高手帮看看,VB的keyfile的
麻烦您了!
其中40F69D、40f69E 原为一句JE 0040F745我改为NOP NOP了读外部284815F3.key时显示the license key has been successfully imported.
可是点别的菜单还是不行说没注册。
关键代码好像就在那附近。我不知它怎么算法,284815F3.key里我写了432432.可内存里一直没出现它。郁闷。
0040F150 > 55 PUSH EBP
0040F151 . 8BEC MOV EBP,ESP
0040F153 . 83EC 14 SUB ESP,14
0040F156 . 68 26164000 PUSH <JMP.&MSVBVM60.__vbaExceptHandler> ; SE handler installation
0040F15B . 64:A1 00000000 MOV EAX,DWORD PTR FS:[0]
0040F161 . 50 PUSH EAX
0040F162 . 64:8925 000000>MOV DWORD PTR FS:[0],ESP
0040F169 . 81EC A0000000 SUB ESP,0A0
0040F16F . 53 PUSH EBX
0040F170 . 56 PUSH ESI
0040F171 . 57 PUSH EDI
0040F172 . 8965 EC MOV DWORD PTR SS:[EBP-14],ESP
0040F175 . C745 F0 481540>MOV DWORD PTR SS:[EBP-10],Consolev.00401>
0040F17C . 8B75 08 MOV ESI,DWORD PTR SS:[EBP+8]
0040F17F . 8BC6 MOV EAX,ESI
0040F181 . 83E0 01 AND EAX,1
0040F184 . 8945 F4 MOV DWORD PTR SS:[EBP-C],EAX
0040F187 . 83E6 FE AND ESI,FFFFFFFE
0040F18A . 8975 08 MOV DWORD PTR SS:[EBP+8],ESI
0040F18D . 33FF XOR EDI,EDI
0040F18F . 897D F8 MOV DWORD PTR SS:[EBP-8],EDI
0040F192 . 8B0E MOV ECX,DWORD PTR DS:[ESI]
0040F194 . 56 PUSH ESI
0040F195 . FF51 04 CALL DWORD PTR DS:[ECX+4]
0040F198 . 897D E0 MOV DWORD PTR SS:[EBP-20],EDI
0040F19B . 897D DC MOV DWORD PTR SS:[EBP-24],EDI
0040F19E . 897D D8 MOV DWORD PTR SS:[EBP-28],EDI
0040F1A1 . 897D C8 MOV DWORD PTR SS:[EBP-38],EDI
0040F1A4 . 897D B8 MOV DWORD PTR SS:[EBP-48],EDI
0040F1A7 . 897D A8 MOV DWORD PTR SS:[EBP-58],EDI
0040F1AA . 897D 98 MOV DWORD PTR SS:[EBP-68],EDI
0040F1AD . 897D 88 MOV DWORD PTR SS:[EBP-78],EDI
0040F1B0 . 89BD 78FFFFFF MOV DWORD PTR SS:[EBP-88],EDI
0040F1B6 . 83C8 FF OR EAX,FFFFFFFF
0040F1B9 . 8945 90 MOV DWORD PTR SS:[EBP-70],EAX
0040F1BC . B9 0B000000 MOV ECX,0B
0040F1C1 . 894D 88 MOV DWORD PTR SS:[EBP-78],ECX
0040F1C4 . 83EC 10 SUB ESP,10
0040F1C7 . 8BD4 MOV EDX,ESP
0040F1C9 . 890A MOV DWORD PTR DS:[EDX],ECX
0040F1CB . 8B4D 8C MOV ECX,DWORD PTR SS:[EBP-74]
0040F1CE . 894A 04 MOV DWORD PTR DS:[EDX+4],ECX
0040F1D1 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
0040F1D4 . 8B45 94 MOV EAX,DWORD PTR SS:[EBP-6C]
0040F1D7 . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
0040F1DA . 6A 12 PUSH 12
0040F1DC . 8B0E MOV ECX,DWORD PTR DS:[ESI]
0040F1DE . 56 PUSH ESI
0040F1DF . FF91 60030000 CALL DWORD PTR DS:[ECX+360]
0040F1E5 . 50 PUSH EAX
0040F1E6 . 8D55 D8 LEA EDX,DWORD PTR SS:[EBP-28]
0040F1E9 . 52 PUSH EDX
0040F1EA . 8B3D 64104000 MOV EDI,DWORD PTR DS:[<&MSVBVM60.__vbaOb>; MSVBVM60.__vbaObjSet
0040F1F0 . FFD7 CALL EDI ; <&MSVBVM60.__vbaObjSet>
0040F1F2 . 50 PUSH EAX
0040F1F3 . FF15 70114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaLateI>; MSVBVM60.__vbaLateIdSt
0040F1F9 . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0040F1FC . 8B1D 84114000 MOV EBX,DWORD PTR DS:[<&MSVBVM60.__vbaFr>; MSVBVM60.__vbaFreeObj
0040F202 . FFD3 CALL EBX ; <&MSVBVM60.__vbaFreeObj>
0040F204 . 6A 01 PUSH 1
0040F206 . FF15 68104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaOnErr>; MSVBVM60.__vbaOnError
0040F20C . 68 4C564000 PUSH Consolev.0040564C ; UNICODE "Import BLADE license key "
0040F211 . 68 84564000 PUSH Consolev.00405684 ; UNICODE "ID:"
0040F216 . FF15 44104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrCa>; MSVBVM60.__vbaStrCat
0040F21C . 8BD0 MOV EDX,EAX
0040F21E . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
0040F221 . FF15 64114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrMo>; MSVBVM60.__vbaStrMove
0040F227 . 50 PUSH EAX
0040F228 . 8B46 40 MOV EAX,DWORD PTR DS:[ESI+40]
0040F22B . 50 PUSH EAX
0040F22C . FF15 44104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrCa>; MSVBVM60.__vbaStrCat
0040F232 . 8945 D0 MOV DWORD PTR SS:[EBP-30],EAX
0040F235 . B9 08000000 MOV ECX,8
0040F23A . 894D C8 MOV DWORD PTR SS:[EBP-38],ECX
0040F23D . 83EC 10 SUB ESP,10
0040F240 . 8BD4 MOV EDX,ESP
0040F242 . 890A MOV DWORD PTR DS:[EDX],ECX
0040F244 . 8B4D CC MOV ECX,DWORD PTR SS:[EBP-34]
0040F247 . 894A 04 MOV DWORD PTR DS:[EDX+4],ECX
0040F24A . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
0040F24D . 8B45 D4 MOV EAX,DWORD PTR SS:[EBP-2C]
0040F250 . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
0040F253 . 6A 02 PUSH 2
0040F255 . 8B0E MOV ECX,DWORD PTR DS:[ESI]
0040F257 . 56 PUSH ESI
0040F258 . FF91 60030000 CALL DWORD PTR DS:[ECX+360]
0040F25E . 50 PUSH EAX
0040F25F . 8D55 D8 LEA EDX,DWORD PTR SS:[EBP-28]
0040F262 . 52 PUSH EDX
0040F263 . FFD7 CALL EDI
0040F265 . 50 PUSH EAX
0040F266 . FF15 70114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaLateI>; MSVBVM60.__vbaLateIdSt
0040F26C . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
0040F26F . FF15 80114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStr
0040F275 . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0040F278 . FFD3 CALL EBX
0040F27A . 8D4D C8 LEA ECX,DWORD PTR SS:[EBP-38]
0040F27D . FF15 10104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVar
0040F283 . B8 04000000 MOV EAX,4
0040F288 . 8945 90 MOV DWORD PTR SS:[EBP-70],EAX
0040F28B . B9 03000000 MOV ECX,3
0040F290 . 894D 88 MOV DWORD PTR SS:[EBP-78],ECX
0040F293 . 83EC 10 SUB ESP,10
0040F296 . 8BD4 MOV EDX,ESP
0040F298 . 890A MOV DWORD PTR DS:[EDX],ECX
0040F29A . 8B4D 8C MOV ECX,DWORD PTR SS:[EBP-74]
0040F29D . 894A 04 MOV DWORD PTR DS:[EDX+4],ECX
0040F2A0 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
0040F2A3 . 8B45 94 MOV EAX,DWORD PTR SS:[EBP-6C]
0040F2A6 . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
0040F2A9 . 6A 07 PUSH 7
0040F2AB . 8B0E MOV ECX,DWORD PTR DS:[ESI]
0040F2AD . 56 PUSH ESI
0040F2AE . FF91 60030000 CALL DWORD PTR DS:[ECX+360]
0040F2B4 . 50 PUSH EAX
0040F2B5 . 8D55 D8 LEA EDX,DWORD PTR SS:[EBP-28]
0040F2B8 . 52 PUSH EDX
0040F2B9 . FFD7 CALL EDI
0040F2BB . 50 PUSH EAX
0040F2BC . FF15 70114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaLateI>; MSVBVM60.__vbaLateIdSt
0040F2C2 . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0040F2C5 . FFD3 CALL EBX
0040F2C7 . B8 90564000 MOV EAX,Consolev.00405690 ; UNICODE "BLADE license keys (*.key)"
0040F2CC . 8945 90 MOV DWORD PTR SS:[EBP-70],EAX
0040F2CF . B9 08000000 MOV ECX,8
0040F2D4 . 894D 88 MOV DWORD PTR SS:[EBP-78],ECX
0040F2D7 . 83EC 10 SUB ESP,10
0040F2DA . 8BD4 MOV EDX,ESP
0040F2DC . 890A MOV DWORD PTR DS:[EDX],ECX
0040F2DE . 8B4D 8C MOV ECX,DWORD PTR SS:[EBP-74]
0040F2E1 . 894A 04 MOV DWORD PTR DS:[EDX+4],ECX
0040F2E4 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
0040F2E7 . 8B45 94 MOV EAX,DWORD PTR SS:[EBP-6C]
0040F2EA . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
0040F2ED . 6A 03 PUSH 3
0040F2EF . 8B0E MOV ECX,DWORD PTR DS:[ESI]
0040F2F1 . 56 PUSH ESI
0040F2F2 . FF91 60030000 CALL DWORD PTR DS:[ECX+360]
0040F2F8 . 50 PUSH EAX
0040F2F9 . 8D55 D8 LEA EDX,DWORD PTR SS:[EBP-28]
0040F2FC . 52 PUSH EDX
0040F2FD . FFD7 CALL EDI
0040F2FF . 50 PUSH EAX
0040F300 . FF15 70114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaLateI>; MSVBVM60.__vbaLateIdSt
0040F306 . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0040F309 . FFD3 CALL EBX
0040F30B . 68 CC564000 PUSH Consolev.004056CC
0040F310 . 8B46 40 MOV EAX,DWORD PTR DS:[ESI+40]
0040F313 . 50 PUSH EAX
0040F314 . FF15 44104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrCa>; MSVBVM60.__vbaStrCat
0040F31A . 8BD0 MOV EDX,EAX
0040F31C . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
0040F31F . FF15 64114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrMo>; MSVBVM60.__vbaStrMove
0040F325 . 50 PUSH EAX
0040F326 . 68 D4564000 PUSH Consolev.004056D4 ; UNICODE ".key"
0040F32B . FF15 44104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrCa>; MSVBVM60.__vbaStrCat
0040F331 . 8945 D0 MOV DWORD PTR SS:[EBP-30],EAX
0040F334 . B9 08000000 MOV ECX,8
0040F339 . 894D C8 MOV DWORD PTR SS:[EBP-38],ECX
0040F33C . 83EC 10 SUB ESP,10
0040F33F . 8BD4 MOV EDX,ESP
0040F341 . 890A MOV DWORD PTR DS:[EDX],ECX
0040F343 . 8B4D CC MOV ECX,DWORD PTR SS:[EBP-34]
0040F346 . 894A 04 MOV DWORD PTR DS:[EDX+4],ECX
0040F349 . 8942 08 MOV DWORD PTR DS:[EDX+8],EAX
0040F34C . 8B45 D4 MOV EAX,DWORD PTR SS:[EBP-2C]
0040F34F . 8942 0C MOV DWORD PTR DS:[EDX+C],EAX
0040F352 . 6A 01 PUSH 1
0040F354 . 8B0E MOV ECX,DWORD PTR DS:[ESI]
0040F356 . 56 PUSH ESI
0040F357 . FF91 60030000 CALL DWORD PTR DS:[ECX+360]
0040F35D . 50 PUSH EAX
0040F35E . 8D55 D8 LEA EDX,DWORD PTR SS:[EBP-28]
0040F361 . 52 PUSH EDX
0040F362 . FFD7 CALL EDI
0040F364 . 50 PUSH EAX
0040F365 . FF15 70114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaLateI>; MSVBVM60.__vbaLateIdSt
0040F36B . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
0040F36E . FF15 80114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStr
0040F374 . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0040F377 . FFD3 CALL EBX
0040F379 . 8D4D C8 LEA ECX,DWORD PTR SS:[EBP-38]
0040F37C . FF15 10104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVar
0040F382 . 6A 00 PUSH 0
0040F384 . 6A 1E PUSH 1E
0040F386 . 8B06 MOV EAX,DWORD PTR DS:[ESI]
0040F388 . 56 PUSH ESI
0040F389 . FF90 60030000 CALL DWORD PTR DS:[EAX+360]
0040F38F . 50 PUSH EAX
0040F390 . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0040F393 . 51 PUSH ECX
0040F394 . FFD7 CALL EDI
0040F396 . 50 PUSH EAX
0040F397 . FF15 1C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaLateI>; MSVBVM60.__vbaLateIdCall
0040F39D . 83C4 0C ADD ESP,0C
0040F3A0 . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0040F3A3 . FFD3 CALL EBX
0040F3A5 . 6A 00 PUSH 0
0040F3A7 . 6A 01 PUSH 1
0040F3A9 . 8B16 MOV EDX,DWORD PTR DS:[ESI]
0040F3AB . 56 PUSH ESI
0040F3AC . FF92 60030000 CALL DWORD PTR DS:[EDX+360]
0040F3B2 . 50 PUSH EAX
0040F3B3 . 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28]
0040F3B6 . 50 PUSH EAX
0040F3B7 . FFD7 CALL EDI
0040F3B9 . 50 PUSH EAX
0040F3BA . 8D4D C8 LEA ECX,DWORD PTR SS:[EBP-38]
0040F3BD . 51 PUSH ECX
0040F3BE . FF15 B0104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaLateI>; MSVBVM60.__vbaLateIdCallLd
0040F3C4 . 83C4 10 ADD ESP,10
0040F3C7 . 50 PUSH EAX
0040F3C8 . FF15 14104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrVa>; MSVBVM60.__vbaStrVarMove
0040F3CE . 8BD0 MOV EDX,EAX
0040F3D0 . 8D4D E0 LEA ECX,DWORD PTR SS:[EBP-20]
0040F3D3 . FF15 64114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrMo>; MSVBVM60.__vbaStrMove
0040F3D9 . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0040F3DC . FFD3 CALL EBX
0040F3DE . 8D4D C8 LEA ECX,DWORD PTR SS:[EBP-38]
0040F3E1 . FF15 10104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVar
0040F3E7 . 6A 00 PUSH 0
0040F3E9 . 6A 1D PUSH 1D
0040F3EB . 8B16 MOV EDX,DWORD PTR DS:[ESI]
0040F3ED . 56 PUSH ESI
0040F3EE . FF92 60030000 CALL DWORD PTR DS:[EDX+360]
0040F3F4 . 50 PUSH EAX
0040F3F5 . 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28]
0040F3F8 . 50 PUSH EAX
0040F3F9 . FFD7 CALL EDI
0040F3FB . 50 PUSH EAX
0040F3FC . 8D4D C8 LEA ECX,DWORD PTR SS:[EBP-38]
0040F3FF . 51 PUSH ECX
0040F400 . FF15 B0104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaLateI>; MSVBVM60.__vbaLateIdCallLd
0040F406 . 83C4 10 ADD ESP,10
0040F409 . 8D55 C8 LEA EDX,DWORD PTR SS:[EBP-38]
0040F40C . 52 PUSH EDX
0040F40D . FF15 14104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrVa>; MSVBVM60.__vbaStrVarMove
0040F413 . 8945 C0 MOV DWORD PTR SS:[EBP-40],EAX
0040F416 . C745 B8 080000>MOV DWORD PTR SS:[EBP-48],8
0040F41D . 6A 04 PUSH 4
0040F41F . 8D45 B8 LEA EAX,DWORD PTR SS:[EBP-48]
0040F422 . 50 PUSH EAX
0040F423 . 8D4D A8 LEA ECX,DWORD PTR SS:[EBP-58]
0040F426 . 51 PUSH ECX
0040F427 . FF15 5C114000 CALL DWORD PTR DS:[<&MSVBVM60.#617>] ; MSVBVM60.rtcLeftCharVar
0040F42D . C745 90 DC4D40>MOV DWORD PTR SS:[EBP-70],Consolev.00404>; UNICODE "IDSI"
0040F434 . C745 88 088000>MOV DWORD PTR SS:[EBP-78],8008
0040F43B . 8D55 A8 LEA EDX,DWORD PTR SS:[EBP-58]
0040F43E . 52 PUSH EDX
0040F43F . 8D45 88 LEA EAX,DWORD PTR SS:[EBP-78]
0040F442 . 50 PUSH EAX
0040F443 . FF15 94104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarTs>; MSVBVM60.__vbaVarTstEq
0040F449 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
0040F44F . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0040F452 . FFD3 CALL EBX
0040F454 . 8D4D A8 LEA ECX,DWORD PTR SS:[EBP-58]
0040F457 . 51 PUSH ECX
0040F458 . 8D55 B8 LEA EDX,DWORD PTR SS:[EBP-48]
0040F45B . 52 PUSH EDX
0040F45C . 8D45 C8 LEA EAX,DWORD PTR SS:[EBP-38]
0040F45F . 50 PUSH EAX
0040F460 . 6A 03 PUSH 3
0040F462 . FF15 24104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVarList
0040F468 . 83C4 10 ADD ESP,10
0040F46B . 66:83BD 54FFFF>CMP WORD PTR SS:[EBP-AC],0
0040F473 . 74 2D JE SHORT Consolev.0040F4A2
0040F475 . BA E4564000 MOV EDX,Consolev.004056E4 ; UNICODE "IDS Informer"
0040F47A . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
0040F47D . FF15 20114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrCo>; MSVBVM60.__vbaStrCopy
0040F483 . 8B0E MOV ECX,DWORD PTR DS:[ESI]
0040F485 . 8D55 E0 LEA EDX,DWORD PTR SS:[EBP-20]
0040F488 . 52 PUSH EDX
0040F489 . 8D45 DC LEA EAX,DWORD PTR SS:[EBP-24]
0040F48C . 50 PUSH EAX
0040F48D . 56 PUSH ESI
0040F48E . FF91 64070000 CALL DWORD PTR DS:[ECX+764]
0040F494 . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
0040F497 . FF15 80114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStr
0040F49D . E9 A3020000 JMP Consolev.0040F745
0040F4A2 > 6A 00 PUSH 0
0040F4A4 . 6A 1D PUSH 1D
0040F4A6 . 8B0E MOV ECX,DWORD PTR DS:[ESI]
0040F4A8 . 56 PUSH ESI
0040F4A9 . FF91 60030000 CALL DWORD PTR DS:[ECX+360]
0040F4AF . 50 PUSH EAX
0040F4B0 . 8D55 D8 LEA EDX,DWORD PTR SS:[EBP-28]
0040F4B3 . 52 PUSH EDX
0040F4B4 . FFD7 CALL EDI
0040F4B6 . 50 PUSH EAX
0040F4B7 . 8D45 C8 LEA EAX,DWORD PTR SS:[EBP-38]
0040F4BA . 50 PUSH EAX
0040F4BB . FF15 B0104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaLateI>; MSVBVM60.__vbaLateIdCallLd
0040F4C1 . 83C4 10 ADD ESP,10
0040F4C4 . 8D4D C8 LEA ECX,DWORD PTR SS:[EBP-38]
0040F4C7 . 51 PUSH ECX
0040F4C8 . FF15 14104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrVa>; MSVBVM60.__vbaStrVarMove
0040F4CE . 8945 C0 MOV DWORD PTR SS:[EBP-40],EAX
0040F4D1 . C745 B8 080000>MOV DWORD PTR SS:[EBP-48],8
0040F4D8 . 6A 02 PUSH 2
0040F4DA . 8D55 B8 LEA EDX,DWORD PTR SS:[EBP-48]
0040F4DD . 52 PUSH EDX
0040F4DE . 8D45 A8 LEA EAX,DWORD PTR SS:[EBP-58]
0040F4E1 . 50 PUSH EAX
0040F4E2 . FF15 5C114000 CALL DWORD PTR DS:[<&MSVBVM60.#617>] ; MSVBVM60.rtcLeftCharVar
0040F4E8 . C745 90 EC4D40>MOV DWORD PTR SS:[EBP-70],Consolev.00404>; UNICODE "EG"
0040F4EF . C745 88 088000>MOV DWORD PTR SS:[EBP-78],8008
0040F4F6 . 8D4D A8 LEA ECX,DWORD PTR SS:[EBP-58]
0040F4F9 . 51 PUSH ECX
0040F4FA . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
0040F4FD . 52 PUSH EDX
0040F4FE . FF15 94104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarTs>; MSVBVM60.__vbaVarTstEq
0040F504 . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
0040F50A . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0040F50D . FFD3 CALL EBX
0040F50F . 8D45 A8 LEA EAX,DWORD PTR SS:[EBP-58]
0040F512 . 50 PUSH EAX
0040F513 . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48]
0040F516 . 51 PUSH ECX
0040F517 . 8D55 C8 LEA EDX,DWORD PTR SS:[EBP-38]
0040F51A . 52 PUSH EDX
0040F51B . 6A 03 PUSH 3
0040F51D . FF15 24104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVarList
0040F523 . 83C4 10 ADD ESP,10
0040F526 . 66:83BD 54FFFF>CMP WORD PTR SS:[EBP-AC],0
0040F52E . 74 2D JE SHORT Consolev.0040F55D
0040F530 . BA 04574000 MOV EDX,Consolev.00405704 ; UNICODE "Evasion Gateway"
0040F535 . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
0040F538 . FF15 20114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrCo>; MSVBVM60.__vbaStrCopy
0040F53E . 8B06 MOV EAX,DWORD PTR DS:[ESI]
0040F540 . 8D4D E0 LEA ECX,DWORD PTR SS:[EBP-20]
0040F543 . 51 PUSH ECX
0040F544 . 8D55 DC LEA EDX,DWORD PTR SS:[EBP-24]
0040F547 . 52 PUSH EDX
0040F548 . 56 PUSH ESI
0040F549 . FF90 64070000 CALL DWORD PTR DS:[EAX+764]
0040F54F . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
0040F552 . FF15 80114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStr
0040F558 . E9 E8010000 JMP Consolev.0040F745
0040F55D > 6A 00 PUSH 0
0040F55F . 6A 1D PUSH 1D
0040F561 . 8B06 MOV EAX,DWORD PTR DS:[ESI]
0040F563 . 56 PUSH ESI
0040F564 . FF90 60030000 CALL DWORD PTR DS:[EAX+360]
0040F56A . 50 PUSH EAX
0040F56B . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0040F56E . 51 PUSH ECX
0040F56F . FFD7 CALL EDI
0040F571 . 50 PUSH EAX
0040F572 . 8D55 C8 LEA EDX,DWORD PTR SS:[EBP-38]
0040F575 . 52 PUSH EDX
0040F576 . FF15 B0104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaLateI>; MSVBVM60.__vbaLateIdCallLd
0040F57C . 83C4 10 ADD ESP,10
0040F57F . 8D45 C8 LEA EAX,DWORD PTR SS:[EBP-38]
0040F582 . 50 PUSH EAX
0040F583 . FF15 14104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrVa>; MSVBVM60.__vbaStrVarMove
0040F589 . 8945 C0 MOV DWORD PTR SS:[EBP-40],EAX
0040F58C . C745 B8 080000>MOV DWORD PTR SS:[EBP-48],8
0040F593 . 6A 03 PUSH 3
0040F595 . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48]
0040F598 . 51 PUSH ECX
0040F599 . 8D55 A8 LEA EDX,DWORD PTR SS:[EBP-58]
0040F59C . 52 PUSH EDX
0040F59D . FF15 5C114000 CALL DWORD PTR DS:[<&MSVBVM60.#617>] ; MSVBVM60.rtcLeftCharVar
0040F5A3 . C745 90 285740>MOV DWORD PTR SS:[EBP-70],Consolev.00405>; UNICODE "CLI"
0040F5AA . C745 88 088000>MOV DWORD PTR SS:[EBP-78],8008
0040F5B1 . 8D45 A8 LEA EAX,DWORD PTR SS:[EBP-58]
0040F5B4 . 50 PUSH EAX
0040F5B5 . 8D4D 88 LEA ECX,DWORD PTR SS:[EBP-78]
0040F5B8 . 51 PUSH ECX
0040F5B9 . FF15 94104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarTs>; MSVBVM60.__vbaVarTstEq
0040F5BF . 8985 54FFFFFF MOV DWORD PTR SS:[EBP-AC],EAX
0040F5C5 . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0040F5C8 . FFD3 CALL EBX
0040F5CA . 8D55 A8 LEA EDX,DWORD PTR SS:[EBP-58]
0040F5CD . 52 PUSH EDX
0040F5CE . 8D45 B8 LEA EAX,DWORD PTR SS:[EBP-48]
0040F5D1 . 50 PUSH EAX
0040F5D2 . 8D4D C8 LEA ECX,DWORD PTR SS:[EBP-38]
0040F5D5 . 51 PUSH ECX
0040F5D6 . 6A 03 PUSH 3
0040F5D8 . FF15 24104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVarList
0040F5DE . 83C4 10 ADD ESP,10
0040F5E1 . 66:83BD 54FFFF>CMP WORD PTR SS:[EBP-AC],0
0040F5E9 74 2D JE SHORT Consolev.0040F618
0040F5EB . BA 34574000 MOV EDX,Consolev.00405734 ; UNICODE "IDS Informer CLI"
0040F5F0 . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
0040F5F3 . FF15 20114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrCo>; MSVBVM60.__vbaStrCopy
0040F5F9 . 8B16 MOV EDX,DWORD PTR DS:[ESI]
0040F5FB . 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
0040F5FE . 50 PUSH EAX
0040F5FF . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
0040F602 . 51 PUSH ECX
0040F603 . 56 PUSH ESI
0040F604 . FF92 64070000 CALL DWORD PTR DS:[EDX+764]
0040F60A . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
0040F60D . FF15 80114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStr
0040F613 . E9 2D010000 JMP Consolev.0040F745
0040F618 > 6A 00 PUSH 0
0040F61A . 6A 1D PUSH 1D
0040F61C . 8B16 MOV EDX,DWORD PTR DS:[ESI]
0040F61E . 56 PUSH ESI
0040F61F . FF92 60030000 CALL DWORD PTR DS:[EDX+360]
0040F625 . 50 PUSH EAX
0040F626 . 8D45 D8 LEA EAX,DWORD PTR SS:[EBP-28]
0040F629 . 50 PUSH EAX
0040F62A . FFD7 CALL EDI
0040F62C . 50 PUSH EAX
0040F62D . 8D4D C8 LEA ECX,DWORD PTR SS:[EBP-38]
0040F630 . 51 PUSH ECX
0040F631 . FF15 B0104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaLateI>; MSVBVM60.__vbaLateIdCallLd
0040F637 . 83C4 10 ADD ESP,10
0040F63A . 8D55 C8 LEA EDX,DWORD PTR SS:[EBP-38]
0040F63D . 52 PUSH EDX
0040F63E . FF15 14104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrVa>; MSVBVM60.__vbaStrVarMove
0040F644 . 8945 C0 MOV DWORD PTR SS:[EBP-40],EAX
0040F647 . C745 B8 080000>MOV DWORD PTR SS:[EBP-48],8
0040F64E . 6A 03 PUSH 3
0040F650 . 8D45 B8 LEA EAX,DWORD PTR SS:[EBP-48]
0040F653 . 50 PUSH EAX
0040F654 . 8D4D A8 LEA ECX,DWORD PTR SS:[EBP-58]
0040F657 . 51 PUSH ECX
0040F658 . FF15 5C114000 CALL DWORD PTR DS:[<&MSVBVM60.#617>] ; MSVBVM60.rtcLeftCharVar
0040F65E . C745 90 044E40>MOV DWORD PTR SS:[EBP-70],Consolev.00404>; UNICODE "IDK"
0040F665 . C745 88 088000>MOV DWORD PTR SS:[EBP-78],8008
0040F66C . 8D55 A8 LEA EDX,DWORD PTR SS:[EBP-58]
0040F66F . 52 PUSH EDX
0040F670 . 8D45 88 LEA EAX,DWORD PTR SS:[EBP-78]
0040F673 . 50 PUSH EAX
0040F674 . FF15 94104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarTs>; MSVBVM60.__vbaVarTstEq
0040F67A . 8BF8 MOV EDI,EAX
0040F67C . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0040F67F . FFD3 CALL EBX
0040F681 . 8D4D A8 LEA ECX,DWORD PTR SS:[EBP-58]
0040F684 . 51 PUSH ECX
0040F685 . 8D55 B8 LEA EDX,DWORD PTR SS:[EBP-48]
0040F688 . 52 PUSH EDX
0040F689 . 8D45 C8 LEA EAX,DWORD PTR SS:[EBP-38]
0040F68C . 50 PUSH EAX
0040F68D . 6A 03 PUSH 3
0040F68F . 8B1D 24104000 MOV EBX,DWORD PTR DS:[<&MSVBVM60.__vbaFr>; MSVBVM60.__vbaFreeVarList
0040F695 . FFD3 CALL EBX ; <&MSVBVM60.__vbaFreeVarList>
0040F697 . 83C4 10 ADD ESP,10
0040F69A . 66:85FF TEST DI,DI
0040F69D . 90 NOP
0040F69E . 90 NOP
0040F69F . BA 5C574000 MOV EDX,Consolev.0040575C ; UNICODE "Informer IDK"
0040F6A4 . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
0040F6A7 . FF15 20114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrCo>; MSVBVM60.__vbaStrCopy
0040F6AD . 8B0E MOV ECX,DWORD PTR DS:[ESI]
0040F6AF . 8D55 E0 LEA EDX,DWORD PTR SS:[EBP-20]
0040F6B2 . 52 PUSH EDX
0040F6B3 . 8D45 DC LEA EAX,DWORD PTR SS:[EBP-24]
0040F6B6 . 50 PUSH EAX
0040F6B7 . 56 PUSH ESI
0040F6B8 . FF91 64070000 CALL DWORD PTR DS:[ECX+764]
0040F6BE . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
0040F6C1 . FF15 80114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStr
0040F6C7 . EB 7C JMP SHORT Consolev.0040F745
0040F6C9 . B9 04000280 MOV ECX,80020004
0040F6CE . 894D A0 MOV DWORD PTR SS:[EBP-60],ECX
0040F6D1 . B8 0A000000 MOV EAX,0A
0040F6D6 . 8945 98 MOV DWORD PTR SS:[EBP-68],EAX
0040F6D9 . 894D B0 MOV DWORD PTR SS:[EBP-50],ECX
0040F6DC . 8945 A8 MOV DWORD PTR SS:[EBP-58],EAX
0040F6DF . C745 80 E05740>MOV DWORD PTR SS:[EBP-80],Consolev.00405>; UNICODE "License import error"
0040F6E6 . BF 08000000 MOV EDI,8
0040F6EB . 89BD 78FFFFFF MOV DWORD PTR SS:[EBP-88],EDI
0040F6F1 . 8D95 78FFFFFF LEA EDX,DWORD PTR SS:[EBP-88]
0040F6F7 . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48]
0040F6FA . 8B35 48114000 MOV ESI,DWORD PTR DS:[<&MSVBVM60.__vbaVa>; MSVBVM60.__vbaVarDup
0040F700 . FFD6 CALL ESI ; <&MSVBVM60.__vbaVarDup>
0040F702 . C745 90 7C5740>MOV DWORD PTR SS:[EBP-70],Consolev.00405>; UNICODE "The specified file is not a BLADE license key."
0040F709 . 897D 88 MOV DWORD PTR SS:[EBP-78],EDI
0040F70C . 8D55 88 LEA EDX,DWORD PTR SS:[EBP-78]
0040F70F . 8D4D C8 LEA ECX,DWORD PTR SS:[EBP-38]
0040F712 . FFD6 CALL ESI
0040F714 . 8D4D 98 LEA ECX,DWORD PTR SS:[EBP-68]
0040F717 . 51 PUSH ECX
0040F718 . 8D55 A8 LEA EDX,DWORD PTR SS:[EBP-58]
0040F71B . 52 PUSH EDX
0040F71C . 8D45 B8 LEA EAX,DWORD PTR SS:[EBP-48]
0040F71F . 50 PUSH EAX
0040F720 . 6A 30 PUSH 30
0040F722 . 8D4D C8 LEA ECX,DWORD PTR SS:[EBP-38]
0040F725 . 51 PUSH ECX
0040F726 . FF15 60104000 CALL DWORD PTR DS:[<&MSVBVM60.#595>] ; MSVBVM60.rtcMsgBox
0040F72C . 8D55 98 LEA EDX,DWORD PTR SS:[EBP-68]
0040F72F . 52 PUSH EDX
0040F730 . 8D45 A8 LEA EAX,DWORD PTR SS:[EBP-58]
0040F733 . 50 PUSH EAX
0040F734 . 8D4D B8 LEA ECX,DWORD PTR SS:[EBP-48]
0040F737 . 51 PUSH ECX
0040F738 . 8D55 C8 LEA EDX,DWORD PTR SS:[EBP-38]
0040F73B . 52 PUSH EDX
0040F73C . 6A 04 PUSH 4
0040F73E . FFD3 CALL EBX
0040F740 . 83C4 14 ADD ESP,14
0040F743 . EB 00 JMP SHORT Consolev.0040F745
0040F745 > FF15 5C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaExitP>; MSVBVM60.__vbaExitProc
0040F74B . 68 8AF74000 PUSH Consolev.0040F78A
0040F750 . EB 2E JMP SHORT Consolev.0040F780
0040F752 . 8D4D DC LEA ECX,DWORD PTR SS:[EBP-24]
0040F755 . FF15 80114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStr
0040F75B . 8D4D D8 LEA ECX,DWORD PTR SS:[EBP-28]
0040F75E . FF15 84114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeO>; MSVBVM60.__vbaFreeObj
0040F764 . 8D45 98 LEA EAX,DWORD PTR SS:[EBP-68]
0040F767 . 50 PUSH EAX
0040F768 . 8D4D A8 LEA ECX,DWORD PTR SS:[EBP-58]
0040F76B . 51 PUSH ECX
0040F76C . 8D55 B8 LEA EDX,DWORD PTR SS:[EBP-48]
0040F76F . 52 PUSH EDX
0040F770 . 8D45 C8 LEA EAX,DWORD PTR SS:[EBP-38]
0040F773 . 50 PUSH EAX
0040F774 . 6A 04 PUSH 4
0040F776 . FF15 24104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVarList
0040F77C . 83C4 14 ADD ESP,14
0040F77F . C3 RETN
0040F780 > 8D4D E0 LEA ECX,DWORD PTR SS:[EBP-20]
0040F783 . FF15 80114000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStr
0040F789 . C3 RETN
0040F78A . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8]
0040F78D . 8B08 MOV ECX,DWORD PTR DS:[EAX]
0040F78F . 50 PUSH EAX
0040F790 . FF51 08 CALL DWORD PTR DS:[ECX+8]
0040F793 . 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C]
0040F796 . 8B4D E4 MOV ECX,DWORD PTR SS:[EBP-1C]
0040F799 . 64:890D 000000>MOV DWORD PTR FS:[0],ECX
0040F7A0 . 5F POP EDI
0040F7A1 . 5E POP ESI
0040F7A2 . 5B POP EBX
0040F7A3 . 8BE5 MOV ESP,EBP
0040F7A5 . 5D POP EBP
0040F7A6 . C2 0400 RETN 4
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!