请教一下大家:
60A8DD9D E8 0CB1FFFF call #1180_AfxHookWindowCreate
60A8DDA2 FF75 D0 push dword ptr [ebp-30]
60A8DDA5 FF75 D4 push dword ptr [ebp-2C]
60A8DDA8 FF75 D8 push dword ptr [ebp-28]
60A8DDAB FF75 DC push dword ptr [ebp-24]
60A8DDAE FF75 E0 push dword ptr [ebp-20]
60A8DDB1 FF75 E4 push dword ptr [ebp-1C]
60A8DDB4 FF75 E8 push dword ptr [ebp-18]
60A8DDB7 FF75 EC push dword ptr [ebp-14]
60A8DDBA FF75 F0 push dword ptr [ebp-10]
60A8DDBD FF75 F4 push dword ptr [ebp-C]
60A8DDC0 FF75 F8 push dword ptr [ebp-8]
60A8DDC3 FF75 FC push dword ptr [ebp-4]
60A8DDC6 FF15 80B5B160 call dword ptr [<&USER32.CreateWindowExA>] ; USER32.CreateWindowExA
0012F404 77D40457 W詗 USER32.77D40457
0012F408 00000000 .... |ExtStyle = 0
0012F40C 60B241A4 瞏 |Class = "tooltips_class32"
0012F410 00000000 .... |WindowName = NULL
0012F414 80000001 ..€ |Style = WS_POPUP|1
0012F418 80000000 ...€ |X = 80000000 (-2147483648.)
0012F41C 80000000 ...€ |Y = 80000000 (-2147483648.)
0012F420 80000000 ...€ |Width = 80000000 (-2147483648.)
0012F424 80000000 ...€ |Height = 80000000 (-2147483648.)
0012F428 002B034E N+. |hParent = 002B034E ('QQ用户登录',class='#32770',parent=003C0356)
0012F42C 00000000 .... |hMenu = NULL
0012F430 015C0000 ..\ |hInst = 015C0000
0012F434 00000000 .... \lParam = NULL
想找“'QQ用户登录'”的字符串,改成自已相要的
不知“0012F428 002B034E N+. |hParent = 002B034E ('QQ用户登录',class='#32770',parent=003C0356)”指什么地方?
'QQ用户登录'的字符串,指的是“0012F428”还是“ 002B034E”,但两个地址我都找个了,没有上面的字符串.....不解..........
谢谢
[培训]《安卓高级研修班(网课)》月薪三万计划,掌握调试、分析还原ollvm、vmp的方法,定制art虚拟机自动化脱壳的方法