Reversing MFC App Modified(通用 查找MFC消息事件) Update...
Reversing MFC App Modified(通用 查找MFC消息事件)
I've read Externalist's article (Reversing MFC Applications) about searching for Button Event of any MFC applications and gained a lot yesterday.This article introduce the whole process and related principles in details and provide a script in the end.It's no doubt that this script is convenient for us and I wanna give my thanks to the author again.
However,I have to admit that the whole process is not easy to master because of complex operations.You know,the author used Resource Hacker,Spy Window,OD and finally IDA to analyze and reserve the target in the article.If we follow those steps we'll waste much time definitely especially using IDA to reserve (if our target is not so small).Additionally,these complex operations reduce the adaptation dramatically too.
Actually,it's not necessary to use those comprehensive tools and all we only need is an OD of any version.And as you konw that all we should do is modifying one place manually.To achieve our goal,I've modified the script written by Externalist and done a tutorial to tell you how to use it.Enjoy!
If you have any questions,please refer to this article Reversing MFC Applications.
Download:
http://www.tuts4you.com/download.php?view.2509
The steps:
1.Using OD to open our target and load our script (you'll find a conditional breakpoint in the Breakpoint Window after this step)
2.Press F9 to run our target and then click "View---Windows" to find Button ID and Window Handle.
3.Modify the conditional breakpoint manually.
4.Press the related button and choose "Resume" to execute our script continously when the breakpoint effect.
All done.
注意：上传附件及图片大小不得大于30M。
⚠️ 版权声明：
本博客所有内容（含教程、源码、工具）仅供个人技术学习与研究交流使用，严禁商用、倒卖、二次分发及非法用途。
未经作者书面授权，任何组织或个人不得转载、复制或用于其他平台，违者将追究相关责任。
参与讨论
登录后可查看全部回复并参与讨论。
