能力值:
(RANK:410 )
|
-
-
4 楼
只要在注册表中新建如下几个键值就能注册成功,姓名和组织可以填任意值,注册码填EndsMSVBVM60即可。
REGEDIT4
[HKEY_LOCAL_MACHINE\Software\poje]
"注册码"="EndsMSVBVM60"
"姓名"="zhanshen[DFCG]"
"组织"="www.*********.com"
00403A10 $ 55 PUSH EBP
00403A11 . 8BEC MOV EBP, ESP
00403A13 . 83EC 0C SUB ESP,0C
00403A16 . 68 A6114000 PUSH <JMP.&MSVBVM60.__vbaExceptHandler> ; SE handler installation
00403A1B . 64:A1 0000000> MOV EAX, DWORD PTR FS:[0]
00403A21 . 50 PUSH EAX
00403A22 . 64:8925 00000> MOV DWORD PTR FS:[0], ESP
00403A29 . 81EC D4000000 SUB ESP,0D4
00403A2F . 53 PUSH EBX
00403A30 . 56 PUSH ESI
00403A31 . 57 PUSH EDI
00403A32 . 8965 F4 MOV DWORD PTR SS:[ EBP-C], ESP
00403A35 . C745 F8 50114> MOV DWORD PTR SS:[ EBP-8],CRACKME0.00401150
00403A3C . 8B7D 0C MOV EDI, DWORD PTR SS:[ EBP+C]
00403A3F . 8B1D CC104000 MOV EBX, DWORD PTR DS:[<&MSVBVM60.__vbaStrToAnsi>] ; MSVBVM60.__vbaStrToAnsi
00403A45 . 8D45 E8 LEA EAX, DWORD PTR SS:[ EBP-18]
00403A48 . 33F6 XOR ESI, ESI
00403A4A . 8B0F MOV ECX, DWORD PTR DS:[ EDI]
00403A4C . 50 PUSH EAX
00403A4D . 68 3F000200 PUSH 2003F
00403A52 . 56 PUSH ESI
00403A53 . 8D55 C4 LEA EDX, DWORD PTR SS:[ EBP-3C]
00403A56 . 51 PUSH ECX
00403A57 . 52 PUSH EDX
00403A58 . 8975 E8 MOV DWORD PTR SS:[ EBP-18], ESI
00403A5B . 8975 D8 MOV DWORD PTR SS:[ EBP-28], ESI
00403A5E . 8975 D4 MOV DWORD PTR SS:[ EBP-2C], ESI
00403A61 . 8975 D0 MOV DWORD PTR SS:[ EBP-30], ESI
00403A64 . 8975 CC MOV DWORD PTR SS:[ EBP-34], ESI
00403A67 . 8975 C8 MOV DWORD PTR SS:[ EBP-38], ESI
00403A6A . 8975 C4 MOV DWORD PTR SS:[ EBP-3C], ESI
00403A6D . 8975 C0 MOV DWORD PTR SS:[ EBP-40], ESI
00403A70 . 8975 B0 MOV DWORD PTR SS:[ EBP-50], ESI
00403A73 . 8975 A0 MOV DWORD PTR SS:[ EBP-60], ESI
00403A76 . 8975 90 MOV DWORD PTR SS:[ EBP-70], ESI
00403A79 . 8975 80 MOV DWORD PTR SS:[ EBP-80], ESI
00403A7C . 89B5 70FFFFFF MOV DWORD PTR SS:[ EBP-90], ESI
00403A82 . 89B5 60FFFFFF MOV DWORD PTR SS:[ EBP-A0], ESI
00403A88 . 89B5 50FFFFFF MOV DWORD PTR SS:[ EBP-B0], ESI
00403A8E . 89B5 30FFFFFF MOV DWORD PTR SS:[ EBP-D0], ESI
00403A94 . FFD3 CALL EBX ; <&MSVBVM60.__vbaStrToAnsi>
00403A96 . 50 PUSH EAX
00403A97 . 8B45 08 MOV EAX, DWORD PTR SS:[ EBP+8]
00403A9A . 8B08 MOV ECX, DWORD PTR DS:[ EAX]
00403A9C . 51 PUSH ECX
00403A9D . E8 7AEEFFFF CALL CRACKME0.0040291C
00403AA2 . 8985 2CFFFFFF MOV DWORD PTR SS:[ EBP-D4], EAX
00403AA8 . FF15 30104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaSetSystemError>] ; MSVBVM60.__vbaSetSystemError
00403AAE . 8B55 C4 MOV EDX, DWORD PTR SS:[ EBP-3C]
00403AB1 . 52 PUSH EDX
00403AB2 . 57 PUSH EDI
00403AB3 . FF15 78104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrToUnicode>] ; MSVBVM60.__vbaStrToUnicode
00403AB9 . 8D4D C4 LEA ECX, DWORD PTR SS:[ EBP-3C]
00403ABC . FF15 F0104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00403AC2 . 39B5 2CFFFFFF CMP DWORD PTR SS:[ EBP-D4], ESI
00403AC8 . 0F85 9B000000 JNZ CRACKME0.00403B69
00403ACE . 8D45 B0 LEA EAX, DWORD PTR SS:[ EBP-50]
00403AD1 . 8975 B8 MOV DWORD PTR SS:[ EBP-48], ESI
00403AD4 . 50 PUSH EAX
00403AD5 . 68 00040000 PUSH 400
00403ADA . C745 B0 02000> MOV DWORD PTR SS:[ EBP-50],2
00403AE1 . FF15 7C104000 CALL DWORD PTR DS:[<&MSVBVM60.#606>] ; MSVBVM60.rtcStringBstr
00403AE7 . 8B3D D8104000 MOV EDI, DWORD PTR DS:[<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
00403AED . 8BD0 MOV EDX, EAX
00403AEF . 8D4D CC LEA ECX, DWORD PTR SS:[ EBP-34]
00403AF2 . FFD7 CALL EDI ; <&MSVBVM60.__vbaStrMove>
00403AF4 . 8D4D B0 LEA ECX, DWORD PTR SS:[ EBP-50]
00403AF7 . FF15 0C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeVar>] ; MSVBVM60.__vbaFreeVar
00403AFD . 8B55 CC MOV EDX, DWORD PTR SS:[ EBP-34]
00403B00 . 8D4D C8 LEA ECX, DWORD PTR SS:[ EBP-38]
00403B03 . 51 PUSH ECX
00403B04 . 8D45 C0 LEA EAX, DWORD PTR SS:[ EBP-40]
00403B07 . 52 PUSH EDX
00403B08 . 50 PUSH EAX
00403B09 . C745 C8 00040> MOV DWORD PTR SS:[ EBP-38],400
00403B10 . FFD3 CALL EBX
00403B12 . 8B55 10 MOV EDX, DWORD PTR SS:[ EBP+10]
00403B15 . 8D4D D8 LEA ECX, DWORD PTR SS:[ EBP-28]
00403B18 . 50 PUSH EAX
00403B19 . 51 PUSH ECX
00403B1A . 8B02 MOV EAX, DWORD PTR DS:[ EDX]
00403B1C . 56 PUSH ESI
00403B1D . 8D4D C4 LEA ECX, DWORD PTR SS:[ EBP-3C]
00403B20 . 50 PUSH EAX
00403B21 . 51 PUSH ECX
00403B22 . FFD3 CALL EBX
00403B24 . 8B55 E8 MOV EDX, DWORD PTR SS:[ EBP-18]
00403B27 . 50 PUSH EAX
00403B28 . 52 PUSH EDX
00403B29 . E8 3AEEFFFF CALL CRACKME0.00402968
00403B2E . 8BD8 MOV EBX, EAX
00403B30 . FF15 30104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaSetSystemError>] ; MSVBVM60.__vbaSetSystemError
00403B36 . 8B45 C4 MOV EAX, DWORD PTR SS:[ EBP-3C]
00403B39 . 8B4D 10 MOV ECX, DWORD PTR SS:[ EBP+10]
00403B3C . 50 PUSH EAX
00403B3D . 51 PUSH ECX
00403B3E . FF15 78104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrToUnicode>] ; MSVBVM60.__vbaStrToUnicode
00403B44 . 8B55 C0 MOV EDX, DWORD PTR SS:[ EBP-40]
00403B47 . 8D45 CC LEA EAX, DWORD PTR SS:[ EBP-34]
00403B4A . 52 PUSH EDX
00403B4B . 50 PUSH EAX
00403B4C . FF15 78104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrToUnicode>] ; MSVBVM60.__vbaStrToUnicode
00403B52 . 8D4D C0 LEA ECX, DWORD PTR SS:[ EBP-40]
00403B55 . 8D55 C4 LEA EDX, DWORD PTR SS:[ EBP-3C]
00403B58 . 51 PUSH ECX
00403B59 . 52 PUSH EDX
00403B5A . 6A 02 PUSH 2
00403B5C . FF15 B4104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
00403B62 . 83C4 0C ADD ESP,0C
00403B65 . 3BDE CMP EBX, ESI
00403B67 . 74 14 JE SHORT CRACKME0.00403B7D
00403B69 > 33D2 XOR EDX, EDX
00403B6B . 8D4D D4 LEA ECX, DWORD PTR SS:[ EBP-2C]
00403B6E . FF15 B0104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
00403B74 . 8B45 E8 MOV EAX, DWORD PTR SS:[ EBP-18]
00403B77 . 50 PUSH EAX
00403B78 . E9 02020000 JMP CRACKME0.00403D7F
00403B7D > 8B4D CC MOV ECX, DWORD PTR SS:[ EBP-34]
00403B80 . 8D55 B0 LEA EDX, DWORD PTR SS:[ EBP-50]
00403B83 . 56 PUSH ESI
00403B84 . 52 PUSH EDX
00403B85 . 898D 68FFFFFF MOV DWORD PTR SS:[ EBP-98], ECX
00403B8B . C785 60FFFFFF> MOV DWORD PTR SS:[ EBP-A0],8
00403B95 . FF15 88104000 CALL DWORD PTR DS:[<&MSVBVM60.#608>] ; MSVBVM60.rtcVarBstrFromAnsi
00403B9B . 8D85 60FFFFFF LEA EAX, DWORD PTR SS:[ EBP-A0]
00403BA1 . 6A 01 PUSH 1
00403BA3 . 8D4D B0 LEA ECX, DWORD PTR SS:[ EBP-50]
00403BA6 . 50 PUSH EAX
00403BA7 . 51 PUSH ECX
00403BA8 . 8D55 A0 LEA EDX, DWORD PTR SS:[ EBP-60]
00403BAB . 56 PUSH ESI
00403BAC . 52 PUSH EDX
00403BAD . C785 58FFFFFF> MOV DWORD PTR SS:[ EBP-A8],1
00403BB7 . C785 50FFFFFF> MOV DWORD PTR SS:[ EBP-B0],2
00403BC1 . FF15 90104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaInStrVar>] ; MSVBVM60.__vbaInStrVar
00403BC7 . 50 PUSH EAX
00403BC8 . 8D85 50FFFFFF LEA EAX, DWORD PTR SS:[ EBP-B0]
00403BCE . 8D4D 90 LEA ECX, DWORD PTR SS:[ EBP-70]
00403BD1 . 50 PUSH EAX
00403BD2 . 51 PUSH ECX
00403BD3 . FF15 00104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarSub>] ; MSVBVM60.__vbaVarSub
00403BD9 . 50 PUSH EAX
00403BDA . FF15 C4104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaI4Var>] ; MSVBVM60.__vbaI4Var
00403BE0 . 8B55 CC MOV EDX, DWORD PTR SS:[ EBP-34]
00403BE3 . 50 PUSH EAX
00403BE4 . 52 PUSH EDX
00403BE5 . FF15 D0104000 CALL DWORD PTR DS:[<&MSVBVM60.#616>] ; MSVBVM60.rtcLeftCharBstr
00403BEB . 8BD0 MOV EDX, EAX
00403BED . 8D4D CC LEA ECX, DWORD PTR SS:[ EBP-34]
00403BF0 . FFD7 CALL EDI
00403BF2 . 8B1D 18104000 MOV EBX, DWORD PTR DS:[<&MSVBVM60.__vbaFreeVarList>] ; MSVBVM60.__vbaFreeVarList
00403BF8 . 8D45 A0 LEA EAX, DWORD PTR SS:[ EBP-60]
00403BFB . 8D4D B0 LEA ECX, DWORD PTR SS:[ EBP-50]
00403BFE . 50 PUSH EAX
00403BFF . 51 PUSH ECX
00403C00 . 6A 02 PUSH 2
00403C02 . FFD3 CALL EBX ; <&MSVBVM60.__vbaFreeVarList>
00403C04 . 8B45 D8 MOV EAX, DWORD PTR SS:[ EBP-28]
00403C07 . 83C4 0C ADD ESP,0C
00403C0A . 3BC6 CMP EAX, ESI
00403C0C . 0F8E 5D010000 JLE CRACKME0.00403D6F
00403C12 . 83F8 02 CMP EAX,2
00403C15 . 0F8E 48010000 JLE CRACKME0.00403D63
00403C1B . 83F8 04 CMP EAX,4
00403C1E . 0F85 4B010000 JNZ CRACKME0.00403D6F
00403C24 . 8B55 CC MOV EDX, DWORD PTR SS:[ EBP-34]
00403C27 . 52 PUSH EDX
00403C28 . FF15 10104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaLenBstr>] ; MSVBVM60.__vbaLenBstr
00403C2E > 8BF0 MOV ESI, EAX
00403C30 . B8 01000000 MOV EAX,1
00403C35 . 3BF0 CMP ESI, EAX
00403C37 . 0F8C D5000000 JL CRACKME0.00403D12
00403C3D . 8B45 D0 MOV EAX, DWORD PTR SS:[ EBP-30]
00403C40 . 8D4D CC LEA ECX, DWORD PTR SS:[ EBP-34]
00403C43 . 8D55 B0 LEA EDX, DWORD PTR SS:[ EBP-50]
00403C46 . 8985 38FFFFFF MOV DWORD PTR SS:[ EBP-C8], EAX
00403C4C . 898D 68FFFFFF MOV DWORD PTR SS:[ EBP-98], ECX
00403C52 . 52 PUSH EDX
00403C53 . 8D85 60FFFFFF LEA EAX, DWORD PTR SS:[ EBP-A0]
00403C59 . 56 PUSH ESI
00403C5A . 8D4D A0 LEA ECX, DWORD PTR SS:[ EBP-60]
00403C5D . 50 PUSH EAX
00403C5E . 51 PUSH ECX
00403C5F . C785 30FFFFFF> MOV DWORD PTR SS:[ EBP-D0],8
00403C69 . C745 B8 01000> MOV DWORD PTR SS:[ EBP-48],1
00403C70 . C745 B0 02000> MOV DWORD PTR SS:[ EBP-50],2
00403C77 . C785 60FFFFFF> MOV DWORD PTR SS:[ EBP-A0],4008
00403C81 . FF15 50104000 CALL DWORD PTR DS:[<&MSVBVM60.#632>] ; MSVBVM60.rtcMidCharVar
00403C87 . 8D55 A0 LEA EDX, DWORD PTR SS:[ EBP-60]
00403C8A . 8D45 C4 LEA EAX, DWORD PTR SS:[ EBP-3C]
00403C8D . 52 PUSH EDX
00403C8E . 50 PUSH EAX
00403C8F . FF15 94104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrVarVal>] ; MSVBVM60.__vbaStrVarVal
00403C95 . 50 PUSH EAX
00403C96 . FF15 24104000 CALL DWORD PTR DS:[<&MSVBVM60.#516>] ; MSVBVM60.rtcAnsiValueBstr
00403C9C . 8D4D 90 LEA ECX, DWORD PTR SS:[ EBP-70]
00403C9F . 8D55 80 LEA EDX, DWORD PTR SS:[ EBP-80]
00403CA2 . 51 PUSH ECX
00403CA3 . 52 PUSH EDX
00403CA4 . 66:8945 98 MOV WORD PTR SS:[ EBP-68], AX
00403CA8 . C745 90 02000> MOV DWORD PTR SS:[ EBP-70],2
00403CAF . FF15 AC104000 CALL DWORD PTR DS:[<&MSVBVM60.#573>] ; MSVBVM60.rtcHexVarFromVar
00403CB5 . 8D85 30FFFFFF LEA EAX, DWORD PTR SS:[ EBP-D0]
00403CBB . 8D4D 80 LEA ECX, DWORD PTR SS:[ EBP-80]
00403CBE . 50 PUSH EAX
00403CBF . 8D95 70FFFFFF LEA EDX, DWORD PTR SS:[ EBP-90]
00403CC5 . 51 PUSH ECX
00403CC6 . 52 PUSH EDX
00403CC7 . FF15 C8104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaVarAdd>] ; MSVBVM60.__vbaVarAdd
00403CCD . 50 PUSH EAX
00403CCE . FF15 14104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrVarMove>] ; MSVBVM60.__vbaStrVarMove
00403CD4 . 8BD0 MOV EDX, EAX
00403CD6 . 8D4D D0 LEA ECX, DWORD PTR SS:[ EBP-30]
00403CD9 . FFD7 CALL EDI
00403CDB . 8D4D C4 LEA ECX, DWORD PTR SS:[ EBP-3C]
00403CDE . FF15 F0104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00403CE4 . 8D85 70FFFFFF LEA EAX, DWORD PTR SS:[ EBP-90]
00403CEA . 8D4D 80 LEA ECX, DWORD PTR SS:[ EBP-80]
00403CED . 50 PUSH EAX
00403CEE . 8D55 90 LEA EDX, DWORD PTR SS:[ EBP-70]
00403CF1 . 51 PUSH ECX
00403CF2 . 8D45 A0 LEA EAX, DWORD PTR SS:[ EBP-60]
00403CF5 . 52 PUSH EDX
00403CF6 . 8D4D B0 LEA ECX, DWORD PTR SS:[ EBP-50]
00403CF9 . 50 PUSH EAX
00403CFA . 51 PUSH ECX
00403CFB . 6A 05 PUSH 5
00403CFD . FFD3 CALL EBX
00403CFF . 83C8 FF OR EAX,FFFFFFFF
00403D02 . 83C4 18 ADD ESP,18
00403D05 . 03C6 ADD EAX, ESI
00403D07 . 0F80 ED000000 JO CRACKME0.00403DFA
00403D0D .^ E9 1CFFFFFF JMP CRACKME0.00403C2E
00403D12 > 8B55 D0 MOV EDX, DWORD PTR SS:[ EBP-30]
00403D15 . 68 A02B4000 PUSH CRACKME0.00402BA0 ; UNICODE "&h"
00403D1A . 52 PUSH EDX
00403D1B . C745 A8 04000> MOV DWORD PTR SS:[ EBP-58],80020004
00403D22 . C745 A0 0A000> MOV DWORD PTR SS:[ EBP-60],0A
00403D29 . FF15 2C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrCat>] ; MSVBVM60.__vbaStrCat
00403D2F . 8945 B8 MOV DWORD PTR SS:[ EBP-48], EAX
00403D32 . 6A 01 PUSH 1
00403D34 . 8D45 A0 LEA EAX, DWORD PTR SS:[ EBP-60]
00403D37 . 6A 01 PUSH 1
00403D39 . 8D4D B0 LEA ECX, DWORD PTR SS:[ EBP-50]
00403D3C . 50 PUSH EAX
00403D3D . 51 PUSH ECX
00403D3E . C745 B0 08000> MOV DWORD PTR SS:[ EBP-50],8
00403D45 . FF15 DC104000 CALL DWORD PTR DS:[<&MSVBVM60.#650>] ; MSVBVM60.rtcBstrFromFormatVar
00403D4B . 8BD0 MOV EDX, EAX
00403D4D . 8D4D D0 LEA ECX, DWORD PTR SS:[ EBP-30]
00403D50 . FFD7 CALL EDI
00403D52 . 8D55 A0 LEA EDX, DWORD PTR SS:[ EBP-60]
00403D55 . 8D45 B0 LEA EAX, DWORD PTR SS:[ EBP-50]
00403D58 . 52 PUSH EDX
00403D59 . 50 PUSH EAX
00403D5A . 6A 02 PUSH 2
00403D5C . FFD3 CALL EBX
00403D5E . 83C4 0C ADD ESP,0C
00403D61 . EB 0C JMP SHORT CRACKME0.00403D6F
00403D63 > 8B55 CC MOV EDX, DWORD PTR SS:[ EBP-34]
00403D66 . 8D4D D0 LEA ECX, DWORD PTR SS:[ EBP-30]
00403D69 . FF15 B0104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
00403D6F > 8B55 D0 MOV EDX, DWORD PTR SS:[ EBP-30]
00403D72 . 8D4D D4 LEA ECX, DWORD PTR SS:[ EBP-2C]
00403D75 . FF15 B0104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
00403D7B . 8B4D E8 MOV ECX, DWORD PTR SS:[ EBP-18]
00403D7E . 51 PUSH ECX
00403D7F > E8 E8EAFFFF CALL CRACKME0.0040286C
00403D84 . FF15 30104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaSetSystemError>] ; MSVBVM60.__vbaSetSystemError
00403D8A . 68 E43D4000 PUSH CRACKME0.00403DE4
00403D8F . EB 42 JMP SHORT CRACKME0.00403DD3
00403D91 . F645 FC 04 TEST BYTE PTR SS:[ EBP-4],4
00403D95 . 74 09 JE SHORT CRACKME0.00403DA0
00403D97 . 8D4D D4 LEA ECX, DWORD PTR SS:[ EBP-2C]
00403D9A . FF15 F0104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00403DA0 > 8D55 C0 LEA EDX, DWORD PTR SS:[ EBP-40]
00403DA3 . 8D45 C4 LEA EAX, DWORD PTR SS:[ EBP-3C]
00403DA6 . 52 PUSH EDX
00403DA7 . 50 PUSH EAX
00403DA8 . 6A 02 PUSH 2
00403DAA . FF15 B4104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
00403DB0 . 8D8D 70FFFFFF LEA ECX, DWORD PTR SS:[ EBP-90]
00403DB6 . 8D55 80 LEA EDX, DWORD PTR SS:[ EBP-80]
00403DB9 . 51 PUSH ECX
00403DBA . 8D45 90 LEA EAX, DWORD PTR SS:[ EBP-70]
00403DBD . 52 PUSH EDX
00403DBE . 8D4D A0 LEA ECX, DWORD PTR SS:[ EBP-60]
00403DC1 . 50 PUSH EAX
00403DC2 . 8D55 B0 LEA EDX, DWORD PTR SS:[ EBP-50]
00403DC5 . 51 PUSH ECX
00403DC6 . 52 PUSH EDX
00403DC7 . 6A 05 PUSH 5
00403DC9 . FF15 18104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeVarList>] ; MSVBVM60.__vbaFreeVarList
00403DCF . 83C4 24 ADD ESP,24
00403DD2 . C3 RETN
00403DD3 > 8B35 F0104000 MOV ESI, DWORD PTR DS:[<&MSVBVM60.__vbaFreeStr>] ; MSVBVM60.__vbaFreeStr
00403DD9 . 8D4D D0 LEA ECX, DWORD PTR SS:[ EBP-30]
00403DDC . FFD6 CALL ESI ; <&MSVBVM60.__vbaFreeStr>
00403DDE . 8D4D CC LEA ECX, DWORD PTR SS:[ EBP-34]
00403DE1 . FFD6 CALL ESI
00403DE3 . C3 RETN
00403DE4 . 8B4D EC MOV ECX, DWORD PTR SS:[ EBP-14]
00403DE7 . 8B45 D4 MOV EAX, DWORD PTR SS:[ EBP-2C]
00403DEA . 5F POP EDI
00403DEB . 5E POP ESI
00403DEC . 64:890D 00000> MOV DWORD PTR FS:[0], ECX
00403DF3 . 5B POP EBX
00403DF4 . 8BE5 MOV ESP, EBP
00403DF6 . 5D POP EBP
00403DF7 . C2 0C00 RETN 0C
00403DFA > FF15 9C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaErrorOverflow>] ; MSVBVM60.__vbaErrorOverflow
00403E00 > 55 PUSH EBP
00403E01 . 8BEC MOV EBP, ESP
00403E03 . 83EC 0C SUB ESP,0C
00403E06 . 68 A6114000 PUSH <JMP.&MSVBVM60.__vbaExceptHandler> ; SE handler installation
00403E0B . 64:A1 0000000> MOV EAX, DWORD PTR FS:[0]
00403E11 . 50 PUSH EAX
00403E12 . 64:8925 00000> MOV DWORD PTR FS:[0], ESP
00403E19 . 83EC 34 SUB ESP,34
00403E1C . 53 PUSH EBX
00403E1D . 56 PUSH ESI
00403E1E . 57 PUSH EDI
00403E1F . 8965 F4 MOV DWORD PTR SS:[ EBP-C], ESP
00403E22 . C745 F8 60114> MOV DWORD PTR SS:[ EBP-8],CRACKME0.00401160
00403E29 . 8B75 08 MOV ESI, DWORD PTR SS:[ EBP+8]
00403E2C . 8BC6 MOV EAX, ESI
00403E2E . 83E0 01 AND EAX,1
00403E31 . 8945 FC MOV DWORD PTR SS:[ EBP-4], EAX
00403E34 . 83E6 FE AND ESI,FFFFFFFE
00403E37 . 56 PUSH ESI
00403E38 . 8975 08 MOV DWORD PTR SS:[ EBP+8], ESI
00403E3B . 8B0E MOV ECX, DWORD PTR DS:[ ESI]
00403E3D . FF51 04 CALL DWORD PTR DS:[ ECX+4]
00403E40 . 8B3D B0104000 MOV EDI, DWORD PTR DS:[<&MSVBVM60.__vbaStrCopy>] ; MSVBVM60.__vbaStrCopy
00403E46 . 33C0 XOR EAX, EAX
00403E48 . BA 7C2C4000 MOV EDX,CRACKME0.00402C7C
00403E4D . 8D4D D8 LEA ECX, DWORD PTR SS:[ EBP-28]
00403E50 . 8945 E8 MOV DWORD PTR SS:[ EBP-18], EAX
00403E53 . 8945 E4 MOV DWORD PTR SS:[ EBP-1C], EAX
00403E56 . 8945 E0 MOV DWORD PTR SS:[ EBP-20], EAX
00403E59 . 8945 DC MOV DWORD PTR SS:[ EBP-24], EAX
00403E5C . 8945 D8 MOV DWORD PTR SS:[ EBP-28], EAX
00403E5F . 8945 D4 MOV DWORD PTR SS:[ EBP-2C], EAX
00403E62 . 8945 D0 MOV DWORD PTR SS:[ EBP-30], EAX
00403E65 . FFD7 CALL EDI ; <&MSVBVM60.__vbaStrCopy>
00403E67 . BA 342A4000 MOV EDX,CRACKME0.00402A34 ; UNICODE "software\poje"
00403E6C . 8D4D DC LEA ECX, DWORD PTR SS:[ EBP-24]
00403E6F . FFD7 CALL EDI
00403E71 . 8D55 D8 LEA EDX, DWORD PTR SS:[ EBP-28]
00403E74 . 8D45 DC LEA EAX, DWORD PTR SS:[ EBP-24]
00403E77 . 52 PUSH EDX
00403E78 . 8D4D D0 LEA ECX, DWORD PTR SS:[ EBP-30]
00403E7B . 50 PUSH EAX
00403E7C . 51 PUSH ECX
00403E7D . C745 D0 02000> MOV DWORD PTR SS:[ EBP-30],80000002
00403E84 . E8 87FBFFFF CALL CRACKME0.00403A10
00403E89 . 8B1D D8104000 MOV EBX, DWORD PTR DS:[<&MSVBVM60.__vbaStrMove>] ; MSVBVM60.__vbaStrMove
00403E8F . 8BD0 MOV EDX, EAX
00403E91 . 8D4D E4 LEA ECX, DWORD PTR SS:[ EBP-1C]
00403E94 . FFD3 CALL EBX ; <&MSVBVM60.__vbaStrMove>
00403E96 . 8D55 D8 LEA EDX, DWORD PTR SS:[ EBP-28]
00403E99 . 8D45 DC LEA EAX, DWORD PTR SS:[ EBP-24]
00403E9C . 52 PUSH EDX
00403E9D . 50 PUSH EAX
00403E9E . 6A 02 PUSH 2
00403EA0 . FF15 B4104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
00403EA6 . 83C4 0C ADD ESP,0C
00403EA9 . BA 882C4000 MOV EDX,CRACKME0.00402C88
00403EAE . 8D4D D8 LEA ECX, DWORD PTR SS:[ EBP-28]
00403EB1 . FFD7 CALL EDI
00403EB3 . BA 342A4000 MOV EDX,CRACKME0.00402A34 ; UNICODE "software\poje"
00403EB8 . 8D4D DC LEA ECX, DWORD PTR SS:[ EBP-24]
00403EBB . FFD7 CALL EDI
00403EBD . 8D4D D8 LEA ECX, DWORD PTR SS:[ EBP-28]
00403EC0 . 8D55 DC LEA EDX, DWORD PTR SS:[ EBP-24]
00403EC3 . 51 PUSH ECX
00403EC4 . 8D45 D0 LEA EAX, DWORD PTR SS:[ EBP-30]
00403EC7 . 52 PUSH EDX
00403EC8 . 50 PUSH EAX
00403EC9 . C745 D0 02000> MOV DWORD PTR SS:[ EBP-30],80000002
00403ED0 . E8 3BFBFFFF CALL CRACKME0.00403A10
00403ED5 . 8BD0 MOV EDX, EAX
00403ED7 . 8D4D E8 LEA ECX, DWORD PTR SS:[ EBP-18]
00403EDA . FFD3 CALL EBX
00403EDC . 8D4D D8 LEA ECX, DWORD PTR SS:[ EBP-28]
00403EDF . 8D55 DC LEA EDX, DWORD PTR SS:[ EBP-24]
00403EE2 . 51 PUSH ECX
00403EE3 . 52 PUSH EDX
00403EE4 . 6A 02 PUSH 2
00403EE6 . FF15 B4104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
00403EEC . 83C4 0C ADD ESP,0C
00403EEF . BA 942C4000 MOV EDX,CRACKME0.00402C94
00403EF4 . 8D4D D8 LEA ECX, DWORD PTR SS:[ EBP-28]
00403EF7 . FFD7 CALL EDI
00403EF9 . BA 342A4000 MOV EDX,CRACKME0.00402A34 ; UNICODE "software\poje"
00403EFE . 8D4D DC LEA ECX, DWORD PTR SS:[ EBP-24]
00403F01 . FFD7 CALL EDI
00403F03 . 8D45 D8 LEA EAX, DWORD PTR SS:[ EBP-28]
00403F06 . C745 D0 02000> MOV DWORD PTR SS:[ EBP-30],80000002
00403F0D . 50 PUSH EAX
00403F0E . 8D4D DC LEA ECX, DWORD PTR SS:[ EBP-24]
00403F11 . 8D55 D0 LEA EDX, DWORD PTR SS:[ EBP-30]
00403F14 . 51 PUSH ECX
00403F15 . 52 PUSH EDX
00403F16 . E8 F5FAFFFF CALL CRACKME0.00403A10
00403F1B . 8BD0 MOV EDX, EAX
00403F1D . 8D4D E0 LEA ECX, DWORD PTR SS:[ EBP-20]
00403F20 . FFD3 CALL EBX
00403F22 . 8D45 D8 LEA EAX, DWORD PTR SS:[ EBP-28]
00403F25 . 8D4D DC LEA ECX, DWORD PTR SS:[ EBP-24]
00403F28 . 50 PUSH EAX
00403F29 . 51 PUSH ECX
00403F2A . 6A 02 PUSH 2
00403F2C . FF15 B4104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaFreeStrList>] ; MSVBVM60.__vbaFreeStrList
00403F32 . 8B55 E4 MOV EDX, DWORD PTR SS:[ EBP-1C]
00403F35 . 83C4 0C ADD ESP,0C
00403F38 . 52 PUSH EDX
00403F39 . 68 642A4000 PUSH CRACKME0.00402A64 ; UNICODE "EndsMSVBVM60"
00403F3E . FF15 5C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaStrCmp>] ; MSVBVM60.__vbaStrCmp
00403F44 . 85C0 TEST EAX, EAX
00403F46 . 0F85 A1010000 JNZ CRACKME0.004040ED
00403F4C . 8B06 MOV EAX, DWORD PTR DS:[ ESI]
00403F4E . 56 PUSH ESI
00403F4F . FF90 14030000 CALL DWORD PTR DS:[ EAX+314]
00403F55 . 8D4D D4 LEA ECX, DWORD PTR SS:[ EBP-2C]
00403F58 . 50 PUSH EAX
00403F59 . 51 PUSH ECX
00403F5A . FF15 3C104000 CALL DWORD PTR DS:[<&MSVBVM60.__vbaObjSet>] ; MSVBVM60.__vbaObjSet
00403F60 . 8BF8 MOV EDI, EAX
00403F62 . 68 A02C4000 PUSH CRACKME0.00402CA0
00403F67 . 57 PUSH EDI
00403F68 . 8B17 MOV EDX, DWORD PTR DS:[ EDI]
00403F6A . FF52 54 CALL DWORD PTR DS:[ EDX+54]
|