首页
社区
课程
招聘
软件中有timer,无法中断追踪,该怎么下手
发表于: 2006-3-15 18:06 4188

软件中有timer,无法中断追踪,该怎么下手

2006-3-15 18:06
4188
软件中有timer,无法中断追踪,该怎么下手
注册的时候一中断就跑timer事件里去了
是易语言 不好静态分析代码
只有od勉强能用
菜鸟提问 别见笑

[课程]Linux pwn 探索篇!

收藏
免费 0
支持
分享
最新回复 (5)
雪    币: 339
活跃值: (1510)
能力值: ( LV13,RANK:970 )
在线值:
发帖
回帖
粉丝
2
到底是想调试timer事件还是不想调试timer事件?
2006-3-15 18:46
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
3
是不想,我想追踪注册的算法
2006-3-16 14:09
0
雪    币: 506
活跃值: (388)
能力值: ( LV7,RANK:100 )
在线值:
发帖
回帖
粉丝
4
用pe explorer把Timer改的长一些喽
2006-3-16 15:46
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
5
是该把timer改长些  易语言没见过 找不到地方
那个软件bug太多了 总是出错 我都想把写软件的拉过来骂一通
破也没有价值 不弄了 谢谢2位的回答
2006-3-16 20:58
0
雪    币: 215
活跃值: (85)
能力值: ( LV4,RANK:50 )
在线值:
发帖
回帖
粉丝
6
郁闷,从昨天刷到今天结果晚了,唉

1。你把,那个timer给nop掉
2。你把,那个timer的interval值改的非常大

试试winAPI中的setTimer函数。很有可能是这个东西创建的timer,所以你可以在这里下个断点,函数原型:

UINT_PTR SetTimer(          HWND hWnd,
    UINT_PTR nIDEvent,
    UINT uElapse,
    TIMERPROC lpTimerFunc
);
hWnd
[in] Handle to the window to be associated with the timer. This window must be owned by the calling thread. If this parameter is NULL, no window is associated with the timer and the nIDEvent parameter is ignored.
nIDEvent
[in] Specifies a nonzero timer identifier. If the hWnd parameter is NULL, this parameter is ignored. If the hWnd parameter is not NULL and the window specified by hWnd already has a timer with the value nIDEvent, then the existing timer is replaced by the new timer. When SetTimer replaces a timer, the timer is reset. Therefore, a message will be sent after the current time-out value elapses, but the previously set time-out value is ignored.
uElapse
[in] Specifies the time-out value, in milliseconds.
Windows NT/2000/XP: If uElapse is greater than 0x7fffffff, the timeout is set to 1.

Windows 2000/XP: If uElapse is less than 10, the timeout is set to 10.

Windows Server 2003: If uElapse is greater than 0x7fffffff, the timeout is set to 0x7fffffff.

lpTimerFunc
[in] Pointer to the function to be notified when the time-out value elapses. For more information about the function, see TimerProc. If lpTimerFunc is NULL, the system posts a WM_TIMER message to the application queue. The hwnd member of the message's MSG structure contains the value of the hWnd parameter.

当然了这里面的值你可以改的很多啊。可以实现你要的功能
2006-3-16 22:52
0
游客
登录 | 注册 方可回帖
返回
//