-
-
[旧帖] [求助]对SCGRID.OCX的破解,我找到关键点了 0.00雪花
-
2007-12-15 11:03 3419
-
请看一下,现在我该怎么办
11026DD1 . 51 push ecx
11026DD2 . 52 push edx
11026DD3 . FF15 C0110011 call dword ptr ds:[<&MSVBVM60.__vbaStrVarVal>; MSVBVM60.__vbaStrVarVal
11026DD9 . 50 push eax
11026DDA . FF15 C8120011 call dword ptr ds:[<&MSVBVM60.#581>] ; MSVBVM60.rtcR8ValFromBstr
11026DE0 . FF15 6C120011 call dword ptr ds:[<&MSVBVM60.__vbaFpI4>] ; MSVBVM60.__vbaFpI4
11026DE6 . 83C0 64 add eax,64
11026DE9 . 0F80 3B040000 jo SCGrid.1102722A
11026DEF . 50 push eax
11026DF0 . FF15 24100011 call dword ptr ds:[<&MSVBVM60.__vbaStrI4>] ; MSVBVM60.__vbaStrI4
11026DF6 . 8BD0 mov edx,eax
11026DF8 . 8D4D E0 lea ecx,dword ptr ss:[ebp-20]
11026DFB . FFD7 call edi
11026DFD . 50 push eax
11026DFE . 68 AC1C0111 push SCGrid.11011CAC ; UNICODE "date"
11026E03 . 68 741C0111 push SCGrid.11011C74 ; UNICODE "register6"
11026E08 . 68 5C1C0111 push SCGrid.11011C5C ; UNICODE "vsc grid"
11026E0D . FF15 08100011 call dword ptr ds:[<&MSVBVM60.#690>] ; MSVBVM60.rtcSaveSetting
11026E13 . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
11026E16 . 8D4D E4 lea ecx,dword ptr ss:[ebp-1C]
11026E19 . 50 push eax
11026E1A . 51 push ecx
11026E1B . 6A 02 push 2
11026E1D . FF15 04120011 call dword ptr ds:[<&MSVBVM60.__vbaFreeStrLi>; MSVBVM60.__vbaFreeStrList
11026E23 . 8D55 94 lea edx,dword ptr ss:[ebp-6C]
11026E26 . 8D45 A4 lea eax,dword ptr ss:[ebp-5C]
11026E29 . 52 push edx
11026E2A . 8D4D B4 lea ecx,dword ptr ss:[ebp-4C]
11026E2D . 50 push eax
11026E2E . 51 push ecx
11026E2F . 6A 03 push 3
11026E31 . FF15 44100011 call dword ptr ds:[<&MSVBVM60.__vbaFreeVarLi>; MSVBVM60.__vbaFreeVarList
11026E37 . 83C4 1C add esp,1C
11026E3A . B9 04000280 mov ecx,80020004
11026E3F . B8 0A000000 mov eax,0A
11026E44 . 894D 8C mov dword ptr ss:[ebp-74],ecx
11026E47 . 68 E81C0111 push SCGrid.11011CE8 ; UNICODE "Thank you for using SCGrid."
11026E4C . 68 241D0111 push SCGrid.11011D24 ; UNICODE "
"
11026E51 . 8945 84 mov dword ptr ss:[ebp-7C],eax
11026E54 . 894D 9C mov dword ptr ss:[ebp-64],ecx
11026E57 . 8945 94 mov dword ptr ss:[ebp-6C],eax
11026E5A . 894D AC mov dword ptr ss:[ebp-54],ecx
11026E5D . 8945 A4 mov dword ptr ss:[ebp-5C],eax
11026E60 . FFD3 call ebx
11026E62 . 8BD0 mov edx,eax
11026E64 . 8D4D E4 lea ecx,dword ptr ss:[ebp-1C]
11026E67 . FFD7 call edi
11026E69 . 50 push eax
11026E6A . 68 301D0111 push SCGrid.11011D30 ; UNICODE "Send your payment before the expiration time."
11026E6F . FFD3 call ebx
11026E71 . 8945 BC mov dword ptr ss:[ebp-44],eax
11026E74 . C745 B4 08000000 mov dword ptr ss:[ebp-4C],8
11026E7B . 8D55 84 lea edx,dword ptr ss:[ebp-7C]
11026E7E . 8D45 94 lea eax,dword ptr ss:[ebp-6C]
11026E81 . 52 push edx
11026E82 . 8D4D A4 lea ecx,dword ptr ss:[ebp-5C]
11026E85 . 50 push eax
11026E86 . 51 push ecx
11026E87 . 8D55 B4 lea edx,dword ptr ss:[ebp-4C]
11026E8A . 6A 00 push 0
11026E8C . 52 push edx
11026E8D . FF15 CC100011 call dword ptr ds:[<&MSVBVM60.#595>] ; MSVBVM60.rtcMsgBox
11026E93 . 8D4D E4 lea ecx,dword ptr ss:[ebp-1C]
11026E96 . FF15 C4120011 call dword ptr ds:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
11026E9C . 8D45 84 lea eax,dword ptr ss:[ebp-7C]
11026E9F . 8D4D 94 lea ecx,dword ptr ss:[ebp-6C]
11026EA2 . 50 push eax
11026EA3 . 8D55 A4 lea edx,dword ptr ss:[ebp-5C]
11026EA6 . 51 push ecx
11026EA7 . 8D45 B4 lea eax,dword ptr ss:[ebp-4C]
11026EAA . 52 push edx
11026EAB . 50 push eax
11026EAC . 6A 04 push 4
11026EAE . FF15 44100011 call dword ptr ds:[<&MSVBVM60.__vbaFreeVarLi>; MSVBVM60.__vbaFreeVarList
11026EB4 . 8B8D 20FFFFFF mov ecx,dword ptr ss:[ebp-E0]
11026EBA . 83C4 14 add esp,14
11026EBD . 8B81 A00B0F11 mov eax,dword ptr ds:[ecx+110F0BA0]
11026EC3 . 8DB9 A00B0F11 lea edi,dword ptr ds:[ecx+110F0BA0]
11026EC9 . 85C0 test eax,eax
11026ECB . 75 0C jnz short SCGrid.11026ED9
11026ECD . 57 push edi
11026ECE . 68 181C0111 push SCGrid.11011C18
11026ED3 . FF15 E4110011 call dword ptr ds:[<&MSVBVM60.__vbaNew2>] ; MSVBVM60.__vbaNew2
11026ED9 > 8B3F mov edi,dword ptr ds:[edi]
11026EDB . 8D55 CC lea edx,dword ptr ss:[ebp-34]
11026EDE . 56 push esi
11026EDF . 52 push edx
11026EE0 . 8B1F mov ebx,dword ptr ds:[edi]
11026EE2 . FF15 D8100011 call dword ptr ds:[<&MSVBVM60.__vbaObjSetAdd>; MSVBVM60.__vbaObjSetAddref
11026EE8 . 50 push eax
11026EE9 . 57 push edi
11026EEA . FF53 10 call dword ptr ds:[ebx+10]
11026EED . 85C0 test eax,eax
11026EEF . DBE2 fclex
11026EF1 . 7D 0F jge short SCGrid.11026F02
11026EF3 . 6A 10 push 10
11026EF5 . 68 081C0111 push SCGrid.11011C08
11026EFA . 57 push edi
11026EFB . 50 push eax
11026EFC . FF15 8C100011 call dword ptr ds:[<&MSVBVM60.__vbaHresultCh>; MSVBVM60.__vbaHresultCheckObj
11026F02 > 8D4D CC lea ecx,dword ptr ss:[ebp-34]
11026F05 . FF15 C0120011 call dword ptr ds:[<&MSVBVM60.__vbaFreeObj>] ; MSVBVM60.__vbaFreeObj
11026F0B . E9 92020000 jmp SCGrid.110271A2
11026F10 > FF90 08030000 call dword ptr ds:[eax+308]
11026F16 . 8D4D CC lea ecx,dword ptr ss:[ebp-34]
11026F19 . 50 push eax
11026F1A . 51 push ecx
11026F1B . FF15 C8100011 call dword ptr ds:[<&MSVBVM60.__vbaObjSet>] ; MSVBVM60.__vbaObjSet
11026F21 . 8BD8 mov ebx,eax
11026F23 . 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
11026F26 . 50 push eax
11026F27 . 53 push ebx
11026F28 . 8B13 mov edx,dword ptr ds:[ebx]
11026F2A . FF92 A0000000 call dword ptr ds:[edx+A0]
11026F30 . 85C0 test eax,eax
11026F32 . DBE2 fclex
11026F34 . 7D 12 jge short SCGrid.11026F48
11026F36 . 68 A0000000 push 0A0
11026F3B . 68 281C0111 push SCGrid.11011C28
11026F40 . 53 push ebx
11026F41 . 50 push eax
11026F42 . FF15 8C100011 call dword ptr ds:[<&MSVBVM60.__vbaHresultCh>; MSVBVM60.__vbaHresultCheckObj
11026F48 > 8B55 E4 mov edx,dword ptr ss:[ebp-1C]
11026F4B . 8D4D E0 lea ecx,dword ptr ss:[ebp-20]
11026F4E . C745 E4 00000000 mov dword ptr ss:[ebp-1C],0
11026F55 . FFD7 call edi
11026F57 . 8B4D E8 mov ecx,dword ptr ss:[ebp-18]
11026F5A . 8D55 E0 lea edx,dword ptr ss:[ebp-20]
11026F5D . 51 push ecx
11026F5E . 52 push edx
11026F5F . E8 4C2B0000 call SCGrid.11029AB0
11026F64 . 8B3D C4120011 mov edi,dword ptr ds:[<&MSVBVM60.__vbaFreeSt>; MSVBVM60.__vbaFreeStr
11026F6A . 8D4D E0 lea ecx,dword ptr ss:[ebp-20]
11026F6D . 8BD8 mov ebx,eax
11026F6F . FFD7 call edi ; <&MSVBVM60.__vbaFreeStr>
11026F71 . 8D4D CC lea ecx,dword ptr ss:[ebp-34]
11026F74 . FF15 C0120011 call dword ptr ds:[<&MSVBVM60.__vbaFreeObj>] ; MSVBVM60.__vbaFreeObj
11026F7A . 66:85DB test bx,bx
11026F7D . 0F84 AD010000 je SCGrid.11027130
11026F83 . 8B06 mov eax,dword ptr ds:[esi]
11026F85 . 56 push esi
11026F86 . FF90 04030000 call dword ptr ds:[eax+304]
11026F8C . 8D4D CC lea ecx,dword ptr ss:[ebp-34]
11026F8F . 50 push eax
11026F90 . 51 push ecx
11026F91 . FF15 C8100011 call dword ptr ds:[<&MSVBVM60.__vbaObjSet>] ; MSVBVM60.__vbaObjSet
11026F97 . 8BD8 mov ebx,eax
11026F99 . 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
11026F9C . 50 push eax
11026F9D . 53 push ebx
11026F9E . 8B13 mov edx,dword ptr ds:[ebx]
11026FA0 . FF92 A0000000 call dword ptr ds:[edx+A0]
11026FA6 . 85C0 test eax,eax
11026FA8 . DBE2 fclex
11026FAA . 7D 12 jge short SCGrid.11026FBE
11026FAC . 68 A0000000 push 0A0
11026FB1 . 68 281C0111 push SCGrid.11011C28
11026FB6 . 53 push ebx
11026FB7 . 50 push eax
11026FB8 . FF15 8C100011 call dword ptr ds:[<&MSVBVM60.__vbaHresultCh>; MSVBVM60.__vbaHresultCheckObj
11026FBE > 8B4D E4 mov ecx,dword ptr ss:[ebp-1C]
11026FC1 . 8B1D 08100011 mov ebx,dword ptr ds:[<&MSVBVM60.#690>] ; MSVBVM60.rtcSaveSetting
11026FC7 . 51 push ecx
11026FC8 . 68 8C1C0111 push SCGrid.11011C8C ; UNICODE "name"
11026FCD . 68 741C0111 push SCGrid.11011C74 ; UNICODE "register6"
11026FD2 . 68 5C1C0111 push SCGrid.11011C5C ; UNICODE "vsc grid"
11026FD7 . FFD3 call ebx ; <&MSVBVM60.#690>
11026FD9 . 8D4D E4 lea ecx,dword ptr ss:[ebp-1C]
11026FDC . FFD7 call edi
11026FDE . 8D4D CC lea ecx,dword ptr ss:[ebp-34]
11026FE1 . FF15 C0120011 call dword ptr ds:[<&MSVBVM60.__vbaFreeObj>] ; MSVBVM60.__vbaFreeObj
11026FE7 . 8B16 mov edx,dword ptr ds:[esi]
11026FE9 . 56 push esi
11026FEA . FF92 08030000 call dword ptr ds:[edx+308]
11026FF0 . 50 push eax
11026FF1 . 8D45 CC lea eax,dword ptr ss:[ebp-34]
11026FF4 . 50 push eax
11026FF5 . FF15 C8100011 call dword ptr ds:[<&MSVBVM60.__vbaObjSet>] ; MSVBVM60.__vbaObjSet
11026FFB . 8BF8 mov edi,eax
11026FFD . 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
11027000 . 52 push edx
11027001 . 57 push edi
11027002 . 8B0F mov ecx,dword ptr ds:[edi]
11027004 . FF91 A0000000 call dword ptr ds:[ecx+A0]
1102700A . 85C0 test eax,eax
1102700C . DBE2 fclex
1102700E . 7D 12 jge short SCGrid.11027022
11027010 . 68 A0000000 push 0A0
11027015 . 68 281C0111 push SCGrid.11011C28
1102701A . 57 push edi
1102701B . 50 push eax
1102701C . FF15 8C100011 call dword ptr ds:[<&MSVBVM60.__vbaHresultCh>; MSVBVM60.__vbaHresultCheckObj
11027022 > 8B45 E4 mov eax,dword ptr ss:[ebp-1C]
11027025 . 50 push eax
11027026 . 68 9C1C0111 push SCGrid.11011C9C ; UNICODE "code"
1102702B . 68 741C0111 push SCGrid.11011C74 ; UNICODE "register6"
11027030 . 68 5C1C0111 push SCGrid.11011C5C ; UNICODE "vsc grid"
11027035 . FFD3 call ebx
11027037 . 8D4D E4 lea ecx,dword ptr ss:[ebp-1C]
1102703A . FF15 C4120011 call dword ptr ds:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
11027040 . 8B3D C0120011 mov edi,dword ptr ds:[<&MSVBVM60.__vbaFreeOb>; MSVBVM60.__vbaFreeObj
11027046 . 8D4D CC lea ecx,dword ptr ss:[ebp-34]
11027049 . FFD7 call edi ; <&MSVBVM60.__vbaFreeObj>
1102704B . 8B4D E8 mov ecx,dword ptr ss:[ebp-18]
1102704E . 51 push ecx
1102704F . 68 901D0111 push SCGrid.11011D90 ; UNICODE "number"
11027054 . 68 741C0111 push SCGrid.11011C74 ; UNICODE "register6"
11027059 . 68 5C1C0111 push SCGrid.11011C5C ; UNICODE "vsc grid"
1102705E . FFD3 call ebx
11027060 . B9 04000280 mov ecx,80020004
11027065 . B8 0A000000 mov eax,0A
1102706A . 894D 8C mov dword ptr ss:[ebp-74],ecx
1102706D . 894D 9C mov dword ptr ss:[ebp-64],ecx
11027070 . 894D AC mov dword ptr ss:[ebp-54],ecx
11027073 . 8D95 74FFFFFF lea edx,dword ptr ss:[ebp-8C]
11027079 . 8D4D B4 lea ecx,dword ptr ss:[ebp-4C]
1102707C . 8945 84 mov dword ptr ss:[ebp-7C],eax
1102707F . 8945 94 mov dword ptr ss:[ebp-6C],eax
11027082 . 8945 A4 mov dword ptr ss:[ebp-5C],eax
11027085 . C785 7CFFFFFF A41>mov dword ptr ss:[ebp-84],SCGrid.11011DA4 ; UNICODE "Thank you for using SCGrid, you've successfully registered"
1102708F . C785 74FFFFFF 080>mov dword ptr ss:[ebp-8C],8
11027099 . FF15 54120011 call dword ptr ds:[<&MSVBVM60.__vbaVarDup>] ; MSVBVM60.__vbaVarDup
1102709F . 8D55 84 lea edx,dword ptr ss:[ebp-7C]
110270A2 . 8D45 94 lea eax,dword ptr ss:[ebp-6C]
110270A5 . 52 push edx
110270A6 . 8D4D A4 lea ecx,dword ptr ss:[ebp-5C]
110270A9 . 50 push eax
110270AA . 51 push ecx
110270AB . 8D55 B4 lea edx,dword ptr ss:[ebp-4C]
110270AE . 6A 00 push 0
110270B0 . 52 push edx
110270B1 . FF15 CC100011 call dword ptr ds:[<&MSVBVM60.#595>] ; MSVBVM60.rtcMsgBox
110270B7 . 8D45 84 lea eax,dword ptr ss:[ebp-7C]
110270BA . 8D4D 94 lea ecx,dword ptr ss:[ebp-6C]
110270BD . 50 push eax
110270BE . 8D55 A4 lea edx,dword ptr ss:[ebp-5C]
110270C1 . 51 push ecx
110270C2 . 8D45 B4 lea eax,dword ptr ss:[ebp-4C]
110270C5 . 52 push edx
110270C6 . 50 push eax
110270C7 . 6A 04 push 4
110270C9 . FF15 44100011 call dword ptr ds:[<&MSVBVM60.__vbaFreeVarLi>; MSVBVM60.__vbaFreeVarList
110270CF . 8B8D 20FFFFFF mov ecx,dword ptr ss:[ebp-E0]
110270D5 . 83C4 14 add esp,14
110270D8 . 8B81 A00B0F11 mov eax,dword ptr ds:[ecx+110F0BA0]
110270DE . 8D99 A00B0F11 lea ebx,dword ptr ds:[ecx+110F0BA0]
110270E4 . 85C0 test eax,eax
110270E6 . 75 0C jnz short SCGrid.110270F4
110270E8 . 53 push ebx
110270E9 . 68 181C0111 push SCGrid.11011C18
110270EE . FF15 E4110011 call dword ptr ds:[<&MSVBVM60.__vbaNew2>] ; MSVBVM60.__vbaNew2
110270F4 > 8B1B mov ebx,dword ptr ds:[ebx]
110270F6 . 8D45 CC lea eax,dword ptr ss:[ebp-34]
110270F9 . 56 push esi
110270FA . 50 push eax
110270FB . 8B13 mov edx,dword ptr ds:[ebx]
110270FD . 8995 18FFFFFF mov dword ptr ss:[ebp-E8],edx
11027103 . FF15 D8100011 call dword ptr ds:[<&MSVBVM60.__vbaObjSetAdd>; MSVBVM60.__vbaObjSetAddref
11027109 . 8B8D 18FFFFFF mov ecx,dword ptr ss:[ebp-E8]
1102710F . 50 push eax
11027110 . 53 push ebx
11027111 . FF51 10 call dword ptr ds:[ecx+10]
11027114 . 85C0 test eax,eax
11027116 . DBE2 fclex
11027118 . 7D 0F jge short SCGrid.11027129
1102711A . 6A 10 push 10
1102711C . 68 081C0111 push SCGrid.11011C08
11027121 . 53 push ebx
11027122 . 50 push eax
11027123 . FF15 8C100011 call dword ptr ds:[<&MSVBVM60.__vbaHresultCh>; MSVBVM60.__vbaHresultCheckObj
11027129 > 8D4D CC lea ecx,dword ptr ss:[ebp-34]
1102712C . FFD7 call edi
1102712E . EB 72 jmp short SCGrid.110271A2
11027130 > B9 04000280 mov ecx,80020004
11027135 . B8 0A000000 mov eax,0A
1102713A . 894D 8C mov dword ptr ss:[ebp-74],ecx
1102713D . 894D 9C mov dword ptr ss:[ebp-64],ecx
11026DD1 . 51 push ecx
11026DD2 . 52 push edx
11026DD3 . FF15 C0110011 call dword ptr ds:[<&MSVBVM60.__vbaStrVarVal>; MSVBVM60.__vbaStrVarVal
11026DD9 . 50 push eax
11026DDA . FF15 C8120011 call dword ptr ds:[<&MSVBVM60.#581>] ; MSVBVM60.rtcR8ValFromBstr
11026DE0 . FF15 6C120011 call dword ptr ds:[<&MSVBVM60.__vbaFpI4>] ; MSVBVM60.__vbaFpI4
11026DE6 . 83C0 64 add eax,64
11026DE9 . 0F80 3B040000 jo SCGrid.1102722A
11026DEF . 50 push eax
11026DF0 . FF15 24100011 call dword ptr ds:[<&MSVBVM60.__vbaStrI4>] ; MSVBVM60.__vbaStrI4
11026DF6 . 8BD0 mov edx,eax
11026DF8 . 8D4D E0 lea ecx,dword ptr ss:[ebp-20]
11026DFB . FFD7 call edi
11026DFD . 50 push eax
11026DFE . 68 AC1C0111 push SCGrid.11011CAC ; UNICODE "date"
11026E03 . 68 741C0111 push SCGrid.11011C74 ; UNICODE "register6"
11026E08 . 68 5C1C0111 push SCGrid.11011C5C ; UNICODE "vsc grid"
11026E0D . FF15 08100011 call dword ptr ds:[<&MSVBVM60.#690>] ; MSVBVM60.rtcSaveSetting
11026E13 . 8D45 E0 lea eax,dword ptr ss:[ebp-20]
11026E16 . 8D4D E4 lea ecx,dword ptr ss:[ebp-1C]
11026E19 . 50 push eax
11026E1A . 51 push ecx
11026E1B . 6A 02 push 2
11026E1D . FF15 04120011 call dword ptr ds:[<&MSVBVM60.__vbaFreeStrLi>; MSVBVM60.__vbaFreeStrList
11026E23 . 8D55 94 lea edx,dword ptr ss:[ebp-6C]
11026E26 . 8D45 A4 lea eax,dword ptr ss:[ebp-5C]
11026E29 . 52 push edx
11026E2A . 8D4D B4 lea ecx,dword ptr ss:[ebp-4C]
11026E2D . 50 push eax
11026E2E . 51 push ecx
11026E2F . 6A 03 push 3
11026E31 . FF15 44100011 call dword ptr ds:[<&MSVBVM60.__vbaFreeVarLi>; MSVBVM60.__vbaFreeVarList
11026E37 . 83C4 1C add esp,1C
11026E3A . B9 04000280 mov ecx,80020004
11026E3F . B8 0A000000 mov eax,0A
11026E44 . 894D 8C mov dword ptr ss:[ebp-74],ecx
11026E47 . 68 E81C0111 push SCGrid.11011CE8 ; UNICODE "Thank you for using SCGrid."
11026E4C . 68 241D0111 push SCGrid.11011D24 ; UNICODE "
"
11026E51 . 8945 84 mov dword ptr ss:[ebp-7C],eax
11026E54 . 894D 9C mov dword ptr ss:[ebp-64],ecx
11026E57 . 8945 94 mov dword ptr ss:[ebp-6C],eax
11026E5A . 894D AC mov dword ptr ss:[ebp-54],ecx
11026E5D . 8945 A4 mov dword ptr ss:[ebp-5C],eax
11026E60 . FFD3 call ebx
11026E62 . 8BD0 mov edx,eax
11026E64 . 8D4D E4 lea ecx,dword ptr ss:[ebp-1C]
11026E67 . FFD7 call edi
11026E69 . 50 push eax
11026E6A . 68 301D0111 push SCGrid.11011D30 ; UNICODE "Send your payment before the expiration time."
11026E6F . FFD3 call ebx
11026E71 . 8945 BC mov dword ptr ss:[ebp-44],eax
11026E74 . C745 B4 08000000 mov dword ptr ss:[ebp-4C],8
11026E7B . 8D55 84 lea edx,dword ptr ss:[ebp-7C]
11026E7E . 8D45 94 lea eax,dword ptr ss:[ebp-6C]
11026E81 . 52 push edx
11026E82 . 8D4D A4 lea ecx,dword ptr ss:[ebp-5C]
11026E85 . 50 push eax
11026E86 . 51 push ecx
11026E87 . 8D55 B4 lea edx,dword ptr ss:[ebp-4C]
11026E8A . 6A 00 push 0
11026E8C . 52 push edx
11026E8D . FF15 CC100011 call dword ptr ds:[<&MSVBVM60.#595>] ; MSVBVM60.rtcMsgBox
11026E93 . 8D4D E4 lea ecx,dword ptr ss:[ebp-1C]
11026E96 . FF15 C4120011 call dword ptr ds:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
11026E9C . 8D45 84 lea eax,dword ptr ss:[ebp-7C]
11026E9F . 8D4D 94 lea ecx,dword ptr ss:[ebp-6C]
11026EA2 . 50 push eax
11026EA3 . 8D55 A4 lea edx,dword ptr ss:[ebp-5C]
11026EA6 . 51 push ecx
11026EA7 . 8D45 B4 lea eax,dword ptr ss:[ebp-4C]
11026EAA . 52 push edx
11026EAB . 50 push eax
11026EAC . 6A 04 push 4
11026EAE . FF15 44100011 call dword ptr ds:[<&MSVBVM60.__vbaFreeVarLi>; MSVBVM60.__vbaFreeVarList
11026EB4 . 8B8D 20FFFFFF mov ecx,dword ptr ss:[ebp-E0]
11026EBA . 83C4 14 add esp,14
11026EBD . 8B81 A00B0F11 mov eax,dword ptr ds:[ecx+110F0BA0]
11026EC3 . 8DB9 A00B0F11 lea edi,dword ptr ds:[ecx+110F0BA0]
11026EC9 . 85C0 test eax,eax
11026ECB . 75 0C jnz short SCGrid.11026ED9
11026ECD . 57 push edi
11026ECE . 68 181C0111 push SCGrid.11011C18
11026ED3 . FF15 E4110011 call dword ptr ds:[<&MSVBVM60.__vbaNew2>] ; MSVBVM60.__vbaNew2
11026ED9 > 8B3F mov edi,dword ptr ds:[edi]
11026EDB . 8D55 CC lea edx,dword ptr ss:[ebp-34]
11026EDE . 56 push esi
11026EDF . 52 push edx
11026EE0 . 8B1F mov ebx,dword ptr ds:[edi]
11026EE2 . FF15 D8100011 call dword ptr ds:[<&MSVBVM60.__vbaObjSetAdd>; MSVBVM60.__vbaObjSetAddref
11026EE8 . 50 push eax
11026EE9 . 57 push edi
11026EEA . FF53 10 call dword ptr ds:[ebx+10]
11026EED . 85C0 test eax,eax
11026EEF . DBE2 fclex
11026EF1 . 7D 0F jge short SCGrid.11026F02
11026EF3 . 6A 10 push 10
11026EF5 . 68 081C0111 push SCGrid.11011C08
11026EFA . 57 push edi
11026EFB . 50 push eax
11026EFC . FF15 8C100011 call dword ptr ds:[<&MSVBVM60.__vbaHresultCh>; MSVBVM60.__vbaHresultCheckObj
11026F02 > 8D4D CC lea ecx,dword ptr ss:[ebp-34]
11026F05 . FF15 C0120011 call dword ptr ds:[<&MSVBVM60.__vbaFreeObj>] ; MSVBVM60.__vbaFreeObj
11026F0B . E9 92020000 jmp SCGrid.110271A2
11026F10 > FF90 08030000 call dword ptr ds:[eax+308]
11026F16 . 8D4D CC lea ecx,dword ptr ss:[ebp-34]
11026F19 . 50 push eax
11026F1A . 51 push ecx
11026F1B . FF15 C8100011 call dword ptr ds:[<&MSVBVM60.__vbaObjSet>] ; MSVBVM60.__vbaObjSet
11026F21 . 8BD8 mov ebx,eax
11026F23 . 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
11026F26 . 50 push eax
11026F27 . 53 push ebx
11026F28 . 8B13 mov edx,dword ptr ds:[ebx]
11026F2A . FF92 A0000000 call dword ptr ds:[edx+A0]
11026F30 . 85C0 test eax,eax
11026F32 . DBE2 fclex
11026F34 . 7D 12 jge short SCGrid.11026F48
11026F36 . 68 A0000000 push 0A0
11026F3B . 68 281C0111 push SCGrid.11011C28
11026F40 . 53 push ebx
11026F41 . 50 push eax
11026F42 . FF15 8C100011 call dword ptr ds:[<&MSVBVM60.__vbaHresultCh>; MSVBVM60.__vbaHresultCheckObj
11026F48 > 8B55 E4 mov edx,dword ptr ss:[ebp-1C]
11026F4B . 8D4D E0 lea ecx,dword ptr ss:[ebp-20]
11026F4E . C745 E4 00000000 mov dword ptr ss:[ebp-1C],0
11026F55 . FFD7 call edi
11026F57 . 8B4D E8 mov ecx,dword ptr ss:[ebp-18]
11026F5A . 8D55 E0 lea edx,dword ptr ss:[ebp-20]
11026F5D . 51 push ecx
11026F5E . 52 push edx
11026F5F . E8 4C2B0000 call SCGrid.11029AB0
11026F64 . 8B3D C4120011 mov edi,dword ptr ds:[<&MSVBVM60.__vbaFreeSt>; MSVBVM60.__vbaFreeStr
11026F6A . 8D4D E0 lea ecx,dword ptr ss:[ebp-20]
11026F6D . 8BD8 mov ebx,eax
11026F6F . FFD7 call edi ; <&MSVBVM60.__vbaFreeStr>
11026F71 . 8D4D CC lea ecx,dword ptr ss:[ebp-34]
11026F74 . FF15 C0120011 call dword ptr ds:[<&MSVBVM60.__vbaFreeObj>] ; MSVBVM60.__vbaFreeObj
11026F7A . 66:85DB test bx,bx
11026F7D . 0F84 AD010000 je SCGrid.11027130
11026F83 . 8B06 mov eax,dword ptr ds:[esi]
11026F85 . 56 push esi
11026F86 . FF90 04030000 call dword ptr ds:[eax+304]
11026F8C . 8D4D CC lea ecx,dword ptr ss:[ebp-34]
11026F8F . 50 push eax
11026F90 . 51 push ecx
11026F91 . FF15 C8100011 call dword ptr ds:[<&MSVBVM60.__vbaObjSet>] ; MSVBVM60.__vbaObjSet
11026F97 . 8BD8 mov ebx,eax
11026F99 . 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
11026F9C . 50 push eax
11026F9D . 53 push ebx
11026F9E . 8B13 mov edx,dword ptr ds:[ebx]
11026FA0 . FF92 A0000000 call dword ptr ds:[edx+A0]
11026FA6 . 85C0 test eax,eax
11026FA8 . DBE2 fclex
11026FAA . 7D 12 jge short SCGrid.11026FBE
11026FAC . 68 A0000000 push 0A0
11026FB1 . 68 281C0111 push SCGrid.11011C28
11026FB6 . 53 push ebx
11026FB7 . 50 push eax
11026FB8 . FF15 8C100011 call dword ptr ds:[<&MSVBVM60.__vbaHresultCh>; MSVBVM60.__vbaHresultCheckObj
11026FBE > 8B4D E4 mov ecx,dword ptr ss:[ebp-1C]
11026FC1 . 8B1D 08100011 mov ebx,dword ptr ds:[<&MSVBVM60.#690>] ; MSVBVM60.rtcSaveSetting
11026FC7 . 51 push ecx
11026FC8 . 68 8C1C0111 push SCGrid.11011C8C ; UNICODE "name"
11026FCD . 68 741C0111 push SCGrid.11011C74 ; UNICODE "register6"
11026FD2 . 68 5C1C0111 push SCGrid.11011C5C ; UNICODE "vsc grid"
11026FD7 . FFD3 call ebx ; <&MSVBVM60.#690>
11026FD9 . 8D4D E4 lea ecx,dword ptr ss:[ebp-1C]
11026FDC . FFD7 call edi
11026FDE . 8D4D CC lea ecx,dword ptr ss:[ebp-34]
11026FE1 . FF15 C0120011 call dword ptr ds:[<&MSVBVM60.__vbaFreeObj>] ; MSVBVM60.__vbaFreeObj
11026FE7 . 8B16 mov edx,dword ptr ds:[esi]
11026FE9 . 56 push esi
11026FEA . FF92 08030000 call dword ptr ds:[edx+308]
11026FF0 . 50 push eax
11026FF1 . 8D45 CC lea eax,dword ptr ss:[ebp-34]
11026FF4 . 50 push eax
11026FF5 . FF15 C8100011 call dword ptr ds:[<&MSVBVM60.__vbaObjSet>] ; MSVBVM60.__vbaObjSet
11026FFB . 8BF8 mov edi,eax
11026FFD . 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
11027000 . 52 push edx
11027001 . 57 push edi
11027002 . 8B0F mov ecx,dword ptr ds:[edi]
11027004 . FF91 A0000000 call dword ptr ds:[ecx+A0]
1102700A . 85C0 test eax,eax
1102700C . DBE2 fclex
1102700E . 7D 12 jge short SCGrid.11027022
11027010 . 68 A0000000 push 0A0
11027015 . 68 281C0111 push SCGrid.11011C28
1102701A . 57 push edi
1102701B . 50 push eax
1102701C . FF15 8C100011 call dword ptr ds:[<&MSVBVM60.__vbaHresultCh>; MSVBVM60.__vbaHresultCheckObj
11027022 > 8B45 E4 mov eax,dword ptr ss:[ebp-1C]
11027025 . 50 push eax
11027026 . 68 9C1C0111 push SCGrid.11011C9C ; UNICODE "code"
1102702B . 68 741C0111 push SCGrid.11011C74 ; UNICODE "register6"
11027030 . 68 5C1C0111 push SCGrid.11011C5C ; UNICODE "vsc grid"
11027035 . FFD3 call ebx
11027037 . 8D4D E4 lea ecx,dword ptr ss:[ebp-1C]
1102703A . FF15 C4120011 call dword ptr ds:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
11027040 . 8B3D C0120011 mov edi,dword ptr ds:[<&MSVBVM60.__vbaFreeOb>; MSVBVM60.__vbaFreeObj
11027046 . 8D4D CC lea ecx,dword ptr ss:[ebp-34]
11027049 . FFD7 call edi ; <&MSVBVM60.__vbaFreeObj>
1102704B . 8B4D E8 mov ecx,dword ptr ss:[ebp-18]
1102704E . 51 push ecx
1102704F . 68 901D0111 push SCGrid.11011D90 ; UNICODE "number"
11027054 . 68 741C0111 push SCGrid.11011C74 ; UNICODE "register6"
11027059 . 68 5C1C0111 push SCGrid.11011C5C ; UNICODE "vsc grid"
1102705E . FFD3 call ebx
11027060 . B9 04000280 mov ecx,80020004
11027065 . B8 0A000000 mov eax,0A
1102706A . 894D 8C mov dword ptr ss:[ebp-74],ecx
1102706D . 894D 9C mov dword ptr ss:[ebp-64],ecx
11027070 . 894D AC mov dword ptr ss:[ebp-54],ecx
11027073 . 8D95 74FFFFFF lea edx,dword ptr ss:[ebp-8C]
11027079 . 8D4D B4 lea ecx,dword ptr ss:[ebp-4C]
1102707C . 8945 84 mov dword ptr ss:[ebp-7C],eax
1102707F . 8945 94 mov dword ptr ss:[ebp-6C],eax
11027082 . 8945 A4 mov dword ptr ss:[ebp-5C],eax
11027085 . C785 7CFFFFFF A41>mov dword ptr ss:[ebp-84],SCGrid.11011DA4 ; UNICODE "Thank you for using SCGrid, you've successfully registered"
1102708F . C785 74FFFFFF 080>mov dword ptr ss:[ebp-8C],8
11027099 . FF15 54120011 call dword ptr ds:[<&MSVBVM60.__vbaVarDup>] ; MSVBVM60.__vbaVarDup
1102709F . 8D55 84 lea edx,dword ptr ss:[ebp-7C]
110270A2 . 8D45 94 lea eax,dword ptr ss:[ebp-6C]
110270A5 . 52 push edx
110270A6 . 8D4D A4 lea ecx,dword ptr ss:[ebp-5C]
110270A9 . 50 push eax
110270AA . 51 push ecx
110270AB . 8D55 B4 lea edx,dword ptr ss:[ebp-4C]
110270AE . 6A 00 push 0
110270B0 . 52 push edx
110270B1 . FF15 CC100011 call dword ptr ds:[<&MSVBVM60.#595>] ; MSVBVM60.rtcMsgBox
110270B7 . 8D45 84 lea eax,dword ptr ss:[ebp-7C]
110270BA . 8D4D 94 lea ecx,dword ptr ss:[ebp-6C]
110270BD . 50 push eax
110270BE . 8D55 A4 lea edx,dword ptr ss:[ebp-5C]
110270C1 . 51 push ecx
110270C2 . 8D45 B4 lea eax,dword ptr ss:[ebp-4C]
110270C5 . 52 push edx
110270C6 . 50 push eax
110270C7 . 6A 04 push 4
110270C9 . FF15 44100011 call dword ptr ds:[<&MSVBVM60.__vbaFreeVarLi>; MSVBVM60.__vbaFreeVarList
110270CF . 8B8D 20FFFFFF mov ecx,dword ptr ss:[ebp-E0]
110270D5 . 83C4 14 add esp,14
110270D8 . 8B81 A00B0F11 mov eax,dword ptr ds:[ecx+110F0BA0]
110270DE . 8D99 A00B0F11 lea ebx,dword ptr ds:[ecx+110F0BA0]
110270E4 . 85C0 test eax,eax
110270E6 . 75 0C jnz short SCGrid.110270F4
110270E8 . 53 push ebx
110270E9 . 68 181C0111 push SCGrid.11011C18
110270EE . FF15 E4110011 call dword ptr ds:[<&MSVBVM60.__vbaNew2>] ; MSVBVM60.__vbaNew2
110270F4 > 8B1B mov ebx,dword ptr ds:[ebx]
110270F6 . 8D45 CC lea eax,dword ptr ss:[ebp-34]
110270F9 . 56 push esi
110270FA . 50 push eax
110270FB . 8B13 mov edx,dword ptr ds:[ebx]
110270FD . 8995 18FFFFFF mov dword ptr ss:[ebp-E8],edx
11027103 . FF15 D8100011 call dword ptr ds:[<&MSVBVM60.__vbaObjSetAdd>; MSVBVM60.__vbaObjSetAddref
11027109 . 8B8D 18FFFFFF mov ecx,dword ptr ss:[ebp-E8]
1102710F . 50 push eax
11027110 . 53 push ebx
11027111 . FF51 10 call dword ptr ds:[ecx+10]
11027114 . 85C0 test eax,eax
11027116 . DBE2 fclex
11027118 . 7D 0F jge short SCGrid.11027129
1102711A . 6A 10 push 10
1102711C . 68 081C0111 push SCGrid.11011C08
11027121 . 53 push ebx
11027122 . 50 push eax
11027123 . FF15 8C100011 call dword ptr ds:[<&MSVBVM60.__vbaHresultCh>; MSVBVM60.__vbaHresultCheckObj
11027129 > 8D4D CC lea ecx,dword ptr ss:[ebp-34]
1102712C . FFD7 call edi
1102712E . EB 72 jmp short SCGrid.110271A2
11027130 > B9 04000280 mov ecx,80020004
11027135 . B8 0A000000 mov eax,0A
1102713A . 894D 8C mov dword ptr ss:[ebp-74],ecx
1102713D . 894D 9C mov dword ptr ss:[ebp-64],ecx
[培训]《安卓高级研修班(网课)》月薪三万计划,掌握调试、分析还原ollvm、vmp的方法,定制art虚拟机自动化脱壳的方法
赞赏
|
|
---|---|
|
11026FF5 . FF15 C8100011 call dword ptr ds:[<&MSVBVM60.__vbaObjSet>] ; MSVBVM60.__vbaObjSet
这里断点,读eax?? 写注册机。看看。我也是新手。你试看看。 |
看原图