0055BB86 |. FF15 40124000 call near dword ptr ds:[<&MSVBVM60.__>; MSVBVM60.__vbaVarCopy
0055BB8C |. 8D8D 6CFEFFFF lea ecx, [local.101]
0055BB92 |. 8D95 18FFFFFF lea edx, [local.58]
0055BB98 |. 89BD 20FFFFFF mov [local.56], edi
0055BB9E |. 8B3D 0C114000 mov edi, dword ptr ds:[<&MSVBVM60.__>; MSVBVM60.__vbaVarTstEq
0055BBA4 |. BB 02800000 mov ebx, 8002
0055BBA9 |. 51 push ecx
0055BBAA |. 52 push edx
0055BBAB |. 899D 18FFFFFF mov [local.58], ebx
0055BBB1 |. FFD7 call near edi ; MSVBVM60.__vbaVarTstEq; <&MSVBVM60.__vbaVarTstEq>
0055BBB3 |. 66:85C0 test ax, ax
0055BBB6 |. 0F85 6F070000 jnz rgb.0055C32B
0055BBBC |. 8D85 6CFEFFFF lea eax, [local.101]
0055BBC2 |. 8D8D 08FFFFFF lea ecx, [local.62]
0055BBC8 |. 50 push eax
0055BBC9 |. 51 push ecx
0055BBCA |. C785 10FFFFFF>mov [local.60], 1
0055BBD4 |. 899D 08FFFFFF mov [local.62], ebx
0055BBDA |. FFD7 call near edi
0055BBDC |. 66:85C0 test ax, ax
0055BBDF |. 0F85 46070000 jnz rgb.0055C32B
0055BBE5 |. 8D95 6CFEFFFF lea edx, [local.101]
0055BBEB |. 8D85 F8FEFFFF lea eax, [local.66]
0055BBF1 |. 52 push edx
0055BBF2 |. 50 push eax
0055BBF3 |. C785 00FFFFFF>mov [local.64], 2
0055BBFD |. 899D F8FEFFFF mov [local.66], ebx
0055BC03 |. FFD7 call near edi
0055BC05 |. 66:85C0 test ax, ax
0055BC08 |. 0F85 1D070000 jnz rgb.0055C32B
0055BC0E |. 8D8D 6CFEFFFF lea ecx, [local.101]
0055BC14 |. 8D95 18FFFFFF lea edx, [local.58]
0055BC1A |. 51 push ecx
0055BC1B |. 52 push edx
0055BC1C |. C785 20FFFFFF>mov [local.56], 3
0055BC26 |. 899D 18FFFFFF mov [local.58], ebx
0055BC2C |. FFD7 call near edi
0055BC2E |. 66:85C0 test ax, ax
0055BC31 |. 0F85 6A020000 jnz rgb.0055BEA1
0055BC37 |. 8D85 6CFEFFFF lea eax, [local.101]
0055BC3D |. 8D8D 08FFFFFF lea ecx, [local.62]
0055BC43 |. 50 push eax
0055BC44 |. 51 push ecx
0055BC45 |. C785 10FFFFFF>mov [local.60], 4
0055BC4F |. 899D 08FFFFFF mov [local.62], ebx
0055BC55 |. FFD7 call near edi
0055BC57 |. 66:85C0 test ax, ax
0055BC5A |. 0F85 41020000 jnz rgb.0055BEA1
0055BC60 |. 8D95 6CFEFFFF lea edx, [local.101]
0055BC66 |. 8D85 F8FEFFFF lea eax, [local.66]
0055BC6C |. 52 push edx
0055BC6D |. 50 push eax
0055BC6E |. C785 00FFFFFF>mov [local.64], 5
0055BC78 |. 899D F8FEFFFF mov [local.66], ebx
0055BC7E |. FFD7 call near edi
0055BC80 |. 66:85C0 test ax, ax
0055BC83 |. 0F85 18020000 jnz rgb.0055BEA1 ; j
0055BC89 |. 8D8D 6CFEFFFF lea ecx, [local.101]
0055BC8F |. 8D95 18FFFFFF lea edx, [local.58]
0055BC95 |. 51 push ecx
0055BC96 |. 52 push edx
0055BC97 |. C785 20FFFFFF>mov [local.56], 6
0055BCA1 |. 899D 18FFFFFF mov [local.58], ebx
0055BCA7 |. FFD7 call near edi
0055BCA9 |. 66:85C0 test ax, ax
0055BCAC |. 0F84 E20C0000 je rgb.0055C994 ; n
0055BCB2 |. 66:833D AE405>cmp word ptr ds:[5740AE], 1
0055BCBA |. 75 43 jnz short rgb.0055BCFF
[课程]Linux pwn 探索篇！
