Author:killerlegend
date:2014.6.18
From:http://www.cnblogs.com/killerlegend/p/3795577.html
yes, okay. , today we come to the Chinese to a small software , its function is to modify Win7 background of the login interface .
after decompression , First Use Peid Detecting Files , as :
you can see that this software is not Packers , writing a language is c#/.net.
Run the program first , Take a look at the interface , as :
I don't have a lot of things to do with Chinese. , so our main aim is to find the idea of Chinese. .
the next stage is Reflector, I use it. 8.2.0 version of , with Reflector Load the program , as :
It's obvious that , The code here is confusing. , so , we can use plugins Reflecil v1.6 of the Obfuscator Search function to counter-confuse , by Operation :
appear , Click OK:
then specify the file name , Save , I'll follow the default save :
and then in Refelctor Turn off the original program in the , loading a program that has just been anti-confusing , after opening as shown :
OK First, all we have to do is modify the string resource I'll talk about how to modify the picture resource later. Span style= "Font-family:courier New;" >.
I have to modify Main method in the InitializeComponent example of a string in a , First make sure you open the plugin Reflexil Interface , as shown :
in the Reflexil in the window , pull down to find Change Logon screen Record , then right mouse button , Select Edit ... Open the following interface :
will be Change Logon screen modified to [ Modify Login Interface ], then click Update, If you cannot enter Chinese , Please press the Operation , right mouse button select Open Open IME, or you can write it in Notepad now. , just paste it in . .
after all the strings have been modified in the way above , Press the Save As to appear :
save after opening the modified program as shown in :
This modified program , If you install a the Guardian , may prompt for a virus , just skip the direct trust . . or just go back. .
Next we'll modify the image resource that tweaks.com ", maybe not at all.
Open . Net Helper, I used it. 2.1 version of , Open the program you modified above , as , then click Reverse Compilation :
The following files appear under the original folder :
We just need to use PS and other editing software , just modify one piece of the line. , For example, I changed to :
Replace source file .
and then go back to . NET Helper Interface , Select the Compile button :
appearance of DOS window if prompt successful operation completed successfully, The source folder appears under a name of TweaksLogon.Cleaned.Patched_Output.exe the program , Run as follows :
you can see the changes. .
The final modification interface is generally as follows :
Accessories Download : Http://pan.baidu.com/s/1mguSRpu