-
-
[求助]脱fsg2.0时修复的问题
-
发表于: 2011-1-25 18:02 5107
-
手动查找iat
00401000 72A1CB7F 쭿犡 MSVBVM60.rtcSin
00401004 72A477EA 矪犤 MSVBVM60.__vbaVarSub
00401008 72A49841 顁犤 MSVBVM60.__vbaVarTstGt
0040100C 72A1CBA8 쮨犡 MSVBVM60.rtcCos
00401010 72A20507 ԇ犢 MSVBVM60.__vbaStrI2
00401014 72A39386 鎆犣 MSVBVM60._CIcos
00401018 72A309F9 ৹犣 MSVBVM60._adj_fptan
0040101C 72A1CC01 찁犡 MSVBVM60.rtcAtn
00401020 72A20537 Է犢 MSVBVM60.__vbaStrI4
00401024 72A46AEE 櫮犤 MSVBVM60.__vbaVarMove
00401028 72A4728D 犍犤 MSVBVM60.__vbaVarVargNofree
0040102C 72A29794 鞔犢 MSVBVM60.__vbaCyMul
00401030 72A46831 栱犤 MSVBVM60.__vbaFreeVar
00401034 72A0C244 쉄犠 MSVBVM60.__vbaAryMove
00401038 72A1CC8D 첍犡 MSVBVM60.rtcRgb
0040103C 72A26A9B 檛犢 MSVBVM60.__vbaLenBstr
00401040 72A21929 ᤩ犢 MSVBVM60.__vbaStrVarMove
00401044 72A12EC9 ⻉犡 MSVBVM60.__vbaLineInputStr
00401048 72A48B74 譴犤 MSVBVM60.__vbaLateIdCall
0040104C 72A47262 牢犤 MSVBVM60.__vbaFreeVarList
00401050 72A0BE88 뺈犠 MSVBVM60.__vbaEnd
00401054 72A302BA ʺ犣 MSVBVM60._adj_fdiv_m64
00401058 72A48B8F 讏犤 MSVBVM60.__vbaRaiseEvent
0040105C 72A19FC3 鿃犡 MSVBVM60.__vbaFreeObjList
00401060 72A12FA3 ⾣犡 MSVBVM60.__vbaLineInputVar
00401064 72A270B7 炷犢 MSVBVM60.rtcAnsiValueBstr
00401068 72A47777 睷犤 MSVBVM60.__vbaVarFix
0040106C 72A30941 ु犣 MSVBVM60._adj_fprem1
00401070 72A275A0 疠犢 MSVBVM60.rtcLowerCaseVar
00401074 72A1A0F3 ꃳ犡 MSVBVM60.__vbaCopyBytes
00401078 72A49957 饗犤 MSVBVM60.__vbaVarCmpNe
0040107C 72A26A76 橶犢 MSVBVM60.__vbaStrCat
00401080 72A0E84E 犠 MSVBVM60.__vbaError
00401084 72A0C33A 쌺犠 MSVBVM60.__vbaSetSystemError
00401088 72A1A274 ꉴ犡 MSVBVM60.__vbaHresultCheckObj
0040108C 72A26AAB 檫犢 MSVBVM60.__vbaLenVar
00401090 72A3026E ɮ犣 MSVBVM60._adj_fdiv_m32
00401094 72A43940 㥀犤 MSVBVM60.__vbaAryVar
00401098 72A4998C 馌犤 MSVBVM60.__vbaVarCmpGe
0040109C 72A1C1FE 쇾犡 MSVBVM60.__vbaAryDestruct
004010A0 72A48C75 豵犤 MSVBVM60.__vbaLateMemSt
004010A4 72A493CC 鏌犤 MSVBVM60.__vbaVarForInit
004010A8 72A1CD05 촅犡 MSVBVM60.rtcRandomNext
004010AC 72A24A48 䩈犢 MSVBVM60.__vbaExitProc
004010B0 72A35E10 帐犣 MSVBVM60.GetMem2
004010B4 72A24D03 䴃犢 MSVBVM60.__vbaI4Abs
004010B8 72A1CD3A 촺犡 MSVBVM60.rtcRandomize
004010BC 72A35E23 帣犣 MSVBVM60.GetMem4
004010C0 72A2976A 靪犢 MSVBVM60.__vbaCyAdd
004010C4 72A2499D 䦝犢 MSVBVM60.__vbaOnError
004010C8 72A1D132 턲犡 MSVBVM60.rtcMsgBox
004010CC 72A19FF1 鿱犡 MSVBVM60.__vbaObjSet
004010D0 72A1D301 팁犡 MSVBVM60.rtcInputBox
004010D4 72A30306 ̆犣 MSVBVM60._adj_fdiv_m16i
004010D8 72A35E66 幦犣 MSVBVM60.GetMemStr
004010DC 72A1A008 ꀈ犡 MSVBVM60.__vbaObjSetAddref
004010E0 72A30406 І犣 MSVBVM60._adj_fdivr_m16i
004010E4 72A35EA0 庠犣 MSVBVM60.GetMemVar
004010E8 72A0E0F7 犠 MSVBVM60.rtcDoEvents
004010EC 72A47587 疇犤 MSVBVM60.__vbaFpR4
004010F0 72A35F49 彉犣 MSVBVM60.PutMem2
004010F4 72A45ECE 廎犤 MSVBVM60.__vbaForEachCollVar
004010F8 72A20D73 ൳犢 MSVBVM60.__vbaBoolVar
004010FC 72A35F5A 彚犣 MSVBVM60.PutMem4
00401100 72A29758 靘犢 MSVBVM60.__vbaFPFix
00401104 72A3604F 恏犣 MSVBVM60.PutMemStr
00401108 72A1C417 쐗犡 MSVBVM60.__vbaRefVarAry
0040110C 72A49873 顳犤 MSVBVM60.__vbaVarTstLt
00401110 72A4759B 疛犤 MSVBVM60.__vbaFpR8
00401114 72A47185 熅犤 MSVBVM60.__vbaBoolVarNull
00401118 72A394EE 铮犣 MSVBVM60._CIsin
0040111C 72A26FE2 濢犢 MSVBVM60.rtcMidCharBstr
00401120 72A38299 芙犣 MSVBVM60.rtcInStrRev
00401124 72A1C0FD 샽犡 MSVBVM60.__vbaErase
00401128 72A46EA2 溢犤 MSVBVM60.__vbaVarZero
0040112C 72A499C1 駁犤 MSVBVM60.__vbaVarCmpGt
00401130 72A2702F 瀯犢 MSVBVM60.rtcMidCharVar
00401134 72A362EA 拪犣 ASCII "QWP="
00401138 72A27DFB 緻犢 MSVBVM60.rtcSpaceVar
0040113C 72A1417D 䅽犡 MSVBVM60.__vbaFileClose
00401140 72A09B74 魴犠 MSVBVM60.EVENT_SINK_AddRef
00401144 72A1C410 쐐犡 MSVBVM60.__vbaGenerateBoundsError
00401148 72A15D41 嵁犡 MSVBVM60.rtcKillFiles
0040114C 72A29596 閖犢 MSVBVM60.__vbaStrCmp
00401150 72A1C6AE 욮犡 MSVBVM60.__vbaAryConstruct2
00401154 72A497F6 韶犤 MSVBVM60.__vbaVarTstEq
00401158 72A219B1 ᦱ犢 MSVBVM60.__vbaCyI4
0040115C 72A1C9CA 짊犡 MSVBVM60.rtcIsNumeric
00401160 72A45F13 弓犤 MSVBVM60.__vbaNextEachCollVar
00401164 72A21A08 ᨈ犢 MSVBVM60.__vbaI2I4
00401168 7294A0FD ꃽ犔 MSVBVM60.DllFunctionCall
0040116C 72A1DE02 犡 MSVBVM60.rtcCommandVar
00401170 72A495B2 閲犤 MSVBVM60.__vbaVarOr
00401174 72A47534 甴犤 MSVBVM60.__vbaFpUI1
00401178 72A1A17B ꅻ犡 MSVBVM60.__vbaCastObjVar
0040117C 72A1C339 쌹犡 MSVBVM60.__vbaRedimPreserve
00401180 72A309F6 ৶犣 MSVBVM60._adj_fpatan
00401184 72A24E52 乒犢 MSVBVM60.__vbaR4Var
00401188 72A2558A 喊犢 MSVBVM60.rtcFileLocation
0040118C 72A48B25 謥犤 MSVBVM60.__vbaLateIdCallLd
00401190 72A219CF 犢 MSVBVM60.__vbaR8Cy
00401194 72A1C30A 쌊犡 MSVBVM60.__vbaRedim
00401198 72A2059B ֛犢 MSVBVM60.__vbaStrR8
0040119C 72A24DFD ䷽犢 MSVBVM60.__vbaUI1ErrVar
004011A0 72A09B87 鮇犠 MSVBVM60.EVENT_SINK_Release
004011A4 72A1A204 ꈄ犡 MSVBVM60.__vbaNew
004011A8 72A0CE69 칩犠 MSVBVM60.rtcShell
004011AC 72A219DC 犢 MSVBVM60.__vbaUI1I2
004011B0 72A39593 間犣 MSVBVM60._CIsqrt
004011B4 72A36096 悖犣 MSVBVM60.PutMemVar
004011B8 72A196C8 雈犡 MSVBVM60.__vbaObjIs
004011BC 72A49589 閉犤 MSVBVM60.__vbaVarAnd
004011C0 72A09A85 骅犠 MSVBVM60.EVENT_SINK_QueryInterface
004011C4 72A47660 癠犤 MSVBVM60.__vbaVarMul
004011C8 72A204D4 Ӕ犢 MSVBVM60.__vbaStrUI1
004011CC 72A219F2 ᧲犢 MSVBVM60.__vbaUI1I4
004011D0 72A43A40 㩀犤 MSVBVM60.__vbaStr2Vec
004011D4 72A247DF 䟟犢 MSVBVM60.__vbaExceptHandler
004011D8 72A361D8 懘犣 MSVBVM60.SetMemVar
004011DC 72A37DDB 緛犣 MSVBVM60.rtcSplit
004011E0 72A150A3 傣犡 MSVBVM60.__vbaPrintFile
004011E4 72A0BF1D 뼝犠 MSVBVM60.__vbaStrToUnicode
004011E8 72A389C4 规犣 MSVBVM60.rtcReplace
004011EC 72A30689 ډ犣 MSVBVM60._adj_fprem
004011F0 72A303BA κ犣 MSVBVM60._adj_fdivr_m64
004011F4 72A27F4D 罍犢 MSVBVM60.rtcStringVar
004011F8 72A2102D ိ犢 MSVBVM60.__vbaI2Str
004011FC 72A20F56 བ犢 MSVBVM60.rtcVarBstrFromAnsi
00401200 72A499F6 駶犤 MSVBVM60.__vbaVarCmpLe
00401204 72A15C89 岉犡 MSVBVM60.rtcMakeDir
00401208 72A47513 甓犤 MSVBVM60.__vbaFPException
0040120C 72A28FE9 迩犢 MSVBVM60.rtcStrConvVar2
00401210 72A2738D 玍犢 MSVBVM60.__vbaInStrVar
00401214 72A25750 坐犢 MSVBVM60.__vbaGetOwner3
00401218 72A21948 ᥈犢 MSVBVM60.__vbaStrVarVal
0040121C 72A1C65A 왚犡 MSVBVM60.__vbaUbound
00401220 72A2697D 楽犢 MSVBVM60.__vbaVarCat
00401224 72A24E21 両犢 MSVBVM60.__vbaI2Var
00401228 72A1DE99 犡 MSVBVM60.VarPtr
0040122C 72A153F7 号犡 MSVBVM60.rtcDir
00401230 72A3942B 鐫犣 MSVBVM60._CIlog
00401234 72A0E867 犠 MSVBVM60.__vbaErrorOverflow
00401238 72A13D10 㴐犡 MSVBVM60.__vbaFileOpen
0040123C 72A43AEC 㫬犤 MSVBVM60.__vbaVar2Vec
00401240 72A25618 嘘犢 MSVBVM60.rtcFileLength
00401244 72A210EA ც犢 MSVBVM60.__vbaR8Str
00401248 72A1A237 ꈷ犡 MSVBVM60.__vbaNew2
0040124C 72A14275 䉵犡 MSVBVM60.rtcFreeFile
00401250 7294A296 ꊖ犔 MSVBVM60.__vbaInStr
00401254 72A14332 䌲犡 MSVBVM60.rtcEndOfFile
00401258 72A3033A ̺犣 MSVBVM60._adj_fdiv_m32i
0040125C 72A3043A к犣 MSVBVM60._adj_fdivr_m32i
00401260 72A26C4A 汊犢 MSVBVM60.__vbaStrCopy
00401264 72A21381 ᎁ犢 MSVBVM60.rtcHexVarFromVar
00401268 72A1DAE3 犡 MSVBVM60.rtcImmediateIf
0040126C 72A2105E ၞ犢 MSVBVM60.__vbaI4Str
00401270 72A49564 镤犤 MSVBVM60.__vbaVarNot
00401274 72A26C01 氁犢 MSVBVM60.__vbaFreeStrList
00401278 72A15F0D 弍犡 MSVBVM60.rtcFileCopy
0040127C 72A3036E ͮ犣 MSVBVM60._adj_fdivr_m32
00401280 72A2FDA9 ﶩ犢 MSVBVM60._adj_fdiv_r
00401284 72A1EF7D 犡 MSVBVM60.rtcErrObj
00401288 729435A4 㖤犔 MSVBVM60.ThunRTMain
0040128C 72A4980F 頏犤 MSVBVM60.__vbaVarTstNe
00401290 72A24E2F 丯犢 MSVBVM60.__vbaI4Var
00401294 72A49922 餢犤 MSVBVM60.__vbaVarCmpEq
00401298 72A475AF 疯犤 MSVBVM60.__vbaFpCy
0040129C 72A122B9 ⊹犡 MSVBVM60.rtcGetDateVar
004012A0 72A1C6D9 웙犡 MSVBVM60.__vbaAryLock
004012A4 72A477C1 矁犤 MSVBVM60.__vbaVarAdd
004012A8 72A122FB ⋻犡 MSVBVM60.rtcGetTimeVar
004012AC 7294A3D7 ꏗ犔 MSVBVM60.__vbaStrToAnsi
004012B0 72A46DF6 淶犤 MSVBVM60.__vbaVarDup
004012B4 72A20944 ॄ犢 MSVBVM60.rtcVarStrFromVar
004012B8 72A47559 留犤 MSVBVM60.__vbaFpI2
004012BC 72A26D9A 涚犢 MSVBVM60.rtcLeftCharBstr
004012C0 72A48D8C 趌犤 MSVBVM60.__vbaVarLateMemCallLd
004012C4 72A47570 異犤 MSVBVM60.__vbaFpI4
004012C8 72A46BB8 殸犤 MSVBVM60.__vbaVarCopy
004012CC 72A26DAD 涭犢 MSVBVM60.rtcLeftCharVar
004012D0 72A48C4D 豍犤 MSVBVM60.__vbaLateMemCallLd
004012D4 72A392C0 鋀犣 MSVBVM60._CIatan
004012D8 72A45DED 巭犤 MSVBVM60.__vbaCastObj
004012DC 72A2196D ᥭ犢 MSVBVM60.__vbaUI1Str
004012E0 72A0C20D 숍犠 MSVBVM60.__vbaAryCopy
004012E4 72A26C30 氰犢 MSVBVM60.__vbaStrMove
004012E8 72A26EB1 溱犢 MSVBVM60.rtcRightCharVar
004012EC 72A20646 ن犢 MSVBVM60.__vbaStrVarCopy
004012F0 72A11C50 ᱐犡 MSVBVM60.rtcGetHourOfDay
004012F4 72A2EEED 犢 MSVBVM60._allmul
004012F8 72A48B44 譄犤 MSVBVM60.__vbaLateIdSt
004012FC 72A11C93 Დ犡 MSVBVM60.rtcGetMinuteOfHour
00401300 72A39644 附犣 MSVBVM60._CItan
00401304 72A11D19 ᴙ犡 MSVBVM60.rtcGetPresentDate
00401308 72A11CD6 ᳖犡 MSVBVM60.rtcGetSecondOfMinute
0040130C 72A24E13 专犢 MSVBVM60.__vbaUI1Var
00401310 72A29821 頡犢 MSVBVM60.__vbaFPInt
00401314 72A1C6FC 웼犡 MSVBVM60.__vbaAryUnlock
00401318 72A493FA 鏺犤 MSVBVM60.__vbaVarForNext
0040131C 72A2DD11 犢 MSVBVM60._CIexp
00401320 72A26BEC 毬犢 MSVBVM60.__vbaFreeStr
00401324 72A19FAF 龯犡 MSVBVM60.__vbaFreeObj
00401328 72A1325A ㉚犡 MSVBVM60.rtcR8ValFromBstr
0040132C FFFFFFFF
没错吧, 但是修复时
rva 1000 大小328
; Syntax for each function in a thunk (the separator is a TAB)
; ------------------------------------------------------------
; Flag RVA ModuleName Ordinal Name
;
; Details for <Valid> parameter:
; ------------------------------
; Flag: 0 = valid: no -> - Name contains the address of the redirected API (you can set
; it to zero if you edit it).
; - Ordinal is not considered but you should let '0000' as value.
; - ModuleName is not considered but you should let '?' as value.
;
; 1 = valid: yes -> All next parameters on the line will be considered.
; Function imported by ordinal must have no name (the 4th TAB must
; be there though).
;
; 2 = Equivalent to 0 but it is for the loader.
;
; 3 = Equivalent to 1 but it is for the loader.
;
; 4 = Equivalent to 0 with (R) tag.
;
; 5 = Equivalent to 1 with (R) tag.
;
; And finally, edit this file as your own risk! :-)
Target: E:\iduel\iDuel(原).exe
OEP: 000051D4 IATRVA: 00001000 IATSize: 00000328
FThunk: 00001000 NbFunc: 000000CA
1 00001000 msvbvm60.dll 0246 rtcSin
1 00001004 msvbvm60.dll 01E8 __vbaVarSub
1 00001008 msvbvm60.dll 01F9 __vbaVarTstGt
1 0000100C msvbvm60.dll 0247 rtcCos
1 00001010 msvbvm60.dll 01A1 __vbaStrI2
1 00001014 msvbvm60.dll 009D _CIcos
1 00001018 msvbvm60.dll 02D7 _adj_fptan
1 0000101C msvbvm60.dll 0249 rtcAtn
1 00001020 msvbvm60.dll 01A2 __vbaStrI4
1 00001024 msvbvm60.dll 0091 __vbaVarMove
1 00001028 msvbvm60.dll 0092 __vbaVarVargNofree
1 0000102C msvbvm60.dll 00C6 __vbaCyMul
1 00001030 msvbvm60.dll 0083 __vbaFreeVar
1 00001034 msvbvm60.dll 00A8 __vbaAryMove
1 00001038 msvbvm60.dll 024C rtcRgb
1 0000103C msvbvm60.dll 0147 __vbaLenBstr
1 00001040 msvbvm60.dll 01B5 __vbaStrVarMove
1 00001044 msvbvm60.dll 014B __vbaLineInputStr
1 00001048 msvbvm60.dll 011A __vbaLateIdCall
1 0000104C msvbvm60.dll 00F5 __vbaFreeVarList
1 00001050 msvbvm60.dll 00D4 __vbaEnd
1 00001054 msvbvm60.dll 02CE _adj_fdiv_m64
1 00001058 msvbvm60.dll 017B __vbaRaiseEvent
1 0000105C msvbvm60.dll 00F3 __vbaFreeObjList
1 00001060 msvbvm60.dll 014C __vbaLineInputVar
1 00001064 msvbvm60.dll 0204 rtcAnsiValueBstr
1 00001068 msvbvm60.dll 01CF __vbaVarFix
1 0000106C msvbvm60.dll 02D6 _adj_fprem1
1 00001070 msvbvm60.dll 0206 rtcLowerCaseVar
1 00001074 msvbvm60.dll 00B7 __vbaCopyBytes
1 00001078 msvbvm60.dll 01CA __vbaVarCmpNe
1 0000107C msvbvm60.dll 0195 __vbaStrCat
1 00001080 msvbvm60.dll 00D8 __vbaError
1 00001084 msvbvm60.dll 018A __vbaSetSystemError
1 00001088 msvbvm60.dll 0102 __vbaHresultCheckObj
1 0000108C msvbvm60.dll 0149 __vbaLenVar
1 00001090 msvbvm60.dll 02B0 _adj_fdiv_m32
1 00001094 msvbvm60.dll 00AD __vbaAryVar
1 00001098 msvbvm60.dll 01C6 __vbaVarCmpGe
1 0000109C msvbvm60.dll 00A7 __vbaAryDestruct
1 000010A0 msvbvm60.dll 0143 __vbaLateMemSt
1 000010A4 msvbvm60.dll 01D0 __vbaVarForInit
1 000010A8 msvbvm60.dll 0251 rtcRandomNext
1 000010AC msvbvm60.dll 00DF __vbaExitProc
1 000010B0 msvbvm60.dll 012C GetMem2
1 000010B4 msvbvm60.dll 0088 __vbaI4Abs
1 000010B8 msvbvm60.dll 0252 rtcRandomize
1 000010BC msvbvm60.dll 012D GetMem4
1 000010C0 msvbvm60.dll 00BC __vbaCyAdd
1 000010C4 msvbvm60.dll 0160 __vbaOnError
1 000010C8 msvbvm60.dll 0253 rtcMsgBox
1 000010CC msvbvm60.dll 015D __vbaObjSet
1 000010D0 msvbvm60.dll 0254 rtcInputBox
1 000010D4 msvbvm60.dll 0293 _adj_fdiv_m16i
1 000010D8 msvbvm60.dll 012F GetMemStr
1 000010DC msvbvm60.dll 015E __vbaObjSetAddref
1 000010E0 msvbvm60.dll 02D0 _adj_fdivr_m16i
1 000010E4 msvbvm60.dll 0130 GetMemVar
1 000010E8 msvbvm60.dll 0256 rtcDoEvents
1 000010EC msvbvm60.dll 007E __vbaFpR4
1 000010F0 msvbvm60.dll 0132 PutMem2
1 000010F4 msvbvm60.dll 00F1 __vbaForEachCollVar
1 000010F8 msvbvm60.dll 00AF __vbaBoolVar
1 000010FC msvbvm60.dll 0133 PutMem4
1 00001100 msvbvm60.dll 00E1 __vbaFPFix
1 00001104 msvbvm60.dll 0135 PutMemStr
1 00001108 msvbvm60.dll 0186 __vbaRefVarAry
1 0000110C msvbvm60.dll 01FB __vbaVarTstLt
1 00001110 msvbvm60.dll 007F __vbaFpR8
1 00001114 msvbvm60.dll 00B0 __vbaBoolVarNull
1 00001118 msvbvm60.dll 00A0 _CIsin
1 0000111C msvbvm60.dll 0277 rtcMidCharBstr
1 00001120 msvbvm60.dll 02C5 rtcInStrRev
1 00001124 msvbvm60.dll 00D5 __vbaErase
1 00001128 msvbvm60.dll 0093 __vbaVarZero
1 0000112C msvbvm60.dll 01C7 __vbaVarCmpGt
1 00001130 msvbvm60.dll 0278 rtcMidCharVar
1 00001134 msvbvm60.dll 00B6 __vbaChkstk
1 00001138 msvbvm60.dll 020E rtcSpaceVar
1 0000113C msvbvm60.dll 00E5 __vbaFileClose
1 00001140 msvbvm60.dll 0191 EVENT_SINK_AddRef
1 00001144 msvbvm60.dll 00F6 __vbaGenerateBoundsError
1 00001148 msvbvm60.dll 0211 rtcKillFiles
1 0000114C msvbvm60.dll 0196 __vbaStrCmp
1 00001150 msvbvm60.dll 00A4 __vbaAryConstruct2
1 00001154 msvbvm60.dll 01F7 __vbaVarTstEq
1 00001158 msvbvm60.dll 00C4 __vbaCyI4
1 0000115C msvbvm60.dll 0231 rtcIsNumeric
1 00001160 msvbvm60.dll 0159 __vbaNextEachCollVar
1 00001164 msvbvm60.dll 0086 __vbaI2I4
1 00001168 msvbvm60.dll 00BB DllFunctionCall
1 0000116C msvbvm60.dll 029E rtcCommandVar
1 00001170 msvbvm60.dll 01E0 __vbaVarOr
1 00001174 msvbvm60.dll 0080 __vbaFpUI1
1 00001178 msvbvm60.dll 00B3 __vbaCastObjVar
1 0000117C msvbvm60.dll 0182 __vbaRedimPreserve
1 00001180 msvbvm60.dll 02D4 _adj_fpatan
1 00001184 msvbvm60.dll 0170 __vbaR4Var
1 00001188 msvbvm60.dll 0239 rtcFileLocation
1 0000118C msvbvm60.dll 011B __vbaLateIdCallLd
1 00001190 msvbvm60.dll 0171 __vbaR8Cy
1 00001194 msvbvm60.dll 0181 __vbaRedim
1 00001198 msvbvm60.dll 01A7 __vbaStrR8
1 0000119C msvbvm60.dll 01BA __vbaUI1ErrVar
1 000011A0 msvbvm60.dll 0192 EVENT_SINK_Release
1 000011A4 msvbvm60.dll 0155 __vbaNew
1 000011A8 msvbvm60.dll 0258 rtcShell
1 000011AC msvbvm60.dll 008C __vbaUI1I2
1 000011B0 msvbvm60.dll 00A1 _CIsqrt
1 000011B4 msvbvm60.dll 0136 PutMemVar
1 000011B8 msvbvm60.dll 015C __vbaObjIs
1 000011BC msvbvm60.dll 01C3 __vbaVarAnd
1 000011C0 msvbvm60.dll 0190 EVENT_SINK_QueryInterface
1 000011C4 msvbvm60.dll 01DD __vbaVarMul
1 000011C8 msvbvm60.dll 01AC __vbaStrUI1
1 000011CC msvbvm60.dll 008D __vbaUI1I4
1 000011D0 msvbvm60.dll 018C __vbaStr2Vec
1 000011D4 msvbvm60.dll 00DA __vbaExceptHandler
1 000011D8 msvbvm60.dll 0138 SetMemVar
1 000011DC msvbvm60.dll 02C7 rtcSplit
1 000011E0 msvbvm60.dll 0163 __vbaPrintFile
1 000011E4 msvbvm60.dll 01AB __vbaStrToUnicode
1 000011E8 msvbvm60.dll 02C8 rtcReplace
1 000011EC msvbvm60.dll 02D5 _adj_fprem
1 000011F0 msvbvm60.dll 02D3 _adj_fdivr_m64
1 000011F4 msvbvm60.dll 025F rtcStringVar
1 000011F8 msvbvm60.dll 0106 __vbaI2Str
1 000011FC msvbvm60.dll 0260 rtcVarBstrFromAnsi
1 00001200 msvbvm60.dll 01C8 __vbaVarCmpLe
1 00001204 msvbvm60.dll 0213 rtcMakeDir
1 00001208 msvbvm60.dll 00E0 __vbaFPException
1 0000120C msvbvm60.dll 02CD rtcStrConvVar2
1 00001210 msvbvm60.dll 0117 __vbaInStrVar
1 00001214 msvbvm60.dll 00FB __vbaGetOwner3
1 00001218 msvbvm60.dll 01B6 __vbaStrVarVal
1 0000121C msvbvm60.dll 01BD __vbaUbound
1 00001220 msvbvm60.dll 01C4 __vbaVarCat
1 00001224 msvbvm60.dll 0107 __vbaI2Var
1 00001228 msvbvm60.dll 0284 VarPtr
1 0000122C msvbvm60.dll 0285 rtcDir
1 00001230 msvbvm60.dll 009F _CIlog
1 00001234 msvbvm60.dll 00D9 __vbaErrorOverflow
1 00001238 msvbvm60.dll 00EB __vbaFileOpen
1 0000123C msvbvm60.dll 01C0 __vbaVar2Vec
1 00001240 msvbvm60.dll 023A rtcFileLength
1 00001244 msvbvm60.dll 0179 __vbaR8Str
1 00001248 msvbvm60.dll 0154 __vbaNew2
1 0000124C msvbvm60.dll 0288 rtcFreeFile
1 00001250 msvbvm60.dll 0115 __vbaInStr
1 00001254 msvbvm60.dll 023B rtcEndOfFile
1 00001258 msvbvm60.dll 02BD _adj_fdiv_m32i
1 0000125C msvbvm60.dll 02D2 _adj_fdivr_m32i
1 00001260 msvbvm60.dll 008A __vbaStrCopy
1 00001264 msvbvm60.dll 023D rtcHexVarFromVar
1 00001268 msvbvm60.dll 02A9 rtcImmediateIf
1 0000126C msvbvm60.dll 0110 __vbaI4Str
1 00001270 msvbvm60.dll 01DF __vbaVarNot
1 00001274 msvbvm60.dll 00F4 __vbaFreeStrList
1 00001278 msvbvm60.dll 0240 rtcFileCopy
1 0000127C msvbvm60.dll 02D1 _adj_fdivr_m32
1 00001280 msvbvm60.dll 02CF _adj_fdiv_r
1 00001284 msvbvm60.dll 02AD rtcErrObj
1 00001288 msvbvm60.dll 0064 ThunRTMain
1 0000128C msvbvm60.dll 01FC __vbaVarTstNe
1 00001290 msvbvm60.dll 0111 __vbaI4Var
1 00001294 msvbvm60.dll 01C5 __vbaVarCmpEq
1 00001298 msvbvm60.dll 007B __vbaFpCy
1 0000129C msvbvm60.dll 0262 rtcGetDateVar
1 000012A0 msvbvm60.dll 006C __vbaAryLock
1 000012A4 msvbvm60.dll 01C2 __vbaVarAdd
1 000012A8 msvbvm60.dll 0264 rtcGetTimeVar
1 000012AC msvbvm60.dll 01AA __vbaStrToAnsi
1 000012B0 msvbvm60.dll 0090 __vbaVarDup
1 000012B4 msvbvm60.dll 0265 rtcVarStrFromVar
1 000012B8 msvbvm60.dll 007C __vbaFpI2
1 000012BC msvbvm60.dll 0268 rtcLeftCharBstr
1 000012C0 msvbvm60.dll 0070 __vbaVarLateMemCallLd
1 000012C4 msvbvm60.dll 007D __vbaFpI4
1 000012C8 msvbvm60.dll 008F __vbaVarCopy
1 000012CC msvbvm60.dll 0269 rtcLeftCharVar
1 000012D0 msvbvm60.dll 0125 __vbaLateMemCallLd
1 000012D4 msvbvm60.dll 009C _CIatan
1 000012D8 msvbvm60.dll 00B2 __vbaCastObj
1 000012DC msvbvm60.dll 01BB __vbaUI1Str
1 000012E0 msvbvm60.dll 00A6 __vbaAryCopy
1 000012E4 msvbvm60.dll 008B __vbaStrMove
1 000012E8 msvbvm60.dll 026B rtcRightCharVar
1 000012EC msvbvm60.dll 01AD __vbaStrVarCopy
1 000012F0 msvbvm60.dll 021F rtcGetHourOfDay
1 000012F4 msvbvm60.dll 02D8 _allmul
1 000012F8 msvbvm60.dll 0122 __vbaLateIdSt
1 000012FC msvbvm60.dll 0220 rtcGetMinuteOfHour
1 00001300 msvbvm60.dll 00A2 _CItan
1 00001304 msvbvm60.dll 0222 rtcGetPresentDate
1 00001308 msvbvm60.dll 0223 rtcGetSecondOfMinute
1 0000130C msvbvm60.dll 01BC __vbaUI1Var
1 00001310 msvbvm60.dll 00E2 __vbaFPInt
1 00001314 msvbvm60.dll 00AC __vbaAryUnlock
1 00001318 msvbvm60.dll 01D1 __vbaVarForNext
1 0000131C msvbvm60.dll 009E _CIexp
1 00001320 msvbvm60.dll 0082 __vbaFreeStr
1 00001324 msvbvm60.dll 0081 __vbaFreeObj
少最后一个指针,很奇怪大小换成1000 依旧没有,求解释
程序如下(打开会自动关闭,这是正常现象,需要个引导的程序,但太大我就不传了)
00401000 72A1CB7F 쭿犡 MSVBVM60.rtcSin
00401004 72A477EA 矪犤 MSVBVM60.__vbaVarSub
00401008 72A49841 顁犤 MSVBVM60.__vbaVarTstGt
0040100C 72A1CBA8 쮨犡 MSVBVM60.rtcCos
00401010 72A20507 ԇ犢 MSVBVM60.__vbaStrI2
00401014 72A39386 鎆犣 MSVBVM60._CIcos
00401018 72A309F9 ৹犣 MSVBVM60._adj_fptan
0040101C 72A1CC01 찁犡 MSVBVM60.rtcAtn
00401020 72A20537 Է犢 MSVBVM60.__vbaStrI4
00401024 72A46AEE 櫮犤 MSVBVM60.__vbaVarMove
00401028 72A4728D 犍犤 MSVBVM60.__vbaVarVargNofree
0040102C 72A29794 鞔犢 MSVBVM60.__vbaCyMul
00401030 72A46831 栱犤 MSVBVM60.__vbaFreeVar
00401034 72A0C244 쉄犠 MSVBVM60.__vbaAryMove
00401038 72A1CC8D 첍犡 MSVBVM60.rtcRgb
0040103C 72A26A9B 檛犢 MSVBVM60.__vbaLenBstr
00401040 72A21929 ᤩ犢 MSVBVM60.__vbaStrVarMove
00401044 72A12EC9 ⻉犡 MSVBVM60.__vbaLineInputStr
00401048 72A48B74 譴犤 MSVBVM60.__vbaLateIdCall
0040104C 72A47262 牢犤 MSVBVM60.__vbaFreeVarList
00401050 72A0BE88 뺈犠 MSVBVM60.__vbaEnd
00401054 72A302BA ʺ犣 MSVBVM60._adj_fdiv_m64
00401058 72A48B8F 讏犤 MSVBVM60.__vbaRaiseEvent
0040105C 72A19FC3 鿃犡 MSVBVM60.__vbaFreeObjList
00401060 72A12FA3 ⾣犡 MSVBVM60.__vbaLineInputVar
00401064 72A270B7 炷犢 MSVBVM60.rtcAnsiValueBstr
00401068 72A47777 睷犤 MSVBVM60.__vbaVarFix
0040106C 72A30941 ु犣 MSVBVM60._adj_fprem1
00401070 72A275A0 疠犢 MSVBVM60.rtcLowerCaseVar
00401074 72A1A0F3 ꃳ犡 MSVBVM60.__vbaCopyBytes
00401078 72A49957 饗犤 MSVBVM60.__vbaVarCmpNe
0040107C 72A26A76 橶犢 MSVBVM60.__vbaStrCat
00401080 72A0E84E 犠 MSVBVM60.__vbaError
00401084 72A0C33A 쌺犠 MSVBVM60.__vbaSetSystemError
00401088 72A1A274 ꉴ犡 MSVBVM60.__vbaHresultCheckObj
0040108C 72A26AAB 檫犢 MSVBVM60.__vbaLenVar
00401090 72A3026E ɮ犣 MSVBVM60._adj_fdiv_m32
00401094 72A43940 㥀犤 MSVBVM60.__vbaAryVar
00401098 72A4998C 馌犤 MSVBVM60.__vbaVarCmpGe
0040109C 72A1C1FE 쇾犡 MSVBVM60.__vbaAryDestruct
004010A0 72A48C75 豵犤 MSVBVM60.__vbaLateMemSt
004010A4 72A493CC 鏌犤 MSVBVM60.__vbaVarForInit
004010A8 72A1CD05 촅犡 MSVBVM60.rtcRandomNext
004010AC 72A24A48 䩈犢 MSVBVM60.__vbaExitProc
004010B0 72A35E10 帐犣 MSVBVM60.GetMem2
004010B4 72A24D03 䴃犢 MSVBVM60.__vbaI4Abs
004010B8 72A1CD3A 촺犡 MSVBVM60.rtcRandomize
004010BC 72A35E23 帣犣 MSVBVM60.GetMem4
004010C0 72A2976A 靪犢 MSVBVM60.__vbaCyAdd
004010C4 72A2499D 䦝犢 MSVBVM60.__vbaOnError
004010C8 72A1D132 턲犡 MSVBVM60.rtcMsgBox
004010CC 72A19FF1 鿱犡 MSVBVM60.__vbaObjSet
004010D0 72A1D301 팁犡 MSVBVM60.rtcInputBox
004010D4 72A30306 ̆犣 MSVBVM60._adj_fdiv_m16i
004010D8 72A35E66 幦犣 MSVBVM60.GetMemStr
004010DC 72A1A008 ꀈ犡 MSVBVM60.__vbaObjSetAddref
004010E0 72A30406 І犣 MSVBVM60._adj_fdivr_m16i
004010E4 72A35EA0 庠犣 MSVBVM60.GetMemVar
004010E8 72A0E0F7 犠 MSVBVM60.rtcDoEvents
004010EC 72A47587 疇犤 MSVBVM60.__vbaFpR4
004010F0 72A35F49 彉犣 MSVBVM60.PutMem2
004010F4 72A45ECE 廎犤 MSVBVM60.__vbaForEachCollVar
004010F8 72A20D73 ൳犢 MSVBVM60.__vbaBoolVar
004010FC 72A35F5A 彚犣 MSVBVM60.PutMem4
00401100 72A29758 靘犢 MSVBVM60.__vbaFPFix
00401104 72A3604F 恏犣 MSVBVM60.PutMemStr
00401108 72A1C417 쐗犡 MSVBVM60.__vbaRefVarAry
0040110C 72A49873 顳犤 MSVBVM60.__vbaVarTstLt
00401110 72A4759B 疛犤 MSVBVM60.__vbaFpR8
00401114 72A47185 熅犤 MSVBVM60.__vbaBoolVarNull
00401118 72A394EE 铮犣 MSVBVM60._CIsin
0040111C 72A26FE2 濢犢 MSVBVM60.rtcMidCharBstr
00401120 72A38299 芙犣 MSVBVM60.rtcInStrRev
00401124 72A1C0FD 샽犡 MSVBVM60.__vbaErase
00401128 72A46EA2 溢犤 MSVBVM60.__vbaVarZero
0040112C 72A499C1 駁犤 MSVBVM60.__vbaVarCmpGt
00401130 72A2702F 瀯犢 MSVBVM60.rtcMidCharVar
00401134 72A362EA 拪犣 ASCII "QWP="
00401138 72A27DFB 緻犢 MSVBVM60.rtcSpaceVar
0040113C 72A1417D 䅽犡 MSVBVM60.__vbaFileClose
00401140 72A09B74 魴犠 MSVBVM60.EVENT_SINK_AddRef
00401144 72A1C410 쐐犡 MSVBVM60.__vbaGenerateBoundsError
00401148 72A15D41 嵁犡 MSVBVM60.rtcKillFiles
0040114C 72A29596 閖犢 MSVBVM60.__vbaStrCmp
00401150 72A1C6AE 욮犡 MSVBVM60.__vbaAryConstruct2
00401154 72A497F6 韶犤 MSVBVM60.__vbaVarTstEq
00401158 72A219B1 ᦱ犢 MSVBVM60.__vbaCyI4
0040115C 72A1C9CA 짊犡 MSVBVM60.rtcIsNumeric
00401160 72A45F13 弓犤 MSVBVM60.__vbaNextEachCollVar
00401164 72A21A08 ᨈ犢 MSVBVM60.__vbaI2I4
00401168 7294A0FD ꃽ犔 MSVBVM60.DllFunctionCall
0040116C 72A1DE02 犡 MSVBVM60.rtcCommandVar
00401170 72A495B2 閲犤 MSVBVM60.__vbaVarOr
00401174 72A47534 甴犤 MSVBVM60.__vbaFpUI1
00401178 72A1A17B ꅻ犡 MSVBVM60.__vbaCastObjVar
0040117C 72A1C339 쌹犡 MSVBVM60.__vbaRedimPreserve
00401180 72A309F6 ৶犣 MSVBVM60._adj_fpatan
00401184 72A24E52 乒犢 MSVBVM60.__vbaR4Var
00401188 72A2558A 喊犢 MSVBVM60.rtcFileLocation
0040118C 72A48B25 謥犤 MSVBVM60.__vbaLateIdCallLd
00401190 72A219CF 犢 MSVBVM60.__vbaR8Cy
00401194 72A1C30A 쌊犡 MSVBVM60.__vbaRedim
00401198 72A2059B ֛犢 MSVBVM60.__vbaStrR8
0040119C 72A24DFD ䷽犢 MSVBVM60.__vbaUI1ErrVar
004011A0 72A09B87 鮇犠 MSVBVM60.EVENT_SINK_Release
004011A4 72A1A204 ꈄ犡 MSVBVM60.__vbaNew
004011A8 72A0CE69 칩犠 MSVBVM60.rtcShell
004011AC 72A219DC 犢 MSVBVM60.__vbaUI1I2
004011B0 72A39593 間犣 MSVBVM60._CIsqrt
004011B4 72A36096 悖犣 MSVBVM60.PutMemVar
004011B8 72A196C8 雈犡 MSVBVM60.__vbaObjIs
004011BC 72A49589 閉犤 MSVBVM60.__vbaVarAnd
004011C0 72A09A85 骅犠 MSVBVM60.EVENT_SINK_QueryInterface
004011C4 72A47660 癠犤 MSVBVM60.__vbaVarMul
004011C8 72A204D4 Ӕ犢 MSVBVM60.__vbaStrUI1
004011CC 72A219F2 ᧲犢 MSVBVM60.__vbaUI1I4
004011D0 72A43A40 㩀犤 MSVBVM60.__vbaStr2Vec
004011D4 72A247DF 䟟犢 MSVBVM60.__vbaExceptHandler
004011D8 72A361D8 懘犣 MSVBVM60.SetMemVar
004011DC 72A37DDB 緛犣 MSVBVM60.rtcSplit
004011E0 72A150A3 傣犡 MSVBVM60.__vbaPrintFile
004011E4 72A0BF1D 뼝犠 MSVBVM60.__vbaStrToUnicode
004011E8 72A389C4 规犣 MSVBVM60.rtcReplace
004011EC 72A30689 ډ犣 MSVBVM60._adj_fprem
004011F0 72A303BA κ犣 MSVBVM60._adj_fdivr_m64
004011F4 72A27F4D 罍犢 MSVBVM60.rtcStringVar
004011F8 72A2102D ိ犢 MSVBVM60.__vbaI2Str
004011FC 72A20F56 བ犢 MSVBVM60.rtcVarBstrFromAnsi
00401200 72A499F6 駶犤 MSVBVM60.__vbaVarCmpLe
00401204 72A15C89 岉犡 MSVBVM60.rtcMakeDir
00401208 72A47513 甓犤 MSVBVM60.__vbaFPException
0040120C 72A28FE9 迩犢 MSVBVM60.rtcStrConvVar2
00401210 72A2738D 玍犢 MSVBVM60.__vbaInStrVar
00401214 72A25750 坐犢 MSVBVM60.__vbaGetOwner3
00401218 72A21948 ᥈犢 MSVBVM60.__vbaStrVarVal
0040121C 72A1C65A 왚犡 MSVBVM60.__vbaUbound
00401220 72A2697D 楽犢 MSVBVM60.__vbaVarCat
00401224 72A24E21 両犢 MSVBVM60.__vbaI2Var
00401228 72A1DE99 犡 MSVBVM60.VarPtr
0040122C 72A153F7 号犡 MSVBVM60.rtcDir
00401230 72A3942B 鐫犣 MSVBVM60._CIlog
00401234 72A0E867 犠 MSVBVM60.__vbaErrorOverflow
00401238 72A13D10 㴐犡 MSVBVM60.__vbaFileOpen
0040123C 72A43AEC 㫬犤 MSVBVM60.__vbaVar2Vec
00401240 72A25618 嘘犢 MSVBVM60.rtcFileLength
00401244 72A210EA ც犢 MSVBVM60.__vbaR8Str
00401248 72A1A237 ꈷ犡 MSVBVM60.__vbaNew2
0040124C 72A14275 䉵犡 MSVBVM60.rtcFreeFile
00401250 7294A296 ꊖ犔 MSVBVM60.__vbaInStr
00401254 72A14332 䌲犡 MSVBVM60.rtcEndOfFile
00401258 72A3033A ̺犣 MSVBVM60._adj_fdiv_m32i
0040125C 72A3043A к犣 MSVBVM60._adj_fdivr_m32i
00401260 72A26C4A 汊犢 MSVBVM60.__vbaStrCopy
00401264 72A21381 ᎁ犢 MSVBVM60.rtcHexVarFromVar
00401268 72A1DAE3 犡 MSVBVM60.rtcImmediateIf
0040126C 72A2105E ၞ犢 MSVBVM60.__vbaI4Str
00401270 72A49564 镤犤 MSVBVM60.__vbaVarNot
00401274 72A26C01 氁犢 MSVBVM60.__vbaFreeStrList
00401278 72A15F0D 弍犡 MSVBVM60.rtcFileCopy
0040127C 72A3036E ͮ犣 MSVBVM60._adj_fdivr_m32
00401280 72A2FDA9 ﶩ犢 MSVBVM60._adj_fdiv_r
00401284 72A1EF7D 犡 MSVBVM60.rtcErrObj
00401288 729435A4 㖤犔 MSVBVM60.ThunRTMain
0040128C 72A4980F 頏犤 MSVBVM60.__vbaVarTstNe
00401290 72A24E2F 丯犢 MSVBVM60.__vbaI4Var
00401294 72A49922 餢犤 MSVBVM60.__vbaVarCmpEq
00401298 72A475AF 疯犤 MSVBVM60.__vbaFpCy
0040129C 72A122B9 ⊹犡 MSVBVM60.rtcGetDateVar
004012A0 72A1C6D9 웙犡 MSVBVM60.__vbaAryLock
004012A4 72A477C1 矁犤 MSVBVM60.__vbaVarAdd
004012A8 72A122FB ⋻犡 MSVBVM60.rtcGetTimeVar
004012AC 7294A3D7 ꏗ犔 MSVBVM60.__vbaStrToAnsi
004012B0 72A46DF6 淶犤 MSVBVM60.__vbaVarDup
004012B4 72A20944 ॄ犢 MSVBVM60.rtcVarStrFromVar
004012B8 72A47559 留犤 MSVBVM60.__vbaFpI2
004012BC 72A26D9A 涚犢 MSVBVM60.rtcLeftCharBstr
004012C0 72A48D8C 趌犤 MSVBVM60.__vbaVarLateMemCallLd
004012C4 72A47570 異犤 MSVBVM60.__vbaFpI4
004012C8 72A46BB8 殸犤 MSVBVM60.__vbaVarCopy
004012CC 72A26DAD 涭犢 MSVBVM60.rtcLeftCharVar
004012D0 72A48C4D 豍犤 MSVBVM60.__vbaLateMemCallLd
004012D4 72A392C0 鋀犣 MSVBVM60._CIatan
004012D8 72A45DED 巭犤 MSVBVM60.__vbaCastObj
004012DC 72A2196D ᥭ犢 MSVBVM60.__vbaUI1Str
004012E0 72A0C20D 숍犠 MSVBVM60.__vbaAryCopy
004012E4 72A26C30 氰犢 MSVBVM60.__vbaStrMove
004012E8 72A26EB1 溱犢 MSVBVM60.rtcRightCharVar
004012EC 72A20646 ن犢 MSVBVM60.__vbaStrVarCopy
004012F0 72A11C50 ᱐犡 MSVBVM60.rtcGetHourOfDay
004012F4 72A2EEED 犢 MSVBVM60._allmul
004012F8 72A48B44 譄犤 MSVBVM60.__vbaLateIdSt
004012FC 72A11C93 Დ犡 MSVBVM60.rtcGetMinuteOfHour
00401300 72A39644 附犣 MSVBVM60._CItan
00401304 72A11D19 ᴙ犡 MSVBVM60.rtcGetPresentDate
00401308 72A11CD6 ᳖犡 MSVBVM60.rtcGetSecondOfMinute
0040130C 72A24E13 专犢 MSVBVM60.__vbaUI1Var
00401310 72A29821 頡犢 MSVBVM60.__vbaFPInt
00401314 72A1C6FC 웼犡 MSVBVM60.__vbaAryUnlock
00401318 72A493FA 鏺犤 MSVBVM60.__vbaVarForNext
0040131C 72A2DD11 犢 MSVBVM60._CIexp
00401320 72A26BEC 毬犢 MSVBVM60.__vbaFreeStr
00401324 72A19FAF 龯犡 MSVBVM60.__vbaFreeObj
00401328 72A1325A ㉚犡 MSVBVM60.rtcR8ValFromBstr
0040132C FFFFFFFF
没错吧, 但是修复时
rva 1000 大小328
; Syntax for each function in a thunk (the separator is a TAB)
; ------------------------------------------------------------
; Flag RVA ModuleName Ordinal Name
;
; Details for <Valid> parameter:
; ------------------------------
; Flag: 0 = valid: no -> - Name contains the address of the redirected API (you can set
; it to zero if you edit it).
; - Ordinal is not considered but you should let '0000' as value.
; - ModuleName is not considered but you should let '?' as value.
;
; 1 = valid: yes -> All next parameters on the line will be considered.
; Function imported by ordinal must have no name (the 4th TAB must
; be there though).
;
; 2 = Equivalent to 0 but it is for the loader.
;
; 3 = Equivalent to 1 but it is for the loader.
;
; 4 = Equivalent to 0 with (R) tag.
;
; 5 = Equivalent to 1 with (R) tag.
;
; And finally, edit this file as your own risk! :-)
Target: E:\iduel\iDuel(原).exe
OEP: 000051D4 IATRVA: 00001000 IATSize: 00000328
FThunk: 00001000 NbFunc: 000000CA
1 00001000 msvbvm60.dll 0246 rtcSin
1 00001004 msvbvm60.dll 01E8 __vbaVarSub
1 00001008 msvbvm60.dll 01F9 __vbaVarTstGt
1 0000100C msvbvm60.dll 0247 rtcCos
1 00001010 msvbvm60.dll 01A1 __vbaStrI2
1 00001014 msvbvm60.dll 009D _CIcos
1 00001018 msvbvm60.dll 02D7 _adj_fptan
1 0000101C msvbvm60.dll 0249 rtcAtn
1 00001020 msvbvm60.dll 01A2 __vbaStrI4
1 00001024 msvbvm60.dll 0091 __vbaVarMove
1 00001028 msvbvm60.dll 0092 __vbaVarVargNofree
1 0000102C msvbvm60.dll 00C6 __vbaCyMul
1 00001030 msvbvm60.dll 0083 __vbaFreeVar
1 00001034 msvbvm60.dll 00A8 __vbaAryMove
1 00001038 msvbvm60.dll 024C rtcRgb
1 0000103C msvbvm60.dll 0147 __vbaLenBstr
1 00001040 msvbvm60.dll 01B5 __vbaStrVarMove
1 00001044 msvbvm60.dll 014B __vbaLineInputStr
1 00001048 msvbvm60.dll 011A __vbaLateIdCall
1 0000104C msvbvm60.dll 00F5 __vbaFreeVarList
1 00001050 msvbvm60.dll 00D4 __vbaEnd
1 00001054 msvbvm60.dll 02CE _adj_fdiv_m64
1 00001058 msvbvm60.dll 017B __vbaRaiseEvent
1 0000105C msvbvm60.dll 00F3 __vbaFreeObjList
1 00001060 msvbvm60.dll 014C __vbaLineInputVar
1 00001064 msvbvm60.dll 0204 rtcAnsiValueBstr
1 00001068 msvbvm60.dll 01CF __vbaVarFix
1 0000106C msvbvm60.dll 02D6 _adj_fprem1
1 00001070 msvbvm60.dll 0206 rtcLowerCaseVar
1 00001074 msvbvm60.dll 00B7 __vbaCopyBytes
1 00001078 msvbvm60.dll 01CA __vbaVarCmpNe
1 0000107C msvbvm60.dll 0195 __vbaStrCat
1 00001080 msvbvm60.dll 00D8 __vbaError
1 00001084 msvbvm60.dll 018A __vbaSetSystemError
1 00001088 msvbvm60.dll 0102 __vbaHresultCheckObj
1 0000108C msvbvm60.dll 0149 __vbaLenVar
1 00001090 msvbvm60.dll 02B0 _adj_fdiv_m32
1 00001094 msvbvm60.dll 00AD __vbaAryVar
1 00001098 msvbvm60.dll 01C6 __vbaVarCmpGe
1 0000109C msvbvm60.dll 00A7 __vbaAryDestruct
1 000010A0 msvbvm60.dll 0143 __vbaLateMemSt
1 000010A4 msvbvm60.dll 01D0 __vbaVarForInit
1 000010A8 msvbvm60.dll 0251 rtcRandomNext
1 000010AC msvbvm60.dll 00DF __vbaExitProc
1 000010B0 msvbvm60.dll 012C GetMem2
1 000010B4 msvbvm60.dll 0088 __vbaI4Abs
1 000010B8 msvbvm60.dll 0252 rtcRandomize
1 000010BC msvbvm60.dll 012D GetMem4
1 000010C0 msvbvm60.dll 00BC __vbaCyAdd
1 000010C4 msvbvm60.dll 0160 __vbaOnError
1 000010C8 msvbvm60.dll 0253 rtcMsgBox
1 000010CC msvbvm60.dll 015D __vbaObjSet
1 000010D0 msvbvm60.dll 0254 rtcInputBox
1 000010D4 msvbvm60.dll 0293 _adj_fdiv_m16i
1 000010D8 msvbvm60.dll 012F GetMemStr
1 000010DC msvbvm60.dll 015E __vbaObjSetAddref
1 000010E0 msvbvm60.dll 02D0 _adj_fdivr_m16i
1 000010E4 msvbvm60.dll 0130 GetMemVar
1 000010E8 msvbvm60.dll 0256 rtcDoEvents
1 000010EC msvbvm60.dll 007E __vbaFpR4
1 000010F0 msvbvm60.dll 0132 PutMem2
1 000010F4 msvbvm60.dll 00F1 __vbaForEachCollVar
1 000010F8 msvbvm60.dll 00AF __vbaBoolVar
1 000010FC msvbvm60.dll 0133 PutMem4
1 00001100 msvbvm60.dll 00E1 __vbaFPFix
1 00001104 msvbvm60.dll 0135 PutMemStr
1 00001108 msvbvm60.dll 0186 __vbaRefVarAry
1 0000110C msvbvm60.dll 01FB __vbaVarTstLt
1 00001110 msvbvm60.dll 007F __vbaFpR8
1 00001114 msvbvm60.dll 00B0 __vbaBoolVarNull
1 00001118 msvbvm60.dll 00A0 _CIsin
1 0000111C msvbvm60.dll 0277 rtcMidCharBstr
1 00001120 msvbvm60.dll 02C5 rtcInStrRev
1 00001124 msvbvm60.dll 00D5 __vbaErase
1 00001128 msvbvm60.dll 0093 __vbaVarZero
1 0000112C msvbvm60.dll 01C7 __vbaVarCmpGt
1 00001130 msvbvm60.dll 0278 rtcMidCharVar
1 00001134 msvbvm60.dll 00B6 __vbaChkstk
1 00001138 msvbvm60.dll 020E rtcSpaceVar
1 0000113C msvbvm60.dll 00E5 __vbaFileClose
1 00001140 msvbvm60.dll 0191 EVENT_SINK_AddRef
1 00001144 msvbvm60.dll 00F6 __vbaGenerateBoundsError
1 00001148 msvbvm60.dll 0211 rtcKillFiles
1 0000114C msvbvm60.dll 0196 __vbaStrCmp
1 00001150 msvbvm60.dll 00A4 __vbaAryConstruct2
1 00001154 msvbvm60.dll 01F7 __vbaVarTstEq
1 00001158 msvbvm60.dll 00C4 __vbaCyI4
1 0000115C msvbvm60.dll 0231 rtcIsNumeric
1 00001160 msvbvm60.dll 0159 __vbaNextEachCollVar
1 00001164 msvbvm60.dll 0086 __vbaI2I4
1 00001168 msvbvm60.dll 00BB DllFunctionCall
1 0000116C msvbvm60.dll 029E rtcCommandVar
1 00001170 msvbvm60.dll 01E0 __vbaVarOr
1 00001174 msvbvm60.dll 0080 __vbaFpUI1
1 00001178 msvbvm60.dll 00B3 __vbaCastObjVar
1 0000117C msvbvm60.dll 0182 __vbaRedimPreserve
1 00001180 msvbvm60.dll 02D4 _adj_fpatan
1 00001184 msvbvm60.dll 0170 __vbaR4Var
1 00001188 msvbvm60.dll 0239 rtcFileLocation
1 0000118C msvbvm60.dll 011B __vbaLateIdCallLd
1 00001190 msvbvm60.dll 0171 __vbaR8Cy
1 00001194 msvbvm60.dll 0181 __vbaRedim
1 00001198 msvbvm60.dll 01A7 __vbaStrR8
1 0000119C msvbvm60.dll 01BA __vbaUI1ErrVar
1 000011A0 msvbvm60.dll 0192 EVENT_SINK_Release
1 000011A4 msvbvm60.dll 0155 __vbaNew
1 000011A8 msvbvm60.dll 0258 rtcShell
1 000011AC msvbvm60.dll 008C __vbaUI1I2
1 000011B0 msvbvm60.dll 00A1 _CIsqrt
1 000011B4 msvbvm60.dll 0136 PutMemVar
1 000011B8 msvbvm60.dll 015C __vbaObjIs
1 000011BC msvbvm60.dll 01C3 __vbaVarAnd
1 000011C0 msvbvm60.dll 0190 EVENT_SINK_QueryInterface
1 000011C4 msvbvm60.dll 01DD __vbaVarMul
1 000011C8 msvbvm60.dll 01AC __vbaStrUI1
1 000011CC msvbvm60.dll 008D __vbaUI1I4
1 000011D0 msvbvm60.dll 018C __vbaStr2Vec
1 000011D4 msvbvm60.dll 00DA __vbaExceptHandler
1 000011D8 msvbvm60.dll 0138 SetMemVar
1 000011DC msvbvm60.dll 02C7 rtcSplit
1 000011E0 msvbvm60.dll 0163 __vbaPrintFile
1 000011E4 msvbvm60.dll 01AB __vbaStrToUnicode
1 000011E8 msvbvm60.dll 02C8 rtcReplace
1 000011EC msvbvm60.dll 02D5 _adj_fprem
1 000011F0 msvbvm60.dll 02D3 _adj_fdivr_m64
1 000011F4 msvbvm60.dll 025F rtcStringVar
1 000011F8 msvbvm60.dll 0106 __vbaI2Str
1 000011FC msvbvm60.dll 0260 rtcVarBstrFromAnsi
1 00001200 msvbvm60.dll 01C8 __vbaVarCmpLe
1 00001204 msvbvm60.dll 0213 rtcMakeDir
1 00001208 msvbvm60.dll 00E0 __vbaFPException
1 0000120C msvbvm60.dll 02CD rtcStrConvVar2
1 00001210 msvbvm60.dll 0117 __vbaInStrVar
1 00001214 msvbvm60.dll 00FB __vbaGetOwner3
1 00001218 msvbvm60.dll 01B6 __vbaStrVarVal
1 0000121C msvbvm60.dll 01BD __vbaUbound
1 00001220 msvbvm60.dll 01C4 __vbaVarCat
1 00001224 msvbvm60.dll 0107 __vbaI2Var
1 00001228 msvbvm60.dll 0284 VarPtr
1 0000122C msvbvm60.dll 0285 rtcDir
1 00001230 msvbvm60.dll 009F _CIlog
1 00001234 msvbvm60.dll 00D9 __vbaErrorOverflow
1 00001238 msvbvm60.dll 00EB __vbaFileOpen
1 0000123C msvbvm60.dll 01C0 __vbaVar2Vec
1 00001240 msvbvm60.dll 023A rtcFileLength
1 00001244 msvbvm60.dll 0179 __vbaR8Str
1 00001248 msvbvm60.dll 0154 __vbaNew2
1 0000124C msvbvm60.dll 0288 rtcFreeFile
1 00001250 msvbvm60.dll 0115 __vbaInStr
1 00001254 msvbvm60.dll 023B rtcEndOfFile
1 00001258 msvbvm60.dll 02BD _adj_fdiv_m32i
1 0000125C msvbvm60.dll 02D2 _adj_fdivr_m32i
1 00001260 msvbvm60.dll 008A __vbaStrCopy
1 00001264 msvbvm60.dll 023D rtcHexVarFromVar
1 00001268 msvbvm60.dll 02A9 rtcImmediateIf
1 0000126C msvbvm60.dll 0110 __vbaI4Str
1 00001270 msvbvm60.dll 01DF __vbaVarNot
1 00001274 msvbvm60.dll 00F4 __vbaFreeStrList
1 00001278 msvbvm60.dll 0240 rtcFileCopy
1 0000127C msvbvm60.dll 02D1 _adj_fdivr_m32
1 00001280 msvbvm60.dll 02CF _adj_fdiv_r
1 00001284 msvbvm60.dll 02AD rtcErrObj
1 00001288 msvbvm60.dll 0064 ThunRTMain
1 0000128C msvbvm60.dll 01FC __vbaVarTstNe
1 00001290 msvbvm60.dll 0111 __vbaI4Var
1 00001294 msvbvm60.dll 01C5 __vbaVarCmpEq
1 00001298 msvbvm60.dll 007B __vbaFpCy
1 0000129C msvbvm60.dll 0262 rtcGetDateVar
1 000012A0 msvbvm60.dll 006C __vbaAryLock
1 000012A4 msvbvm60.dll 01C2 __vbaVarAdd
1 000012A8 msvbvm60.dll 0264 rtcGetTimeVar
1 000012AC msvbvm60.dll 01AA __vbaStrToAnsi
1 000012B0 msvbvm60.dll 0090 __vbaVarDup
1 000012B4 msvbvm60.dll 0265 rtcVarStrFromVar
1 000012B8 msvbvm60.dll 007C __vbaFpI2
1 000012BC msvbvm60.dll 0268 rtcLeftCharBstr
1 000012C0 msvbvm60.dll 0070 __vbaVarLateMemCallLd
1 000012C4 msvbvm60.dll 007D __vbaFpI4
1 000012C8 msvbvm60.dll 008F __vbaVarCopy
1 000012CC msvbvm60.dll 0269 rtcLeftCharVar
1 000012D0 msvbvm60.dll 0125 __vbaLateMemCallLd
1 000012D4 msvbvm60.dll 009C _CIatan
1 000012D8 msvbvm60.dll 00B2 __vbaCastObj
1 000012DC msvbvm60.dll 01BB __vbaUI1Str
1 000012E0 msvbvm60.dll 00A6 __vbaAryCopy
1 000012E4 msvbvm60.dll 008B __vbaStrMove
1 000012E8 msvbvm60.dll 026B rtcRightCharVar
1 000012EC msvbvm60.dll 01AD __vbaStrVarCopy
1 000012F0 msvbvm60.dll 021F rtcGetHourOfDay
1 000012F4 msvbvm60.dll 02D8 _allmul
1 000012F8 msvbvm60.dll 0122 __vbaLateIdSt
1 000012FC msvbvm60.dll 0220 rtcGetMinuteOfHour
1 00001300 msvbvm60.dll 00A2 _CItan
1 00001304 msvbvm60.dll 0222 rtcGetPresentDate
1 00001308 msvbvm60.dll 0223 rtcGetSecondOfMinute
1 0000130C msvbvm60.dll 01BC __vbaUI1Var
1 00001310 msvbvm60.dll 00E2 __vbaFPInt
1 00001314 msvbvm60.dll 00AC __vbaAryUnlock
1 00001318 msvbvm60.dll 01D1 __vbaVarForNext
1 0000131C msvbvm60.dll 009E _CIexp
1 00001320 msvbvm60.dll 0082 __vbaFreeStr
1 00001324 msvbvm60.dll 0081 __vbaFreeObj
少最后一个指针,很奇怪大小换成1000 依旧没有,求解释
程序如下(打开会自动关闭,这是正常现象,需要个引导的程序,但太大我就不传了)
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课
赞赏
他的文章
- [求助]脱fsg2.0时修复的问题 5108
- 把od插件全删掉了,结果现在异常都忽略了 3637
- 手脱ASPROTECT1.23 RC4找不到Stolen Code 2751
- 求助,用odb脱壳时跳转得莫名其妙 3790
看原图
赞赏
雪币:
留言: