是一个VB编的程序,已破解了,
但现在一个问题就是,里面的参考字符应该是加密的,就是弹出的MESSAGEBOX里面的内容在OD中看是乱码.
以下是一个提示框的代码:
00429AE3 . /E9 CB000000 jmp 00429BB3
00429AE8 > \C745 FC 0E000>mov dword ptr [ebp-4], 0E //从这里开始是提示框的代码!!!!
00429AEF . C785 44FFFFFF>mov dword ptr [ebp-BC], 80020004
00429AF9 . C785 3CFFFFFF>mov dword ptr [ebp-C4], 0A
00429B03 . C785 54FFFFFF>mov dword ptr [ebp-AC], 80020004
00429B0D . C785 4CFFFFFF>mov dword ptr [ebp-B4], 0A
00429B17 C785 F4FEFFFF>mov dword ptr [ebp-10C], 0040D77C ; ASCII "衏:y"
00429B21 . C785 ECFEFFFF>mov dword ptr [ebp-114], 8
00429B2B . 8D95 ECFEFFFF lea edx, dword ptr [ebp-114]
00429B31 . 8D8D 5CFFFFFF lea ecx, dword ptr [ebp-A4]
00429B37 . FF15 A0114000 call dword ptr [<&MSVBVM60.__vbaVarDu>; MSVBVM60.__vbaVarDup
00429B3D . C785 04FFFFFF>mov dword ptr [ebp-FC], 0040E428
00429B47 . C785 FCFEFFFF>mov dword ptr [ebp-104], 8
00429B51 . 8D95 FCFEFFFF lea edx, dword ptr [ebp-104]
00429B57 . 8D8D 6CFFFFFF lea ecx, dword ptr [ebp-94]
00429B5D . FF15 A0114000 call dword ptr [<&MSVBVM60.__vbaVarDu>; MSVBVM60.__vbaVarDup
00429B63 . 8D95 3CFFFFFF lea edx, dword ptr [ebp-C4]
00429B69 . 52 push edx
00429B6A . 8D85 4CFFFFFF lea eax, dword ptr [ebp-B4]
00429B70 . 50 push eax
00429B71 . 8D8D 5CFFFFFF lea ecx, dword ptr [ebp-A4]
00429B77 . 51 push ecx
00429B78 6A 40 push 40
00429B7A . 8D95 6CFFFFFF lea edx, dword ptr [ebp-94]
00429B80 . 52 push edx
00429B81 . FF15 74104000 call dword ptr [<&MSVBVM60.#595>] ; MSVBVM60.rtcMsgBox
请高手看一下,从哪里能修改这个提示框中的内容????
谢谢!
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课