软件被我修改过了，不过还没完全破解
会出现 提示：你所使用的软件已过期，请更新最新版本
OD下的
0041AD9F . 50 push eax
0041ADA0 . 52 push edx
0041ADA1 . FF15 A4104000 call dword ptr [<&MSVBVM60.__vbaObjSe>; MSVBVM60.__vbaObjSet
0041ADA7 . 8B4D E4 mov ecx, dword ptr [ebp-1C]
0041ADAA . 8BF0 mov esi, eax
0041ADAC . 85C9 test ecx, ecx
0041ADAE . 74 29 je short 0041ADD9
0041ADB0 . 66:8339 01 cmp word ptr [ecx], 1
0041ADB4 . 75 23 jnz short 0041ADD9
0041ADB6 . 8B51 14 mov edx, dword ptr [ecx+14]
0041ADB9 . 8B41 10 mov eax, dword ptr [ecx+10]
0041ADBC . BB 02000000 mov ebx, 2
0041ADC1 . 2BDA sub ebx, edx
0041ADC3 . 3BD8 cmp ebx, eax
0041ADC5 . 72 09 jb short 0041ADD0
0041ADC7 . FF15 0C114000 call dword ptr [<&MSVBVM60.__vbaGener>; MSVBVM60.__vbaGenerateBoundsError
0041ADCD . 8B4D E4 mov ecx, dword ptr [ebp-1C]
0041ADD0 > 8D049D 000000>lea eax, dword ptr [ebx*4]
0041ADD7 . EB 05 jmp short 0041ADDE
0041ADD9 > FFD3 call ebx
0041ADDB . 8B4D E4 mov ecx, dword ptr [ebp-1C]
0041ADDE > 8B49 0C mov ecx, dword ptr [ecx+C]
0041ADE1 . 8B1E mov ebx, dword ptr [esi]
0041ADE3 . 8B1401 mov edx, dword ptr [ecx+eax]
0041ADE6 . 52 push edx
0041ADE7 . FF15 DC124000 call dword ptr [<&MSVBVM60.#581>] ; MSVBVM60.rtcR8ValFromBstr
0041ADED . 83EC 08 sub esp, 8
0041ADF0 . DD1C24 fstp qword ptr [esp]
0041ADF3 . FF15 4C114000 call dword ptr [<&MSVBVM60.__vbaStrR8>; MSVBVM60.__vbaStrR8
0041ADF9 . 8BD0 mov edx, eax
0041ADFB . 8D4D B4 lea ecx, dword ptr [ebp-4C]
0041ADFE . FFD7 call edi
0041AE00 . 50 push eax
0041AE01 . 56 push esi
0041AE02 . FF53 54 call dword ptr [ebx+54]
0041AE05 . 85C0 test eax, eax
0041AE07 . DBE2 fclex
0041AE09 . 7D 0F jge short 0041AE1A
0041AE0B . 6A 54 push 54
0041AE0D . 68 C08D4000 push 00408DC0
0041AE12 . 56 push esi
0041AE13 . 50 push eax
0041AE14 . FF15 7C104000 call dword ptr [<&MSVBVM60.__vbaHresu>; MSVBVM60.__vbaHresultCheckObj
0041AE1A > 8D4D B4 lea ecx, dword ptr [ebp-4C]
0041AE1D . FF15 D8124000 call dword ptr [<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStr
0041AE23 > 8D4D 84 lea ecx, dword ptr [ebp-7C]
0041AE26 . FF15 D4124000 call dword ptr [<&MSVBVM60.__vbaFreeO>; MSVBVM60.__vbaFreeObj
0041AE2C . 8B35 5C124000 mov esi, dword ptr [<&MSVBVM60.__vba>; MSVBVM60.__vbaVarDup
0041AE32 . B9 04000280 mov ecx, 80020004
0041AE37 . 898D 4CFFFFFF mov dword ptr [ebp-B4], ecx
0041AE3D . B8 0A000000 mov eax, 0A
0041AE42 . 898D 5CFFFFFF mov dword ptr [ebp-A4], ecx
0041AE48 . BF 08000000 mov edi, 8
0041AE4D . 8D95 F4FEFFFF lea edx, dword ptr [ebp-10C]
0041AE53 . 8D8D 64FFFFFF lea ecx, dword ptr [ebp-9C]
0041AE59 . 8985 44FFFFFF mov dword ptr [ebp-BC], eax
0041AE5F . 8985 54FFFFFF mov dword ptr [ebp-AC], eax
0041AE65 . C785 FCFEFFFF>mov dword ptr [ebp-104], 0040B124 ; 提示
0041AE6F . 89BD F4FEFFFF mov dword ptr [ebp-10C], edi
0041AE75 . FFD6 call esi ; <&MSVBVM60.__vbaVarDup>
0041AE77 . 8D95 04FFFFFF lea edx, dword ptr [ebp-FC]
0041AE7D . 8D8D 74FFFFFF lea ecx, dword ptr [ebp-8C]
0041AE83 . C785 0CFFFFFF>mov dword ptr [ebp-F4] ; 你所使用的软件已过期，请更新最新版本
0041AE8D . 89BD 04FFFFFF mov dword ptr [ebp-FC], edi
0041AE93 . FFD6 call esi
0041AE95 . E9 EF0D0000 jmp 0041BC89
0041AE9A > E8 E1C4FFFF call 00417380
0041AE9F . 66:3D FFFF cmp ax, 0FFFF
0041AEA3 . 0F85 2B0E0000 jnz 0041BCD4
0041AEA9 . 66:391D B8E04>cmp word ptr [41E0B8], bx
0041AEB0 . 0F8E 1E0E0000 jle 0041BCD4
0041AEB6 . 8B15 B8E04100 mov edx, dword ptr [41E0B8]
0041AEBC . 8D85 74FFFFFF lea eax, dword ptr [ebp-8C]
找不到对应的跳转。貌似是标志位比较的
我对标志位不熟，高手会的指点一下。弄点破文也可以
[培训]科锐逆向工程师培训第53期2025年7月8日开班！
