
by rossy 5y ago
A fun fact about Windows is that you can just pluck the system time out of a known memory location (0x7ffe0014). It's unlikely that a tool like this could patch that and I wouldn't be surprised if it's one of the techniques that shareware can use to detect tampering with the system time. I wouldn't be surprised if video games used it to prevent cheating either. What did surprise me is that the Go runtime appears to use it too.
- compsciphd 5y agoI'd assume one would just set a breakpoint on memory read of that location and return a different value to the application?
- nly 5y agoLinux has something similar, where the gettimeofday function is commonly made available via a VDSO https://en.m.wikipedia.org/wiki/VDSO https://en.m.wikipedia.org/wiki/VDSO