-
-
问一个crackme的思路
-
2007-5-20 10:49
-
我碰到个用mfc写的crackme,跟往常一样,用od载入,运行,输入用户名,密码,然后用mfcspy查看:
message map=004032F8(CrackMe1.exe+0032F8)
msg map entries at 00403300(CrackMe1.exe+003300)
OnMsg:WM_PAINT(000f),func=00401370(CrackMe1.exe+001370)
OnMsg:WM_QUERYDRAGICON(0037),func=00401430(CrackMe1.exe+001430)
OnCommand: notifycode=0000 id=03e8,func=00401440(CrackMe1.exe+001440)
OnMsg:WM_TIMER(0113),func=00401A10(CrackMe1.exe+001A10)
OnMsg:WM_CLOSE(0010),func=00401350(CrackMe1.exe+001350)
本以为在00401440处下断点,程序就可以断下来了,可奇怪的就是,一下断点,程序就自动终止,
用GetWindowTextA和万能断点也都不行,一下断点,程序就中止,问下思路, 
message map=004032F8(CrackMe1.exe+0032F8)
msg map entries at 00403300(CrackMe1.exe+003300)
OnMsg:WM_PAINT(000f),func=00401370(CrackMe1.exe+001370)
OnMsg:WM_QUERYDRAGICON(0037),func=00401430(CrackMe1.exe+001430)
OnCommand: notifycode=0000 id=03e8,func=00401440(CrackMe1.exe+001440)
OnMsg:WM_TIMER(0113),func=00401A10(CrackMe1.exe+001A10)
OnMsg:WM_CLOSE(0010),func=00401350(CrackMe1.exe+001350)
本以为在00401440处下断点,程序就可以断下来了,可奇怪的就是,一下断点,程序就自动终止,
用GetWindowTextA和万能断点也都不行,一下断点,程序就中止,问下思路,
[培训]《安卓高级研修班(网课)》月薪三万计划，掌握调试、分析还原ollvm、vmp的方法，定制art虚拟机自动化脱壳的方法
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
