吃饱喝多了,醉破VB,。。。。。。。。。。。。。。。。。e
00402848 . FF15 90104000 call dword ptr [<&MSVBVM60.__vbaStrVa>; 取出 1 2 位
0040284E . 50 push eax
0040284F . FF15 E4104000 call dword ptr [<&MSVBVM60.#581>] ; MSVBVM60.rtcR8ValFromBstr
00402855 . FF15 C4104000 call dword ptr [<&MSVBVM60.__vbaFpI2>>; MSVBVM60.__vbaFpI2
0040285B . 8D4D C4 lea ecx, dword ptr [ebp-3C]
0040285E . 8945 E0 mov dword ptr [ebp-20], eax
00402861 . FF15 E0104000 call dword ptr [<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStr
00402867 . 8D45 94 lea eax, dword ptr [ebp-6C]
0040286A . 8D4D A4 lea ecx, dword ptr [ebp-5C]
0040286D . 50 push eax
0040286E . 8D55 B4 lea edx, dword ptr [ebp-4C]
00402871 . 51 push ecx
00402872 . 52 push edx
00402873 . 6A 03 push 3
00402875 . FFD3 call ebx
00402877 . 8B07 mov eax, dword ptr [edi]
00402879 . 83C4 10 add esp, 10
0040287C . 8975 E8 mov dword ptr [ebp-18], esi
0040287F . 50 push eax
00402880 . FF15 0C104000 call dword ptr [<&MSVBVM60.__vbaLenBs>; MSVBVM60.__vbaLenBstr
00402886 . 8BC8 mov ecx, eax
00402888 . FF15 64104000 call dword ptr [<&MSVBVM60.__vbaI2I4>>; MSVBVM60.__vbaI2I4
0040288E . 8985 4CFFFFFF mov dword ptr [ebp-B4], eax
00402894 . B8 03000000 mov eax, 3
00402899 . 8945 C8 mov dword ptr [ebp-38], eax
0040289C > 66:3B85 4CFFF>cmp ax, word ptr [ebp-B4] ; 循环起头了
004028A3 . 0F8F EA010000 jg 00402A93
004028A9 . B9 02000000 mov ecx, 2
004028AE . C785 6CFFFFFF>mov dword ptr [ebp-94], 00401F48 ; UNICODE "&H"
004028B8 . 894D BC mov dword ptr [ebp-44], ecx
004028BB . 894D B4 mov dword ptr [ebp-4C], ecx
004028BE . 0FBFD0 movsx edx, ax
004028C1 . 8D4D B4 lea ecx, dword ptr [ebp-4C]
004028C4 . 8D45 84 lea eax, dword ptr [ebp-7C]
004028C7 . 51 push ecx
004028C8 . 52 push edx
004028C9 . 8D4D A4 lea ecx, dword ptr [ebp-5C]
004028CC . 50 push eax
004028CD . 51 push ecx
004028CE . C785 64FFFFFF>mov dword ptr [ebp-9C], 8
004028D8 . 897D 8C mov dword ptr [ebp-74], edi
004028DB . C745 84 08400>mov dword ptr [ebp-7C], 4008
004028E2 . FF15 4C104000 call dword ptr [<&MSVBVM60.#632>] ; MSVBVM60.rtcMidCharVar
004028E8 . 8D95 64FFFFFF lea edx, dword ptr [ebp-9C]
004028EE . 8D45 A4 lea eax, dword ptr [ebp-5C]
004028F1 . 52 push edx
004028F2 . 8D4D 94 lea ecx, dword ptr [ebp-6C]
004028F5 . 50 push eax
004028F6 . 51 push ecx
004028F7 . FF15 94104000 call dword ptr [<&MSVBVM60.__vbaVarCa>; MSVBVM60.__vbaVarCat
004028FD . 8D55 C4 lea edx, dword ptr [ebp-3C]
00402900 . 50 push eax
00402901 . 52 push edx
00402902 . FF15 90104000 call dword ptr [<&MSVBVM60.__vbaStrVa>; 取出 3 4 位
00402908 . 50 push eax
00402909 . FF15 E4104000 call dword ptr [<&MSVBVM60.#581>] ; NO
0040290F . FF15 C4104000 call dword ptr [<&MSVBVM60.__vbaFpI2>>; MSVBVM60.__vbaFpI2
00402915 . 8D4D C4 lea ecx, dword ptr [ebp-3C]
00402918 . 8BF8 mov edi, eax
0040291A . FF15 E0104000 call dword ptr [<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStr
00402920 . 8D45 94 lea eax, dword ptr [ebp-6C]
00402923 . 8D4D A4 lea ecx, dword ptr [ebp-5C]
00402926 . 50 push eax
00402927 . 8D55 B4 lea edx, dword ptr [ebp-4C]
0040292A . 51 push ecx
0040292B . 52 push edx
0040292C . 6A 03 push 3
0040292E . FFD3 call ebx
00402930 . 8B4D CC mov ecx, dword ptr [ebp-34]
00402933 . 83C4 10 add esp, 10
00402936 . 3BCE cmp ecx, esi
00402938 . 74 28 je short 00402962
0040293A . 66:8339 01 cmp word ptr [ecx], 1
0040293E . 75 22 jnz short 00402962
00402940 . 0FBF75 E8 movsx esi, word ptr [ebp-18]
00402944 . 8B51 14 mov edx, dword ptr [ecx+14]
00402947 . 8B41 10 mov eax, dword ptr [ecx+10]
0040294A . 2BF2 sub esi, edx
0040294C . 3BF0 cmp esi, eax
0040294E . 72 09 jb short 00402959
00402950 . FF15 5C104000 call dword ptr [<&MSVBVM60.__vbaGener>; MSVBVM60.__vbaGenerateBoundsError
00402956 . 8B4D CC mov ecx, dword ptr [ebp-34]
00402959 > 8D04B5 000000>lea eax, dword ptr [esi*4]
00402960 . EB 09 jmp short 0040296B
00402962 > FF15 5C104000 call dword ptr [<&MSVBVM60.__vbaGener>; MSVBVM60.__vbaGenerateBoundsError
00402968 . 8B4D CC mov ecx, dword ptr [ebp-34]
0040296B > 8B49 0C mov ecx, dword ptr [ecx+C]
0040296E . 8B1401 mov edx, dword ptr [ecx+eax]
00402971 . 52 push edx
00402972 . FF15 AC104000 call dword ptr [<&MSVBVM60.__vbaI4Str>; MSVBVM60.__vbaI4Str
00402978 . 8BC8 mov ecx, eax
0040297A . 0FBFC7 movsx eax, di
0040297D . 33C8 xor ecx, eax ; eax 的值是我输入的
0040297F . FF15 64104000 call dword ptr [<&MSVBVM60.__vbaI2I4>>
00402985 . 8B4D E0 mov ecx, dword ptr [ebp-20]
00402988 . 8BF0 mov esi, eax
0040298A . 51 push ecx
0040298B . FF15 00104000 call dword ptr [<&MSVBVM60.__vbaStrI2>
00402991 . 8BD0 mov edx, eax
00402993 . 8D4D C4 lea ecx, dword ptr [ebp-3C]
00402996 . FF15 D0104000 call dword ptr [<&MSVBVM60.__vbaStrMo>
0040299C . 50 push eax
0040299D . FF15 E4104000 call dword ptr [<&MSVBVM60.#581>]
004029A3 . DD9D 58FFFFFF fstp qword ptr [ebp-A8] ;
004029A9 . 0FBFD6 movsx edx, si
004029AC . 8995 40FFFFFF mov dword ptr [ebp-C0], edx
004029B2 . DB85 40FFFFFF fild dword ptr [ebp-C0] ;
004029B8 . DD9D 38FFFFFF fstp qword ptr [ebp-C8]
004029BE . DD85 38FFFFFF fld qword ptr [ebp-C8]
004029C4 . DCA5 58FFFFFF fsub qword ptr [ebp-A8] ; 这里减去上一个两位的 10 进制数
004029CA . DFE0 fstsw ax
有些刺手。。。。。。。。。。。。。。。开始给它蒙了一会
name : pediy
code : 90789C32AD5D