Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 11-24-2013, 21:04
deepzero's Avatar
deepzero deepzero is offline
VIP
 
Join Date: Mar 2010
Location: Germany
Posts: 310
Rept. Given: 115
Rept. Rcvd 64 Times in 42 Posts
Thanks Given: 195
Thanks Rcvd at 224 Times in 95 Posts
deepzero Reputation: 64
No, there isnt. Qt draws its own controls, rather than using native windows ones.


That also means that at some point in the code the value for the slider has to be actively set, typically in the constructor of the Form.

This should be done by calling the setSliderPosition(int) method of the slider.


So what you will want to do is find the " setSliderPosition" export in QtGui.dll, breakpoint it, and somehow figure out which slider is the one you want.
Reply With Quote
  #2  
Old 11-27-2013, 04:51
Trit0n Trit0n is offline
Family
 
Join Date: Sep 2011
Location: +47.xxxx / +8.xxxx
Posts: 235
Rept. Given: 57
Rept. Rcvd 89 Times in 49 Posts
Thanks Given: 89
Thanks Rcvd at 136 Times in 56 Posts
Trit0n Reputation: 89
Seems a little more complex ...
the only references that I can find are (in QtGui (4) dll.):
ASCII "slider_handle"
ASCII "scrollbar_slider"
ASCII "slider_groove"
ASCII "slider_handle"
ASCII "2sliderPressed ()"
ASCII "2sliderMoved (int)"
ASCII "2sliderReleased ()"
ASCII "QAbstractSlider"
ASCII "QSlider"
but none of these references is really useful.
the reference: "sets lider position" is only visible in the PE
setSliderPositionEi:
00324340h: 73 65 74 53 6C 69 64 65 72 50 6F 73 69 74 6F 69; setSliderPositio
00324350h: 6E 45 69 00 72 0D 5A 5F 4E 31 35 51 41 62 73 74; nEi.r._ZN15QAbst
00324360h: 72 61 63 74 53 6C 69 64 65 72 38 73 65 74 56 61; ractSlider8setVa
00324370h: 6C 75 65 45 69 00 00 00 46 0E; lueEi ... F.
The reference: "ZN15Q" is also in the QtGui (4) dll present.
but not in Ollydbg
Any idea?
Reply With Quote
  #3  
Old 11-27-2013, 04:56
mr.exodia mr.exodia is offline
Retired Moderator
 
Join Date: Nov 2011
Posts: 783
Rept. Given: 490
Rept. Rcvd 1,123 Times in 305 Posts
Thanks Given: 89
Thanks Rcvd at 716 Times in 333 Posts
mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299
Quote:
Originally Posted by Trit0n View Post
Seems a little more complex ...
the only references that I can find are (in QtGui (4) dll.):
ASCII "slider_handle"
ASCII "scrollbar_slider"
ASCII "slider_groove"
ASCII "slider_handle"
ASCII "2sliderPressed ()"
ASCII "2sliderMoved (int)"
ASCII "2sliderReleased ()"
ASCII "QAbstractSlider"
ASCII "QSlider"
but none of these references is really useful.
the reference: "sets lider position" is only visible in the PE
setSliderPositionEi:
00324340h: 73 65 74 53 6C 69 64 65 72 50 6F 73 69 74 6F 69; setSliderPositio
00324350h: 6E 45 69 00 72 0D 5A 5F 4E 31 35 51 41 62 73 74; nEi.r._ZN15QAbst
00324360h: 72 61 63 74 53 6C 69 64 65 72 38 73 65 74 56 61; ractSlider8setVa
00324370h: 6C 75 65 45 69 00 00 00 46 0E; lueEi ... F.
The reference: "ZN15Q" is also in the QtGui (4) dll present.
but not in Ollydbg
Any idea?
http://harmattan-dev.nokia.com/docs/library/html/qt4/qslider.html#tickPosition-prop

Qt sometimes uses strange names, probably you are looking for something like this... if you have programming experience, you could try to make a small program that sets the position and then check which imports are used.

Greetings
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
MinGW - Minimalist GNU for Windows dalkia General Discussion 6 02-29-2016 17:18
Windows 2000 and Windows nt 4 sources, question shady General Discussion 2 04-15-2004 04:17


All times are GMT +8. The time now is 16:06.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )