0058B2C0 > \55 PUSH EBP
0058B2C1 . 8BEC MOV EBP,ESP
0058B2C3 . 83EC 0C SUB ESP,0C
0058B2C6 . 68 96F54000 PUSH <JMP.&MSVBVM60.__vbaExceptHandler> ; SE 处理程序安装
0058B2CB . 64:A1 0000000>MOV EAX,DWORD PTR FS:[0]
0058B2D1 . 50 PUSH EAX
0058B2D2 . 64:8925 00000>MOV DWORD PTR FS:[0],ESP
0058B2D9 . 81EC 8C000000 SUB ESP,8C
0058B2DF . 53 PUSH EBX
0058B2E0 . 56 PUSH ESI
0058B2E1 . 57 PUSH EDI
0058B2E2 . 8965 F4 MOV DWORD PTR SS:[EBP-C],ESP
0058B2E5 . C745 F8 30734>MOV DWORD PTR SS:[EBP-8],Shop-2.00407330
0058B2EC . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8]
0058B2EF . 8BC8 MOV ECX,EAX
0058B2F1 . 83E1 01 AND ECX,1
0058B2F4 . 894D FC MOV DWORD PTR SS:[EBP-4],ECX
0058B2F7 . 24 FE AND AL,0FE
0058B2F9 . 50 PUSH EAX
0058B2FA . 8945 08 MOV DWORD PTR SS:[EBP+8],EAX
0058B2FD . 8B10 MOV EDX,DWORD PTR DS:[EAX]
0058B2FF . FF52 04 CALL DWORD PTR DS:[EDX+4]
0058B302 . B9 04000280 MOV ECX,80020004
0058B307 . 33F6 XOR ESI,ESI
0058B309 . 894D B0 MOV DWORD PTR SS:[EBP-50],ECX
0058B30C . B8 0A000000 MOV EAX,0A
0058B311 . 894D C0 MOV DWORD PTR SS:[EBP-40],ECX
0058B314 . 894D D0 MOV DWORD PTR SS:[EBP-30],ECX
0058B317 . 8975 C8 MOV DWORD PTR SS:[EBP-38],ESI
0058B31A . 8975 B8 MOV DWORD PTR SS:[EBP-48],ESI
0058B31D . 8975 A8 MOV DWORD PTR SS:[EBP-58],ESI
0058B320 . 8975 98 MOV DWORD PTR SS:[EBP-68],ESI
0058B323 . 8D55 98 LEA EDX,DWORD PTR SS:[EBP-68]
0058B326 . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0058B329 . 8975 E8 MOV DWORD PTR SS:[EBP-18],ESI
0058B32C . 8975 D8 MOV DWORD PTR SS:[EBP-28],ESI
0058B32F . 8945 A8 MOV DWORD PTR SS:[EBP-58],EAX
0058B332 . 8945 B8 MOV DWORD PTR SS:[EBP-48],EAX
0058B335 . 8945 C8 MOV DWORD PTR SS:[EBP-38],EAX
0058B338 . C745 A0 9C8F4>MOV DWORD PTR SS:[EBP-60],Shop-2.00448F9>
0058B33F . C745 98 08000>MOV DWORD PTR SS:[EBP-68],8
0058B346 . FF15 98124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarDu>; MSVBVM60.__vbaVarDup
0058B34C . 8D45 A8 LEA EAX,DWORD PTR SS:[EBP-58]
0058B34F . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48]
0058B352 . 50 PUSH EAX
0058B353 . 8D55 C8 LEA EDX,DWORD PTR SS:[EBP-38]
0058B356 . 51 PUSH ECX
0058B357 . 52 PUSH EDX
0058B358 . 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28]
0058B35B . 6A 40 PUSH 40
0058B35D . 50 PUSH EAX
0058B35E FF15 B0104000 CALL DWORD PTR DS:[<&MSVBVM60.#595>] ; MSVBVM60tcMsgBox // 这里提示试用版不能使用此功能！
0058B364 . 8D4D A8 LEA ECX,DWORD PTR SS:[EBP-58]
0058B367 . 8D55 B8 LEA EDX,DWORD PTR SS:[EBP-48]
0058B36A . 51 PUSH ECX
0058B36B . 8D45 C8 LEA EAX,DWORD PTR SS:[EBP-38]
0058B36E . 52 PUSH EDX
0058B36F . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0058B372 . 50 PUSH EAX
0058B373 . 51 PUSH ECX
0058B374 . 6A 04 PUSH 4
0058B376 . FF15 3C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVarList
0058B37C . A1 E4F16B00 MOV EAX,DWORD PTR DS:[6BF1E4]
0058B381 . 83C4 14 ADD ESP,14
0058B384 . 3BC6 CMP EAX,ESI
0058B386 . 75 15 JNZ SHORT Shop-2.0058B39D
0058B388 . 68 E4F16B00 PUSH Shop-2.006BF1E4
0058B38D . 68 34F14300 PUSH Shop-2.0043F134
0058B392 . FF15 30124000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaNew2>>; MSVBVM60.__vbaNew2
0058B398 . A1 E4F16B00 MOV EAX,DWORD PTR DS:[6BF1E4]
0058B39D > 8B10 MOV EDX,DWORD PTR DS:[EAX]
0058B39F . 56 PUSH ESI
0058B3A0 . 68 00100180 PUSH 80011000
0058B3A5 . 50 PUSH EAX
0058B3A6 . FF92 D8030000 CALL DWORD PTR DS:[EDX+3D8]
0058B3AC . 50 PUSH EAX
0058B3AD . 8D45 E8 LEA EAX,DWORD PTR SS:[EBP-18]
0058B3B0 . 50 PUSH EAX
0058B3B1 . FF15 B8104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaObjSe>; MSVBVM60.__vbaObjSet
0058B3B7 . 50 PUSH EAX
0058B3B8 . FF15 24104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaLateI>; MSVBVM60.__vbaLateIdCall
0058B3BE . 83C4 0C ADD ESP,0C
0058B3C1 . 8D4D E8 LEA ECX,DWORD PTR SS:[EBP-18]
0058B3C4 . FF15 00134000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeO>; MSVBVM60.__vbaFreeObj
0058B3CA . 8975 FC MOV DWORD PTR SS:[EBP-4],ESI
0058B3CD . 68 FAB35800 PUSH Shop-2.0058B3FA
0058B3D2 EB 25 JMP SHORT Shop-2.0058B3F9
0058B3D4 . 8D4D E8 LEA ECX,DWORD PTR SS:[EBP-18]
0058B3D7 . FF15 00134000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeO>; MSVBVM60.__vbaFreeObj
0058B3DD . 8D4D A8 LEA ECX,DWORD PTR SS:[EBP-58]
0058B3E0 . 8D55 B8 LEA EDX,DWORD PTR SS:[EBP-48]
0058B3E3 . 51 PUSH ECX
0058B3E4 . 8D45 C8 LEA EAX,DWORD PTR SS:[EBP-38]
0058B3E7 . 52 PUSH EDX
0058B3E8 . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0058B3EB . 50 PUSH EAX
0058B3EC . 51 PUSH ECX
0058B3ED . 6A 04 PUSH 4
0058B3EF . FF15 3C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVarList
0058B3F5 . 83C4 14 ADD ESP,14
0058B3F8 . C3 RETN
0058B3F9 > C3 RETN ; RET 用作跳转到 0058B3FA
0058B3FA > 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8]
0058B3FD . 50 PUSH EAX
0058B3FE . 8B10 MOV EDX,DWORD PTR DS:[EAX]
0058B400 . FF52 08 CALL DWORD PTR DS:[EDX+8]
0058B403 . 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
0058B406 . 8B4D EC MOV ECX,DWORD PTR SS:[EBP-14]
0058B409 . 5F POP EDI
0058B40A . 5E POP ESI
0058B40B . 64:890D 00000>MOV DWORD PTR FS:[0],ECX
0058B412 . 5B POP EBX
0058B413 . 8BE5 MOV ESP,EBP
0058B415 . 5D POP EBP
0058B416 . C2 0400 RETN 4
0058B419 90 NOP
----------------------------------------------------
如何去掉这个提示呢？
[课程]Android-CTF解题方法汇总！
