|
Mostrar Mensajes
|
Páginas: [1]
|
1
|
Programación / Ingeniería Inversa / Re: descifrar sentencias
|
en: 11 Abril 2020, 11:48 am
|
Buenos diass,
Engel, no era mi intención, pero llevo una semana con esto y hasta llegar aqui "que es donde yo creo que es mi problema" me ha costado lo suyo. Te pido disculpas si he dado ha entender eso. Pensaba que era mas senncillo y que seri algo aasi como XXXXX+XXXX.
Tincopasan. tienes razon, me rocomiendas alguno para nivel muy muy principiante.
Lo que intentaba era interpretarlo para seguir avanzando por las sentencias que me dijerais y no perder el tiempo por caminos quee no me llevan a nada.
Gracias iguaalmente
|
|
|
2
|
Programación / Ingeniería Inversa / descifrar sentencias
|
en: 11 Abril 2020, 04:12 am
|
Buenas a todos,
Alguien con paciencia prodria desciframe los siguiente:
txt Pregunta Public Sub Proc_41FE1_0 loc_00041FE1: ebp = ebp - 1 loc_00041FE3: nop loc_00041FE4: [ebx] = [ebx] + eax loc_00041FE6: [eax] = [eax] + eax loc_00041FE8: [eax+eax] = [eax+eax] + eax]+ea loc_00041FEB: [eax] = [eax] + eax]+ea End Sub password Public Sub Proc_413209_0 loc_00413209: If Sign(eax - 0) Then GoTo loc_004131FB End Sub txtpassword Public Sub Proc_41322B_0 loc_00413231: xchg eax, edi loc_00413232: xchg eax, ecx loc_00413233: into loc_00413234: If Not Asm.b_flag Then loc_00413236: out F5h, al loc_00413238: stosb loc_00413239: aam 93h loc_0041323B: ecx = ecx - 1 loc_0041323C: aas loc_0041323D: esi = esi * edx xor 96C9336Eh loc_0041324A: ebp = ebp + 1 loc_0041324C: ebp = ebp + 1 + 1 loc_0041324D: edi = edi + 1 loc_00413250: esi = esi*edx xor 96C9336Eh + 1 loc_00413251: ebp = ebp + 1 + 1 + 1 loc_00413255: aam CAh loc_0041325D: icebp loc_0041325E: into loc_0041325F: If -2021941702 >= 0 Then GoTo loc_004131FD loc_00413261: in al, ACh loc_00413263: cld loc_00413264: popfd txtUsername Public Sub Proc_413269_0 loc_00413270: xchg eax, esi loc_00413272: ebx = ebx - var_72 End Sub loc_00413277: enterd FFC8CAh, 42h loc_0041327B: nop loc_0041327C: stosb loc_0041327E: aaa loc_0041327F: esi = -2021941702 + 1 loc_00413280: adc al, [-094995DCh] loc_0041328B: pushfd loc_0041328C: ebp = ebp + 1 + 1 + 1 - 1 loc_0041328D: [eax] = [eax] + 1 loc_00413294: esi = edi - 1 loc_00413295: edi = edi + 1 + 1 loc_00413298: int 03h loc_00413299: enterd FF986Eh, 43h loc_0041329D: adc ebp, [ebx+6786DEEDh] loc_004132A3: movsb End Sub usuario Public Sub Proc_413303_0 loc_00413303: ebp = ebp + 1 loc_0041330B: cwde loc_0041330C: callf 0000h:0000B82Ah loc_00413314: xchg eax, edx loc_00413315: ecx = ecx - 1 loc_00413316: adc al, 20h loc_0041331A: cmpsd End Sub txtpregunta Public Sub Proc_414FE1_0 loc_00414FE3: loopd 00415006h loc_00414FF2: int 02h loc_00414FF5: les ecx, [ecx+00000022h] loc_00414FF8: adc var_2AFFBFF1, al loc_00414FFE: ebx = ebx + 1 loc_00414FFF: If ebx + 1 <= 0 Then loc_00415001: If Not Asm.a_flag Then GoTo loc_00415082 loc_00415003: If Not Asm.b_flag Then GoTo loc_00414FFC loc_00415007: leaved loc_0041500D: xchg eax, ecx loc_00415019: xchg eax, ebx loc_0041501A: stosd loc_0041501B: Exit Subf FFC6CAh loc_0041501E: Exit Subf loc_00415022: aas loc_00415030: arg_1D = arg_1D + edx+3EAA0A28h loc_00415036: [eax+00000003h] = [eax+00000003h] + arg_1D loc_0041503D: [ebx] = [ebx] - 1 loc_0041503F: If ecx Then loc_0041504A: If Not Asm.l_flag Then GoTo loc_00415079 loc_0041504D: movsb loc_0041504E: If Not Asm.le_flag Then GoTo loc_0041501D loc_00415050: If Err.Number <> 0 Then GoTo loc_00415004 loc_00415052: cld loc_00415053: lodsb loc_00415054: var_eax = call Proc_F77EB47B(ss, arg_1D, es) loc_00415059: If Not Asm.b_flag Then GoTo loc_00415038 loc_0041505B: pushad loc_0041505C: End If loc_0041505C: lahf End Sub btnAceptar Public Sub Proc_415069_0 loc_00415069: If eax < 190 Then loc_00415070: out 5Bh, al loc_00415072: If Not Asm.s_flag Then GoTo loc_0041502D loc_00415074: ebp = ebp - 1 loc_00415075: xlat loc_00415076: aad 49h loc_00415078: 7CE53B6Fh = 7CE53B6Fh * edi loc_00415083: arpl [ecx], bx loc_0041508B: aam 47h loc_00415092: out 1Bh, al loc_00415094: stosd loc_00415095: If eax > 0 Then loc_00415097: hlt loc_00415099: If Err.Number <> 0 Then GoTo loc_00415079 loc_0041509B: iretd loc_0041509C: ficomp [eax+7C97A777h] loc_004150A2: xchg eax, esp loc_004150A3: cmpsb End Sub txtRespuesta Public Sub Proc_4150B2_0 loc_004150B2: repnz xchg bl, [edx-0000003Ah] End Sub Public Sub Proc_41502D_0 loc_00415030: arg_1D = arg_1D + edx+3EAA0A28h loc_00415036: [eax+00000003h] = [eax+00000003h] + arg_1D loc_0041503D: [ebx] = [ebx] - 1 loc_0041503F: If ecx Then loc_0041504A: If Not Asm.l_flag Then GoTo loc_00415079 loc_0041504D: movsb loc_0041504E: If Not Asm.le_flag Then GoTo loc_0041501D loc_00415050: If Err.Number <> 0 Then GoTo loc_00415004 loc_00415052: cld loc_00415053: lodsb loc_00415054: var_eax = call Proc_F77EB47B(ss, arg_1D, ) loc_00415059: If Not Asm.b_flag Then GoTo loc_00415038 loc_0041505B: pushad loc_0041505C: End If loc_0041505C: lahf End Sub Public Sub Proc_415079_0 loc_00415079: punpckhdq mm4, [ebx] loc_0041507C: fiadd real4 ptr [esi-44296EC3h] loc_00415082: If Not Asm.g_flag Then loc_0041508B: aam 47h loc_00415092: out 1Bh, al loc_00415094: stosd loc_00415095: If eax > 0 Then loc_00415097: hlt loc_00415099: If Err.Number <> 0 Then GoTo loc_00415079 loc_0041509B: iretd loc_0041509C: ficomp [eax+7C97A777h] loc_004150A2: xchg eax, esp loc_004150A3: cmpsb End Sub
Gracias
|
|
|
3
|
Seguridad Informática / Hacking / Ayuda sobre factor comunde una serie de numeros
|
en: 7 Abril 2020, 16:20 pm
|
Buenos días a todos,
En primer lugar pedir disculpas por mi ignorancia en este mundo y por si no es el foro o el sitio adecuado Solicito vuestra ayuda para intentar sacar la relección de numero que solicita con para validar con el numero de usuario.
No se si valdría mi explicación y si el adjunto os valdría, pero por lo que he visto creo que debe estar por ahi
0040B7D0 $-FF25 28114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaChkstk>; MSVBVM60.__vbaChkstk 0040B7D6 $-FF25 BC114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaExcept>; MSVBVM60.__vbaExceptHandler; Structured exception handler 0040B7DC >-FF25 00124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFPExce>; MSVBVM60.__vbaFPException 0040B7E2 .-FF25 D4104000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdiv_m>; MSVBVM60._adj_fdiv_m16i 0040B7E8 $-FF25 8C104000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdiv_m>; MSVBVM60._adj_fdiv_m32 0040B7EE .-FF25 48124000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdiv_m>; MSVBVM60._adj_fdiv_m32i 0040B7F4 $-FF25 3C104000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdiv_m>; MSVBVM60._adj_fdiv_m64 0040B7FA $-FF25 78124000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdiv_r>; MSVBVM60._adj_fdiv_r 0040B800 .-FF25 E0104000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdivr_>; MSVBVM60._adj_fdivr_m16i 0040B806 $-FF25 70124000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdivr_>; MSVBVM60._adj_fdivr_m32 0040B80C .-FF25 4C124000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdivr_>; MSVBVM60._adj_fdivr_m32i 0040B812 $-FF25 DC114000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdivr_>; MSVBVM60._adj_fdivr_m64 0040B818 .-FF25 84114000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fpatan>; MSVBVM60._adj_fpatan 0040B81E .-FF25 D8114000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fprem>>; MSVBVM60._adj_fprem 0040B824 .-FF25 58104000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fprem1>; MSVBVM60._adj_fprem1 0040B82A .-FF25 14104000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fptan>>; MSVBVM60._adj_fptan 0040B830 .-FF25 D8124000 JMP DWORD PTR DS:[<&MSVBVM60._CIatan>] ; MSVBVM60._CIatan 0040B836 .-FF25 10104000 JMP DWORD PTR DS:[<&MSVBVM60._CIcos>] ; MSVBVM60._CIcos 0040B83C .-FF25 28134000 JMP DWORD PTR DS:[<&MSVBVM60._CIexp>] ; MSVBVM60._CIexp 0040B842 .-FF25 24124000 JMP DWORD PTR DS:[<&MSVBVM60._CIlog>] ; MSVBVM60._CIlog 0040B848 .-FF25 14114000 JMP DWORD PTR DS:[<&MSVBVM60._CIsin>] ; MSVBVM60._CIsin 0040B84E .-FF25 A4114000 JMP DWORD PTR DS:[<&MSVBVM60._CIsqrt>] ; MSVBVM60._CIsqrt 0040B854 .-FF25 0C134000 JMP DWORD PTR DS:[<&MSVBVM60._CItan>] ; MSVBVM60._CItan 0040B85A .-FF25 F8124000 JMP DWORD PTR DS:[<&MSVBVM60._allmul>] ; MSVBVM60._allmul 0040B860 .-FF25 70114000 JMP DWORD PTR DS:[<&MSVBVM60.DllFunction>; MSVBVM60.DllFunctionCall 0040B866 .-FF25 10124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCat>; MSVBVM60.__vbaVarCat 0040B86C .-FF25 0C124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrVar>; MSVBVM60.__vbaStrVarVal 0040B872 .-FF25 80104000 JMP DWORD PTR DS:[<&MSVBVM60.#662>] ; MSVBVM60.rtcDateDiff 0040B878 .-FF25 44114000 JMP DWORD PTR DS:[<&MSVBVM60.#529>] ; MSVBVM60.rtcKillFiles 0040B87E .-FF25 C8114000 JMP DWORD PTR DS:[<&MSVBVM60.#712>] ; MSVBVM60.rtcReplace 0040B884 .-FF25 14124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaDateVa>; MSVBVM60.__vbaDateVar 0040B88A .-FF25 78114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarLat>; MSVBVM60.__vbaVarLateMemSt 0040B890 .-FF25 C4124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarTst>; MSVBVM60.__vbaVarTstGe 0040B896 .-FF25 A0104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCmp>; MSVBVM60.__vbaVarCmpGe 0040B89C .-FF25 CC104000 JMP DWORD PTR DS:[<&MSVBVM60.#595>] ; MSVBVM60.rtcMsgBox 0040B8A2 .-FF25 58114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaDateR8>; MSVBVM60.__vbaDateR8 0040B8A8 .-FF25 40114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrCmp>; MSVBVM60.__vbaStrCmp 0040B8AE .-FF25 74124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaR8Var>>; MSVBVM60.__vbaR8Var 0040B8B4 .-FF25 A8124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVerify>; MSVBVM60.__vbaVerifyVarObj 0040B8BA .-FF25 68124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFreeSt>; MSVBVM60.__vbaFreeStrList 0040B8C0 .-FF25 FC114000 JMP DWORD PTR DS:[<&MSVBVM60.#716>] ; MSVBVM60.rtcCreateObject2 0040B8C6 .-FF25 94124000 JMP DWORD PTR DS:[<&MSVBVM60.#610>] ; MSVBVM60.rtcGetDateVar 0040B8CC .-FF25 D4114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaDateSt>; MSVBVM60.__vbaDateStr 0040B8D2 .-FF25 64104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrCat>; MSVBVM60.__vbaStrCat 0040B8D8 .-FF25 A4124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarDup>; MSVBVM60.__vbaVarDup 0040B8DE .-FF25 94104000 JMP DWORD PTR DS:[<&MSVBVM60.#666>] ; MSVBVM60.rtcEnvironVar 0040B8E4 .-FF25 30104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrVar>; MSVBVM60.__vbaStrVarMove 0040B8EA .-FF25 E4124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrMov>; MSVBVM60.__vbaStrMove 0040B8F0 .-FF25 38104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaEnd>] ; MSVBVM60.__vbaEnd 0040B8F6 .-FF25 6C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4 0040B8FC .-FF25 5C104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaRecAns>; MSVBVM60.__vbaRecAnsiToUni 0040B902 .-FF25 98114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaRecUni>; MSVBVM60.__vbaRecUniToAnsi 0040B908 .-FF25 A0124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrToA>; MSVBVM60.__vbaStrToAnsi 0040B90E .-FF25 C0124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFpI4>] ; MSVBVM60.__vbaFpI4 0040B914 .-FF25 B4104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaExitPr>; MSVBVM60.__vbaExitProc 0040B91A .-FF25 24134000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarFor>; MSVBVM60.__vbaVarForNext 0040B920 .-FF25 90104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarTst>; MSVBVM60.__vbaVarTstLe 0040B926 .-FF25 64124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCmp>; MSVBVM60.__vbaVarCmpLt 0040B92C .-FF25 44124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarInt>; MSVBVM60.__vbaVarInt 0040B932 .-FF25 90124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCmp>; MSVBVM60.__vbaVarCmpEq 0040B938 .-FF25 B0114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarAnd>; MSVBVM60.__vbaVarAnd 0040B93E .-FF25 10114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaBoolVa>; MSVBVM60.__vbaBoolVarNull 0040B944 .-FF25 C8104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaOnErro>; MSVBVM60.__vbaOnError 0040B94A .-FF25 9C124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarAdd>; MSVBVM60.__vbaVarAdd 0040B950 .-FF25 8C124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaI4Var>>; MSVBVM60.__vbaI4Var 0040B956 .-FF25 88104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLenVar>; MSVBVM60.__vbaLenVar 0040B95C .-FF25 1C134000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaAryUnl>; MSVBVM60.__vbaAryUnlock 0040B962 .-FF25 08104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarSub>; MSVBVM60.__vbaVarSub 0040B968 .-FF25 24114000 JMP DWORD PTR DS:[<&MSVBVM60.#632>] ; MSVBVM60.rtcMidCharVar 0040B96E .-FF25 A8104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarInd>; MSVBVM60.__vbaVarIndexLoadRefLock 0040B974 .-FF25 E4104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarInd>; MSVBVM60.__vbaVarIndexLoad 0040B97A .-FF25 08124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaInStrV>; MSVBVM60.__vbaInStrVar 0040B980 .-FF25 B0104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarFor>; MSVBVM60.__vbaVarForInit 0040B986 .-FF25 88124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarSet>; MSVBVM60.__vbaVarSetVar 0040B98C .-FF25 BC124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCop>; MSVBVM60.__vbaVarCopy 0040B992 .-FF25 04134000 JMP DWORD PTR DS:[<&MSVBVM60.#544>] ; MSVBVM60.rtcGetMinuteOfHour 0040B998 .-FF25 F4124000 JMP DWORD PTR DS:[<&MSVBVM60.#543>] ; MSVBVM60.rtcGetHourOfDay 0040B99E .-FF25 1C104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarMov>; MSVBVM60.__vbaVarMove 0040B9A4 .-FF25 70104000 JMP DWORD PTR DS:[<&MSVBVM60.#553>] ; MSVBVM60.rtcGetYear 0040B9AA .-FF25 08134000 JMP DWORD PTR DS:[<&MSVBVM60.#545>] ; MSVBVM60.rtcGetMonthOfYear 0040B9B0 .-FF25 10134000 JMP DWORD PTR DS:[<&MSVBVM60.#546>] ; MSVBVM60.rtcGetPresentDate 0040B9B6 .-FF25 F0124000 JMP DWORD PTR DS:[<&MSVBVM60.#542>] ; MSVBVM60.rtcGetDayOfMonth 0040B9BC .-FF25 18124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaI2Var>>; MSVBVM60.__vbaI2Var 0040B9C2 .-FF25 78104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaSetSys>; MSVBVM60.__vbaSetSystemError 0040B9C8 .-FF25 8C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateId>; MSVBVM60.__vbaLateIdCallLd 0040B9CE .-FF25 DC104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaObjSet>; MSVBVM60.__vbaObjSetAddref 0040B9D4 .-FF25 D4124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateMe>; MSVBVM60.__vbaLateMemCallLd 0040B9DA .-FF25 04104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarTst>; MSVBVM60.__vbaVarTstGt 0040B9E0 .-FF25 30134000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFreeSt>; MSVBVM60.__vbaFreeStr 0040B9E6 .-FF25 34104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFreeVa>; MSVBVM60.__vbaFreeVarList 0040B9EC .-FF25 4C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarTst>; MSVBVM60.__vbaVarTstEq 0040B9F2 .-FF25 2C134000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFreeOb>; MSVBVM60.__vbaFreeObj 0040B9F8 .-FF25 54114000 JMP DWORD PTR DS:[<&MSVBVM60.#560>] ; MSVBVM60.rtcIsNull 0040B9FE .-FF25 B8124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarLat>; MSVBVM60.__vbaVarLateMemCallLd 0040BA04 .-FF25 7C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaCastOb>; MSVBVM60.__vbaCastObjVar 0040BA0A .-FF25 C4104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaObjSet>; MSVBVM60.__vbaObjSet 0040BA10 .-FF25 58124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrCop>; MSVBVM60.__vbaStrCopy 0040BA16 .-FF25 48104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFreeOb>; MSVBVM60.__vbaFreeObjList 0040BA1C .-FF25 7C104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaHresul>; MSVBVM60.__vbaHresultCheckObj 0040BA22 .-FF25 40124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaNew2>] ; MSVBVM60.__vbaNew2 0040BA28 .-FF25 54124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarSet>; MSVBVM60.__vbaVarSetObj 0040BA2E .-FF25 24104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFreeVa>; MSVBVM60.__vbaFreeVar 0040BA34 .-FF25 68114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaObjVar>; MSVBVM60.__vbaObjVar 0040BA3A .-FF25 98124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateMe>; MSVBVM60.__vbaLateMemCall 0040BA40 .-FF25 38114000 JMP DWORD PTR DS:[<&MSVBVM60.#528>] ; MSVBVM60.rtcUpperCaseVar 0040BA46 .-FF25 FC104000 JMP DWORD PTR DS:[<&MSVBVM60.#520>] ; MSVBVM60.rtcTrimVar 0040BA4C .-FF25 84124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarTst>; MSVBVM60.__vbaVarTstNe 0040BA52 .-FF25 60124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarNot>; MSVBVM60.__vbaVarNot 0040BA58 .-FF25 74114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarOr>>; MSVBVM60.__vbaVarOr 0040BA5E .-FF25 0C104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrI2>>; MSVBVM60.__vbaStrI2 0040BA64 .-FF25 28124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaErrorO>; MSVBVM60.__vbaErrorOverflow 0040BA6A .-FF25 54104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrErr>; MSVBVM60.__vbaStrErrVarCopy 0040BA70 .-FF25 6C104000 JMP DWORD PTR DS:[<&MSVBVM60.#660>] ; MSVBVM60.rtcVarFromFormatVar 0040BA76 .-FF25 2C104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLenBst>; MSVBVM60.__vbaLenBstr 0040BA7C .-FF25 3C124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaInStr>>; MSVBVM60.__vbaInStr 0040BA82 .-FF25 04124000 JMP DWORD PTR DS:[<&MSVBVM60.#717>] ; MSVBVM60.rtcStrConvVar2 0040BA88 .-FF25 4C104000 JMP DWORD PTR DS:[<&MSVBVM60.#516>] ; MSVBVM60.rtcAnsiValueBstr 0040BA8E .-FF25 1C124000 JMP DWORD PTR DS:[<&MSVBVM60.#537>] ; MSVBVM60.rtcBstrFromAnsi 0040BA94 .-FF25 D0114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaR4ErrV>; MSVBVM60.__vbaR4ErrVar 0040BA9A .-FF25 F4114000 JMP DWORD PTR DS:[<&MSVBVM60.#608>] ; MSVBVM60.rtcVarBstrFromAnsi 0040BAA0 .-FF25 AC114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateId>; MSVBVM60.__vbaLateIdCallSt 0040BAA6 .-FF25 18104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrI4>>; MSVBVM60.__vbaStrI4 0040BAAC .-FF25 F0114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarDiv>; MSVBVM60.__vbaVarDiv 0040BAB2 .-FF25 64114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaPrintO>; MSVBVM60.__vbaPrintObj 0040BAB8 .-FF25 28104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateId>; MSVBVM60.__vbaLateIdCall 0040BABE .-FF25 00134000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarLat>; MSVBVM60.__vbaVarLateMemCallSt 0040BAC4 .-FF25 88114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaR4Var>>; MSVBVM60.__vbaR4Var 0040BACA .-FF25 B8114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarMul>; MSVBVM60.__vbaVarMul 0040BAD0 .-FF25 FC124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateId>; MSVBVM60.__vbaLateIdSt 0040BAD6 .-FF25 60114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaNextEa>; MSVBVM60.__vbaNextEachCollVar 0040BADC .-FF25 3C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaExitEa>; MSVBVM60.__vbaExitEachColl 0040BAE2 .-FF25 F8104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaForEac>; MSVBVM60.__vbaForEachCollVar 0040BAE8 .-FF25 EC114000 JMP DWORD PTR DS:[<&MSVBVM60.#714>] ; MSVBVM60.rtcRound 0040BAEE .-FF25 50114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaR4Str>>; MSVBVM60.__vbaR4Str 0040BAF4 .-FF25 94114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrR8>>; MSVBVM60.__vbaStrR8 0040BAFA .-FF25 5C114000 JMP DWORD PTR DS:[<&MSVBVM60.#561>] ; MSVBVM60.rtcIsNumeric 0040BB00 .-FF25 F4104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaBoolVa>; MSVBVM60.__vbaBoolVar 0040BB06 .-FF25 E0124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaCastOb>; MSVBVM60.__vbaCastObj 0040BB0C .-FF25 A0114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaNew>] ; MSVBVM60.__vbaNew 0040BB12 .-FF25 60104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCmp>; MSVBVM60.__vbaVarCmpNe 0040BB18 .-FF25 38124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaR8Str>>; MSVBVM60.__vbaR8Str 0040BB1E .-FF25 80114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrR4>>; MSVBVM60.__vbaStrR4 0040BB24 .-FF25 F8114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCmp>; MSVBVM60.__vbaVarCmpLe 0040BB2A .-FF25 6C124000 JMP DWORD PTR DS:[<&MSVBVM60.#576>] ; MSVBVM60.rtcFileCopy 0040BB30 .-FF25 7C124000 JMP DWORD PTR DS:[<&MSVBVM60.#685>] ; MSVBVM60.rtcErrObj 0040BB36 .-FF25 5C124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaI4Str>>; MSVBVM60.__vbaI4Str 0040BB3C .-FF25 D0124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaR8IntI>; MSVBVM60.__vbaR8IntI2 0040BB42 .-FF25 18134000 JMP DWORD PTR DS:[<&MSVBVM60.#547>] ; MSVBVM60.rtcGetSecondOfMinute 0040BB48 .-FF25 20114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateMe>; MSVBVM60.__vbaLateMemStAd 0040BB4E .-FF25 A4104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateMe>; MSVBVM60.__vbaLateMemSt 0040BB54 .-FF25 50104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarInd>; MSVBVM60.__vbaVarIndexLoadRef 0040BB5A .-FF25 0C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarTst>; MSVBVM60.__vbaVarTstLt 0040BB60 .-FF25 14134000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFPInt>>; MSVBVM60.__vbaFPInt 0040BB66 .-FF25 CC124000 JMP DWORD PTR DS:[<&MSVBVM60.#617>] ; MSVBVM60.rtcLeftCharVar 0040BB6C .-FF25 20134000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFpCSng>; MSVBVM60.__vbaFpCSngR8 0040BB72 .-FF25 40104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFpCDbl>; MSVBVM60.__vbaFpCDblR8 0040BB78 .-FF25 84104000 JMP DWORD PTR DS:[<&MSVBVM60.#557>] ; MSVBVM60.rtcIsDate 0040BB7E .-FF25 E8114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaI2Str>>; MSVBVM60.__vbaI2Str 0040BB84 .-FF25 EC104000 JMP DWORD PTR DS:[<&MSVBVM60.#599>] ; MSVBVM60.rtcSendKeys 0040BB8A .-FF25 20104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarVar>; MSVBVM60.__vbaVarVargNofree 0040BB90 .-FF25 9C104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaAryDes>; MSVBVM60.__vbaAryDestruct 0040BB96 .-FF25 18114000 JMP DWORD PTR DS:[<&MSVBVM60.#631>] ; MSVBVM60.rtcMidCharBstr 0040BB9C .-FF25 DC124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaI2ErrV>; MSVBVM60.__vbaI2ErrVar 0040BBA2 .-FF25 34114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaGenera>; MSVBVM60.__vbaGenerateBoundsError 0040BBA8 .-FF25 48114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaAryCon>; MSVBVM60.__vbaAryConstruct2 0040BBAE .-FF25 EC124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrVar>; MSVBVM60.__vbaStrVarCopy 0040BBB4 .-FF25 34134000 JMP DWORD PTR DS:[<&MSVBVM60.#581>] ; MSVBVM60.rtcR8ValFromBstr 0040BBBA .-FF25 08114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFpR8>] ; MSVBVM60.__vbaFpR8 0040BBC0 .-FF25 E8104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFpR4>] ; MSVBVM60.__vbaFpR4 0040BBC6 .-FF25 68104000 JMP DWORD PTR DS:[<&MSVBVM60.#552>] ; MSVBVM60.rtcGetDayOfWeek 0040BBCC .-FF25 C8124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarSet>; MSVBVM60.__vbaVarSetObjAddref 0040BBD2 .-FF25 34124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarLat>; MSVBVM60.__vbaVarLateMemCallLdRf 0040BBD8 .-FF25 1C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCmp>; MSVBVM60.__vbaVarCmpGt 0040BBDE .-FF25 20124000 JMP DWORD PTR DS:[<&MSVBVM60.#645>] ; MSVBVM60.rtcDir 0040BBE4 .-FF25 AC104000 JMP DWORD PTR DS:[<&MSVBVM60.#593>] ; MSVBVM60.rtcRandomNext 0040BBEA .-FF25 C0104000 JMP DWORD PTR DS:[<&MSVBVM60.#594>] ; MSVBVM60.rtcRandomize 0040BBF0 .-FF25 74104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrDat>; MSVBVM60.__vbaStrDate 0040BBF6 .-FF25 E8124000 JMP DWORD PTR DS:[<&MSVBVM60.#619>] ; MSVBVM60.rtcRightCharVar 0040BBFC .-FF25 2C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFileCl>; MSVBVM60.__vbaFileClose 0040BC02 .-FF25 C4114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaPrintF>; MSVBVM60.__vbaPrintFile 0040BC08 .-FF25 2C124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFileOp>; MSVBVM60.__vbaFileOpen 0040BC0E .-FF25 30124000 JMP DWORD PTR DS:[<&MSVBVM60.#648>] ; MSVBVM60.rtcFreeFile 0040BC14 .-FF25 B4124000 JMP DWORD PTR DS:[<&MSVBVM60.#616>] ; MSVBVM60.rtcLeftCharBstr 0040BC1A .-FF25 C0114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrToU>; MSVBVM60.__vbaStrToUnicode 0040BC20 .-FF25 CC114000 JMP DWORD PTR DS:[<&MSVBVM60.#606>] ; MSVBVM60.rtcStringBstr 0040BC26 .-FF25 AC124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFpI2>] ; MSVBVM60.__vbaFpI2 0040BC2C .-FF25 E4114000 JMP DWORD PTR DS:[<&MSVBVM60.#607>] ; MSVBVM60.rtcStringVar 0040BC32 .-FF25 50124000 JMP DWORD PTR DS:[<&MSVBVM60.#573>] ; MSVBVM60.rtcHexVarFromVar 0040BC38 .-FF25 E0114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaR8ErrV>; MSVBVM60.__vbaR8ErrVar 0040BC3E .-FF25 BC104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFileCl>; MSVBVM60.__vbaFileCloseAll 0040BC44 .-FF25 B0124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaUnkVar>; MSVBVM60.__vbaUnkVar 0040BC4A .-FF25 A8114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaObjIs>>; MSVBVM60.__vbaObjIs 0040BC50 .-FF25 B4114000 JMP DWORD PTR DS:[<&MSVBVM60.EVENT_SINK_>; MSVBVM60.EVENT_SINK_QueryInterface 0040BC56 .-FF25 30114000 JMP DWORD PTR DS:[<&MSVBVM60.EVENT_SINK_>; MSVBVM60.EVENT_SINK_AddRef 0040BC5C .-FF25 9C114000 JMP DWORD PTR DS:[<&MSVBVM60.EVENT_SINK_>; MSVBVM60.EVENT_SINK_Release 0040BC62 .-FF25 90114000 JMP DWORD PTR DS:[<&MSVBVM60.Zombie_GetT>; MSVBVM60.Zombie_GetTypeInfoCount 0040BC68 .-FF25 98104000 JMP DWORD PTR DS:[<&MSVBVM60.Zombie_GetT>; MSVBVM60.Zombie_GetTypeInfo 0040BC6E .-FF25 00104000 JMP DWORD PTR DS:[<&MSVBVM60.EVENT_SINK_>; MSVBVM60.EVENT_SINK_GetIDsOfNames 0040BC74 .-FF25 44104000 JMP DWORD PTR DS:[<&MSVBVM60.EVENT_SINK_>; MSVBVM60.EVENT_SINK_Invoke 0040BC7A .-FF25 D8104000 JMP DWORD PTR DS:[<&MSVBVM60.#303>] ; MSVBVM60.GetMemStr 0040BC80 .-FF25 04114000 JMP DWORD PTR DS:[<&MSVBVM60.#309>] ; MSVBVM60.PutMemStr 0040BC86 .-FF25 B8104000 JMP DWORD PTR DS:[<&MSVBVM60.#300>] ; MSVBVM60.GetMem2 0040BC8C .-FF25 F0104000 JMP DWORD PTR DS:[<&MSVBVM60.#306>] ; MSVBVM60.PutMem2 0040BC92 .-FF25 D0104000 JMP DWORD PTR DS:[<&MSVBVM60.#302>] ; MSVBVM60.GetMem8 0040BC98 .-FF25 00114000 JMP DWORD PTR DS:[<&MSVBVM60.#308>] ; MSVBVM60.PutMem8 0040BC9E $-FF25 80124000 JMP DWORD PTR DS:[<&MSVBVM60.#100>] ; MSVBVM60.ThunRTMain 0040BCA4 > $ 68 84277000 PUSH TPVinfor.00702784 ; ASCII "VB5!6&VB6ES.DLL" 0040BCA9 . E8 F0FFFFFF CALL <JMP.&MSVBVM60.#100> 0040BCAE . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCB0 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCB2 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCB4 . 3000 XOR BYTE PTR DS:[EAX],AL 0040BCB6 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCB8 . 58 POP EAX 0040BCB9 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCBB . 0040 00 ADD BYTE PTR DS:[EAX],AL 0040BCBE . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCC0 . F770 06 DIV DWORD PTR DS:[EAX+6] 0040BCC3 . 6F OUTS DX,DWORD PTR ES:[EDI] ; I/O command 0040BCC4 . 04 CE ADD AL,0CE 0040BCC6 . 50 PUSH EAX 0040BCC7 . 4F DEC EDI 0040BCC8 . 84AB AC41860D TEST BYTE PTR DS:[EBX+D8641AC],CH 0040BCCE . 1A55 00 SBB DL,BYTE PTR SS:[EBP] 0040BCD1 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCD3 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCD5 . 0001 ADD BYTE PTR DS:[ECX],AL 0040BCD7 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCD9 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCDB . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCDD . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCDF . 0049 6E ADD BYTE PTR DS:[ECX+6E],CL 0040BCE2 . 66:6F OUTS DX,WORD PTR ES:[EDI] ; I/O command 0040BCE4 . 72 70 JB SHORT TPVinfor.0040BD56 0040BCE6 . 79 6D JNS SHORT TPVinfor.0040BD55 0040BCE8 . 65:54 PUSH ESP ; Superfluous prefix 0040BCEA . 50 PUSH EAX 0040BCEB . 56 PUSH ESI 0040BCEC . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCEE . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCF0 . 53 PUSH EBX 0040BCF1 . 6F OUTS DX,DWORD PTR ES:[EDI] ; I/O command 0040BCF2 66 DB 66 ; CHAR 'f'
Gracias
|
|
|
|
|
|
|