VB逆向工程实战演习

没壳,没有Command Button,所有的内容都在Form_Load里。用VBDE查看，Form_Load在00406A90,打开W32dsm，载入Casino轮盘智能机器人，查找00406A90，反汇编代码如下：
Quote:
:00406A90 55                       push ebp
:00406A91 8BEC                    mov ebp, esp
:00406A93 83EC0C                  sub esp, 0000000C
* Possible StringData Ref from Code Obj ->"%?@"
                                  |
:00406A96 68A6134000              push 004013A6
:00406A9B 64A100000000            mov eax, dword ptr fs:[00000000]
:00406AA1 50                      push eax
:00406AA2 64892500000000          mov dword ptr fs:[00000000], esp
:00406AA9 81EC84010000            sub esp, 00000184
:00406AAF 53                      push ebx
:00406AB0 56                      push e