|
Mostrar Temas
|
Páginas: [1]
|
1
|
Programación / Ingeniería Inversa / descifrar sentencias
|
en: 11 Abril 2020, 04:12 am
|
Buenas a todos,
Alguien con paciencia prodria desciframe los siguiente:
txt Pregunta Public Sub Proc_41FE1_0 loc_00041FE1: ebp = ebp - 1 loc_00041FE3: nop loc_00041FE4: [ebx] = [ebx] + eax loc_00041FE6: [eax] = [eax] + eax loc_00041FE8: [eax+eax] = [eax+eax] + eax]+ea loc_00041FEB: [eax] = [eax] + eax]+ea End Sub password Public Sub Proc_413209_0 loc_00413209: If Sign(eax - 0) Then GoTo loc_004131FB End Sub txtpassword Public Sub Proc_41322B_0 loc_00413231: xchg eax, edi loc_00413232: xchg eax, ecx loc_00413233: into loc_00413234: If Not Asm.b_flag Then loc_00413236: out F5h, al loc_00413238: stosb loc_00413239: aam 93h loc_0041323B: ecx = ecx - 1 loc_0041323C: aas loc_0041323D: esi = esi * edx xor 96C9336Eh loc_0041324A: ebp = ebp + 1 loc_0041324C: ebp = ebp + 1 + 1 loc_0041324D: edi = edi + 1 loc_00413250: esi = esi*edx xor 96C9336Eh + 1 loc_00413251: ebp = ebp + 1 + 1 + 1 loc_00413255: aam CAh loc_0041325D: icebp loc_0041325E: into loc_0041325F: If -2021941702 >= 0 Then GoTo loc_004131FD loc_00413261: in al, ACh loc_00413263: cld loc_00413264: popfd txtUsername Public Sub Proc_413269_0 loc_00413270: xchg eax, esi loc_00413272: ebx = ebx - var_72 End Sub loc_00413277: enterd FFC8CAh, 42h loc_0041327B: nop loc_0041327C: stosb loc_0041327E: aaa loc_0041327F: esi = -2021941702 + 1 loc_00413280: adc al, [-094995DCh] loc_0041328B: pushfd loc_0041328C: ebp = ebp + 1 + 1 + 1 - 1 loc_0041328D: [eax] = [eax] + 1 loc_00413294: esi = edi - 1 loc_00413295: edi = edi + 1 + 1 loc_00413298: int 03h loc_00413299: enterd FF986Eh, 43h loc_0041329D: adc ebp, [ebx+6786DEEDh] loc_004132A3: movsb End Sub usuario Public Sub Proc_413303_0 loc_00413303: ebp = ebp + 1 loc_0041330B: cwde loc_0041330C: callf 0000h:0000B82Ah loc_00413314: xchg eax, edx loc_00413315: ecx = ecx - 1 loc_00413316: adc al, 20h loc_0041331A: cmpsd End Sub txtpregunta Public Sub Proc_414FE1_0 loc_00414FE3: loopd 00415006h loc_00414FF2: int 02h loc_00414FF5: les ecx, [ecx+00000022h] loc_00414FF8: adc var_2AFFBFF1, al loc_00414FFE: ebx = ebx + 1 loc_00414FFF: If ebx + 1 <= 0 Then loc_00415001: If Not Asm.a_flag Then GoTo loc_00415082 loc_00415003: If Not Asm.b_flag Then GoTo loc_00414FFC loc_00415007: leaved loc_0041500D: xchg eax, ecx loc_00415019: xchg eax, ebx loc_0041501A: stosd loc_0041501B: Exit Subf FFC6CAh loc_0041501E: Exit Subf loc_00415022: aas loc_00415030: arg_1D = arg_1D + edx+3EAA0A28h loc_00415036: [eax+00000003h] = [eax+00000003h] + arg_1D loc_0041503D: [ebx] = [ebx] - 1 loc_0041503F: If ecx Then loc_0041504A: If Not Asm.l_flag Then GoTo loc_00415079 loc_0041504D: movsb loc_0041504E: If Not Asm.le_flag Then GoTo loc_0041501D loc_00415050: If Err.Number <> 0 Then GoTo loc_00415004 loc_00415052: cld loc_00415053: lodsb loc_00415054: var_eax = call Proc_F77EB47B(ss, arg_1D, es) loc_00415059: If Not Asm.b_flag Then GoTo loc_00415038 loc_0041505B: pushad loc_0041505C: End If loc_0041505C: lahf End Sub btnAceptar Public Sub Proc_415069_0 loc_00415069: If eax < 190 Then loc_00415070: out 5Bh, al loc_00415072: If Not Asm.s_flag Then GoTo loc_0041502D loc_00415074: ebp = ebp - 1 loc_00415075: xlat loc_00415076: aad 49h loc_00415078: 7CE53B6Fh = 7CE53B6Fh * edi loc_00415083: arpl [ecx], bx loc_0041508B: aam 47h loc_00415092: out 1Bh, al loc_00415094: stosd loc_00415095: If eax > 0 Then loc_00415097: hlt loc_00415099: If Err.Number <> 0 Then GoTo loc_00415079 loc_0041509B: iretd loc_0041509C: ficomp [eax+7C97A777h] loc_004150A2: xchg eax, esp loc_004150A3: cmpsb End Sub txtRespuesta Public Sub Proc_4150B2_0 loc_004150B2: repnz xchg bl, [edx-0000003Ah] End Sub Public Sub Proc_41502D_0 loc_00415030: arg_1D = arg_1D + edx+3EAA0A28h loc_00415036: [eax+00000003h] = [eax+00000003h] + arg_1D loc_0041503D: [ebx] = [ebx] - 1 loc_0041503F: If ecx Then loc_0041504A: If Not Asm.l_flag Then GoTo loc_00415079 loc_0041504D: movsb loc_0041504E: If Not Asm.le_flag Then GoTo loc_0041501D loc_00415050: If Err.Number <> 0 Then GoTo loc_00415004 loc_00415052: cld loc_00415053: lodsb loc_00415054: var_eax = call Proc_F77EB47B(ss, arg_1D, ) loc_00415059: If Not Asm.b_flag Then GoTo loc_00415038 loc_0041505B: pushad loc_0041505C: End If loc_0041505C: lahf End Sub Public Sub Proc_415079_0 loc_00415079: punpckhdq mm4, [ebx] loc_0041507C: fiadd real4 ptr [esi-44296EC3h] loc_00415082: If Not Asm.g_flag Then loc_0041508B: aam 47h loc_00415092: out 1Bh, al loc_00415094: stosd loc_00415095: If eax > 0 Then loc_00415097: hlt loc_00415099: If Err.Number <> 0 Then GoTo loc_00415079 loc_0041509B: iretd loc_0041509C: ficomp [eax+7C97A777h] loc_004150A2: xchg eax, esp loc_004150A3: cmpsb End Sub
Gracias
|
|
|
2
|
Seguridad Informática / Hacking / Ayuda sobre factor comunde una serie de numeros
|
en: 7 Abril 2020, 16:20 pm
|
Buenos días a todos,
En primer lugar pedir disculpas por mi ignorancia en este mundo y por si no es el foro o el sitio adecuado Solicito vuestra ayuda para intentar sacar la relección de numero que solicita con para validar con el numero de usuario.
No se si valdría mi explicación y si el adjunto os valdría, pero por lo que he visto creo que debe estar por ahi
0040B7D0 $-FF25 28114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaChkstk>; MSVBVM60.__vbaChkstk 0040B7D6 $-FF25 BC114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaExcept>; MSVBVM60.__vbaExceptHandler; Structured exception handler 0040B7DC >-FF25 00124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFPExce>; MSVBVM60.__vbaFPException 0040B7E2 .-FF25 D4104000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdiv_m>; MSVBVM60._adj_fdiv_m16i 0040B7E8 $-FF25 8C104000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdiv_m>; MSVBVM60._adj_fdiv_m32 0040B7EE .-FF25 48124000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdiv_m>; MSVBVM60._adj_fdiv_m32i 0040B7F4 $-FF25 3C104000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdiv_m>; MSVBVM60._adj_fdiv_m64 0040B7FA $-FF25 78124000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdiv_r>; MSVBVM60._adj_fdiv_r 0040B800 .-FF25 E0104000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdivr_>; MSVBVM60._adj_fdivr_m16i 0040B806 $-FF25 70124000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdivr_>; MSVBVM60._adj_fdivr_m32 0040B80C .-FF25 4C124000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdivr_>; MSVBVM60._adj_fdivr_m32i 0040B812 $-FF25 DC114000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fdivr_>; MSVBVM60._adj_fdivr_m64 0040B818 .-FF25 84114000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fpatan>; MSVBVM60._adj_fpatan 0040B81E .-FF25 D8114000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fprem>>; MSVBVM60._adj_fprem 0040B824 .-FF25 58104000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fprem1>; MSVBVM60._adj_fprem1 0040B82A .-FF25 14104000 JMP DWORD PTR DS:[<&MSVBVM60._adj_fptan>>; MSVBVM60._adj_fptan 0040B830 .-FF25 D8124000 JMP DWORD PTR DS:[<&MSVBVM60._CIatan>] ; MSVBVM60._CIatan 0040B836 .-FF25 10104000 JMP DWORD PTR DS:[<&MSVBVM60._CIcos>] ; MSVBVM60._CIcos 0040B83C .-FF25 28134000 JMP DWORD PTR DS:[<&MSVBVM60._CIexp>] ; MSVBVM60._CIexp 0040B842 .-FF25 24124000 JMP DWORD PTR DS:[<&MSVBVM60._CIlog>] ; MSVBVM60._CIlog 0040B848 .-FF25 14114000 JMP DWORD PTR DS:[<&MSVBVM60._CIsin>] ; MSVBVM60._CIsin 0040B84E .-FF25 A4114000 JMP DWORD PTR DS:[<&MSVBVM60._CIsqrt>] ; MSVBVM60._CIsqrt 0040B854 .-FF25 0C134000 JMP DWORD PTR DS:[<&MSVBVM60._CItan>] ; MSVBVM60._CItan 0040B85A .-FF25 F8124000 JMP DWORD PTR DS:[<&MSVBVM60._allmul>] ; MSVBVM60._allmul 0040B860 .-FF25 70114000 JMP DWORD PTR DS:[<&MSVBVM60.DllFunction>; MSVBVM60.DllFunctionCall 0040B866 .-FF25 10124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCat>; MSVBVM60.__vbaVarCat 0040B86C .-FF25 0C124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrVar>; MSVBVM60.__vbaStrVarVal 0040B872 .-FF25 80104000 JMP DWORD PTR DS:[<&MSVBVM60.#662>] ; MSVBVM60.rtcDateDiff 0040B878 .-FF25 44114000 JMP DWORD PTR DS:[<&MSVBVM60.#529>] ; MSVBVM60.rtcKillFiles 0040B87E .-FF25 C8114000 JMP DWORD PTR DS:[<&MSVBVM60.#712>] ; MSVBVM60.rtcReplace 0040B884 .-FF25 14124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaDateVa>; MSVBVM60.__vbaDateVar 0040B88A .-FF25 78114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarLat>; MSVBVM60.__vbaVarLateMemSt 0040B890 .-FF25 C4124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarTst>; MSVBVM60.__vbaVarTstGe 0040B896 .-FF25 A0104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCmp>; MSVBVM60.__vbaVarCmpGe 0040B89C .-FF25 CC104000 JMP DWORD PTR DS:[<&MSVBVM60.#595>] ; MSVBVM60.rtcMsgBox 0040B8A2 .-FF25 58114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaDateR8>; MSVBVM60.__vbaDateR8 0040B8A8 .-FF25 40114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrCmp>; MSVBVM60.__vbaStrCmp 0040B8AE .-FF25 74124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaR8Var>>; MSVBVM60.__vbaR8Var 0040B8B4 .-FF25 A8124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVerify>; MSVBVM60.__vbaVerifyVarObj 0040B8BA .-FF25 68124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFreeSt>; MSVBVM60.__vbaFreeStrList 0040B8C0 .-FF25 FC114000 JMP DWORD PTR DS:[<&MSVBVM60.#716>] ; MSVBVM60.rtcCreateObject2 0040B8C6 .-FF25 94124000 JMP DWORD PTR DS:[<&MSVBVM60.#610>] ; MSVBVM60.rtcGetDateVar 0040B8CC .-FF25 D4114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaDateSt>; MSVBVM60.__vbaDateStr 0040B8D2 .-FF25 64104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrCat>; MSVBVM60.__vbaStrCat 0040B8D8 .-FF25 A4124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarDup>; MSVBVM60.__vbaVarDup 0040B8DE .-FF25 94104000 JMP DWORD PTR DS:[<&MSVBVM60.#666>] ; MSVBVM60.rtcEnvironVar 0040B8E4 .-FF25 30104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrVar>; MSVBVM60.__vbaStrVarMove 0040B8EA .-FF25 E4124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrMov>; MSVBVM60.__vbaStrMove 0040B8F0 .-FF25 38104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaEnd>] ; MSVBVM60.__vbaEnd 0040B8F6 .-FF25 6C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaI2I4>] ; MSVBVM60.__vbaI2I4 0040B8FC .-FF25 5C104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaRecAns>; MSVBVM60.__vbaRecAnsiToUni 0040B902 .-FF25 98114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaRecUni>; MSVBVM60.__vbaRecUniToAnsi 0040B908 .-FF25 A0124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrToA>; MSVBVM60.__vbaStrToAnsi 0040B90E .-FF25 C0124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFpI4>] ; MSVBVM60.__vbaFpI4 0040B914 .-FF25 B4104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaExitPr>; MSVBVM60.__vbaExitProc 0040B91A .-FF25 24134000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarFor>; MSVBVM60.__vbaVarForNext 0040B920 .-FF25 90104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarTst>; MSVBVM60.__vbaVarTstLe 0040B926 .-FF25 64124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCmp>; MSVBVM60.__vbaVarCmpLt 0040B92C .-FF25 44124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarInt>; MSVBVM60.__vbaVarInt 0040B932 .-FF25 90124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCmp>; MSVBVM60.__vbaVarCmpEq 0040B938 .-FF25 B0114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarAnd>; MSVBVM60.__vbaVarAnd 0040B93E .-FF25 10114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaBoolVa>; MSVBVM60.__vbaBoolVarNull 0040B944 .-FF25 C8104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaOnErro>; MSVBVM60.__vbaOnError 0040B94A .-FF25 9C124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarAdd>; MSVBVM60.__vbaVarAdd 0040B950 .-FF25 8C124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaI4Var>>; MSVBVM60.__vbaI4Var 0040B956 .-FF25 88104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLenVar>; MSVBVM60.__vbaLenVar 0040B95C .-FF25 1C134000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaAryUnl>; MSVBVM60.__vbaAryUnlock 0040B962 .-FF25 08104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarSub>; MSVBVM60.__vbaVarSub 0040B968 .-FF25 24114000 JMP DWORD PTR DS:[<&MSVBVM60.#632>] ; MSVBVM60.rtcMidCharVar 0040B96E .-FF25 A8104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarInd>; MSVBVM60.__vbaVarIndexLoadRefLock 0040B974 .-FF25 E4104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarInd>; MSVBVM60.__vbaVarIndexLoad 0040B97A .-FF25 08124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaInStrV>; MSVBVM60.__vbaInStrVar 0040B980 .-FF25 B0104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarFor>; MSVBVM60.__vbaVarForInit 0040B986 .-FF25 88124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarSet>; MSVBVM60.__vbaVarSetVar 0040B98C .-FF25 BC124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCop>; MSVBVM60.__vbaVarCopy 0040B992 .-FF25 04134000 JMP DWORD PTR DS:[<&MSVBVM60.#544>] ; MSVBVM60.rtcGetMinuteOfHour 0040B998 .-FF25 F4124000 JMP DWORD PTR DS:[<&MSVBVM60.#543>] ; MSVBVM60.rtcGetHourOfDay 0040B99E .-FF25 1C104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarMov>; MSVBVM60.__vbaVarMove 0040B9A4 .-FF25 70104000 JMP DWORD PTR DS:[<&MSVBVM60.#553>] ; MSVBVM60.rtcGetYear 0040B9AA .-FF25 08134000 JMP DWORD PTR DS:[<&MSVBVM60.#545>] ; MSVBVM60.rtcGetMonthOfYear 0040B9B0 .-FF25 10134000 JMP DWORD PTR DS:[<&MSVBVM60.#546>] ; MSVBVM60.rtcGetPresentDate 0040B9B6 .-FF25 F0124000 JMP DWORD PTR DS:[<&MSVBVM60.#542>] ; MSVBVM60.rtcGetDayOfMonth 0040B9BC .-FF25 18124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaI2Var>>; MSVBVM60.__vbaI2Var 0040B9C2 .-FF25 78104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaSetSys>; MSVBVM60.__vbaSetSystemError 0040B9C8 .-FF25 8C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateId>; MSVBVM60.__vbaLateIdCallLd 0040B9CE .-FF25 DC104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaObjSet>; MSVBVM60.__vbaObjSetAddref 0040B9D4 .-FF25 D4124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateMe>; MSVBVM60.__vbaLateMemCallLd 0040B9DA .-FF25 04104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarTst>; MSVBVM60.__vbaVarTstGt 0040B9E0 .-FF25 30134000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFreeSt>; MSVBVM60.__vbaFreeStr 0040B9E6 .-FF25 34104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFreeVa>; MSVBVM60.__vbaFreeVarList 0040B9EC .-FF25 4C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarTst>; MSVBVM60.__vbaVarTstEq 0040B9F2 .-FF25 2C134000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFreeOb>; MSVBVM60.__vbaFreeObj 0040B9F8 .-FF25 54114000 JMP DWORD PTR DS:[<&MSVBVM60.#560>] ; MSVBVM60.rtcIsNull 0040B9FE .-FF25 B8124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarLat>; MSVBVM60.__vbaVarLateMemCallLd 0040BA04 .-FF25 7C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaCastOb>; MSVBVM60.__vbaCastObjVar 0040BA0A .-FF25 C4104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaObjSet>; MSVBVM60.__vbaObjSet 0040BA10 .-FF25 58124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrCop>; MSVBVM60.__vbaStrCopy 0040BA16 .-FF25 48104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFreeOb>; MSVBVM60.__vbaFreeObjList 0040BA1C .-FF25 7C104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaHresul>; MSVBVM60.__vbaHresultCheckObj 0040BA22 .-FF25 40124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaNew2>] ; MSVBVM60.__vbaNew2 0040BA28 .-FF25 54124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarSet>; MSVBVM60.__vbaVarSetObj 0040BA2E .-FF25 24104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFreeVa>; MSVBVM60.__vbaFreeVar 0040BA34 .-FF25 68114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaObjVar>; MSVBVM60.__vbaObjVar 0040BA3A .-FF25 98124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateMe>; MSVBVM60.__vbaLateMemCall 0040BA40 .-FF25 38114000 JMP DWORD PTR DS:[<&MSVBVM60.#528>] ; MSVBVM60.rtcUpperCaseVar 0040BA46 .-FF25 FC104000 JMP DWORD PTR DS:[<&MSVBVM60.#520>] ; MSVBVM60.rtcTrimVar 0040BA4C .-FF25 84124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarTst>; MSVBVM60.__vbaVarTstNe 0040BA52 .-FF25 60124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarNot>; MSVBVM60.__vbaVarNot 0040BA58 .-FF25 74114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarOr>>; MSVBVM60.__vbaVarOr 0040BA5E .-FF25 0C104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrI2>>; MSVBVM60.__vbaStrI2 0040BA64 .-FF25 28124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaErrorO>; MSVBVM60.__vbaErrorOverflow 0040BA6A .-FF25 54104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrErr>; MSVBVM60.__vbaStrErrVarCopy 0040BA70 .-FF25 6C104000 JMP DWORD PTR DS:[<&MSVBVM60.#660>] ; MSVBVM60.rtcVarFromFormatVar 0040BA76 .-FF25 2C104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLenBst>; MSVBVM60.__vbaLenBstr 0040BA7C .-FF25 3C124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaInStr>>; MSVBVM60.__vbaInStr 0040BA82 .-FF25 04124000 JMP DWORD PTR DS:[<&MSVBVM60.#717>] ; MSVBVM60.rtcStrConvVar2 0040BA88 .-FF25 4C104000 JMP DWORD PTR DS:[<&MSVBVM60.#516>] ; MSVBVM60.rtcAnsiValueBstr 0040BA8E .-FF25 1C124000 JMP DWORD PTR DS:[<&MSVBVM60.#537>] ; MSVBVM60.rtcBstrFromAnsi 0040BA94 .-FF25 D0114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaR4ErrV>; MSVBVM60.__vbaR4ErrVar 0040BA9A .-FF25 F4114000 JMP DWORD PTR DS:[<&MSVBVM60.#608>] ; MSVBVM60.rtcVarBstrFromAnsi 0040BAA0 .-FF25 AC114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateId>; MSVBVM60.__vbaLateIdCallSt 0040BAA6 .-FF25 18104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrI4>>; MSVBVM60.__vbaStrI4 0040BAAC .-FF25 F0114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarDiv>; MSVBVM60.__vbaVarDiv 0040BAB2 .-FF25 64114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaPrintO>; MSVBVM60.__vbaPrintObj 0040BAB8 .-FF25 28104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateId>; MSVBVM60.__vbaLateIdCall 0040BABE .-FF25 00134000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarLat>; MSVBVM60.__vbaVarLateMemCallSt 0040BAC4 .-FF25 88114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaR4Var>>; MSVBVM60.__vbaR4Var 0040BACA .-FF25 B8114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarMul>; MSVBVM60.__vbaVarMul 0040BAD0 .-FF25 FC124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateId>; MSVBVM60.__vbaLateIdSt 0040BAD6 .-FF25 60114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaNextEa>; MSVBVM60.__vbaNextEachCollVar 0040BADC .-FF25 3C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaExitEa>; MSVBVM60.__vbaExitEachColl 0040BAE2 .-FF25 F8104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaForEac>; MSVBVM60.__vbaForEachCollVar 0040BAE8 .-FF25 EC114000 JMP DWORD PTR DS:[<&MSVBVM60.#714>] ; MSVBVM60.rtcRound 0040BAEE .-FF25 50114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaR4Str>>; MSVBVM60.__vbaR4Str 0040BAF4 .-FF25 94114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrR8>>; MSVBVM60.__vbaStrR8 0040BAFA .-FF25 5C114000 JMP DWORD PTR DS:[<&MSVBVM60.#561>] ; MSVBVM60.rtcIsNumeric 0040BB00 .-FF25 F4104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaBoolVa>; MSVBVM60.__vbaBoolVar 0040BB06 .-FF25 E0124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaCastOb>; MSVBVM60.__vbaCastObj 0040BB0C .-FF25 A0114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaNew>] ; MSVBVM60.__vbaNew 0040BB12 .-FF25 60104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCmp>; MSVBVM60.__vbaVarCmpNe 0040BB18 .-FF25 38124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaR8Str>>; MSVBVM60.__vbaR8Str 0040BB1E .-FF25 80114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrR4>>; MSVBVM60.__vbaStrR4 0040BB24 .-FF25 F8114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCmp>; MSVBVM60.__vbaVarCmpLe 0040BB2A .-FF25 6C124000 JMP DWORD PTR DS:[<&MSVBVM60.#576>] ; MSVBVM60.rtcFileCopy 0040BB30 .-FF25 7C124000 JMP DWORD PTR DS:[<&MSVBVM60.#685>] ; MSVBVM60.rtcErrObj 0040BB36 .-FF25 5C124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaI4Str>>; MSVBVM60.__vbaI4Str 0040BB3C .-FF25 D0124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaR8IntI>; MSVBVM60.__vbaR8IntI2 0040BB42 .-FF25 18134000 JMP DWORD PTR DS:[<&MSVBVM60.#547>] ; MSVBVM60.rtcGetSecondOfMinute 0040BB48 .-FF25 20114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateMe>; MSVBVM60.__vbaLateMemStAd 0040BB4E .-FF25 A4104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaLateMe>; MSVBVM60.__vbaLateMemSt 0040BB54 .-FF25 50104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarInd>; MSVBVM60.__vbaVarIndexLoadRef 0040BB5A .-FF25 0C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarTst>; MSVBVM60.__vbaVarTstLt 0040BB60 .-FF25 14134000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFPInt>>; MSVBVM60.__vbaFPInt 0040BB66 .-FF25 CC124000 JMP DWORD PTR DS:[<&MSVBVM60.#617>] ; MSVBVM60.rtcLeftCharVar 0040BB6C .-FF25 20134000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFpCSng>; MSVBVM60.__vbaFpCSngR8 0040BB72 .-FF25 40104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFpCDbl>; MSVBVM60.__vbaFpCDblR8 0040BB78 .-FF25 84104000 JMP DWORD PTR DS:[<&MSVBVM60.#557>] ; MSVBVM60.rtcIsDate 0040BB7E .-FF25 E8114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaI2Str>>; MSVBVM60.__vbaI2Str 0040BB84 .-FF25 EC104000 JMP DWORD PTR DS:[<&MSVBVM60.#599>] ; MSVBVM60.rtcSendKeys 0040BB8A .-FF25 20104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarVar>; MSVBVM60.__vbaVarVargNofree 0040BB90 .-FF25 9C104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaAryDes>; MSVBVM60.__vbaAryDestruct 0040BB96 .-FF25 18114000 JMP DWORD PTR DS:[<&MSVBVM60.#631>] ; MSVBVM60.rtcMidCharBstr 0040BB9C .-FF25 DC124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaI2ErrV>; MSVBVM60.__vbaI2ErrVar 0040BBA2 .-FF25 34114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaGenera>; MSVBVM60.__vbaGenerateBoundsError 0040BBA8 .-FF25 48114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaAryCon>; MSVBVM60.__vbaAryConstruct2 0040BBAE .-FF25 EC124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrVar>; MSVBVM60.__vbaStrVarCopy 0040BBB4 .-FF25 34134000 JMP DWORD PTR DS:[<&MSVBVM60.#581>] ; MSVBVM60.rtcR8ValFromBstr 0040BBBA .-FF25 08114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFpR8>] ; MSVBVM60.__vbaFpR8 0040BBC0 .-FF25 E8104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFpR4>] ; MSVBVM60.__vbaFpR4 0040BBC6 .-FF25 68104000 JMP DWORD PTR DS:[<&MSVBVM60.#552>] ; MSVBVM60.rtcGetDayOfWeek 0040BBCC .-FF25 C8124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarSet>; MSVBVM60.__vbaVarSetObjAddref 0040BBD2 .-FF25 34124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarLat>; MSVBVM60.__vbaVarLateMemCallLdRf 0040BBD8 .-FF25 1C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaVarCmp>; MSVBVM60.__vbaVarCmpGt 0040BBDE .-FF25 20124000 JMP DWORD PTR DS:[<&MSVBVM60.#645>] ; MSVBVM60.rtcDir 0040BBE4 .-FF25 AC104000 JMP DWORD PTR DS:[<&MSVBVM60.#593>] ; MSVBVM60.rtcRandomNext 0040BBEA .-FF25 C0104000 JMP DWORD PTR DS:[<&MSVBVM60.#594>] ; MSVBVM60.rtcRandomize 0040BBF0 .-FF25 74104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrDat>; MSVBVM60.__vbaStrDate 0040BBF6 .-FF25 E8124000 JMP DWORD PTR DS:[<&MSVBVM60.#619>] ; MSVBVM60.rtcRightCharVar 0040BBFC .-FF25 2C114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFileCl>; MSVBVM60.__vbaFileClose 0040BC02 .-FF25 C4114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaPrintF>; MSVBVM60.__vbaPrintFile 0040BC08 .-FF25 2C124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFileOp>; MSVBVM60.__vbaFileOpen 0040BC0E .-FF25 30124000 JMP DWORD PTR DS:[<&MSVBVM60.#648>] ; MSVBVM60.rtcFreeFile 0040BC14 .-FF25 B4124000 JMP DWORD PTR DS:[<&MSVBVM60.#616>] ; MSVBVM60.rtcLeftCharBstr 0040BC1A .-FF25 C0114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaStrToU>; MSVBVM60.__vbaStrToUnicode 0040BC20 .-FF25 CC114000 JMP DWORD PTR DS:[<&MSVBVM60.#606>] ; MSVBVM60.rtcStringBstr 0040BC26 .-FF25 AC124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFpI2>] ; MSVBVM60.__vbaFpI2 0040BC2C .-FF25 E4114000 JMP DWORD PTR DS:[<&MSVBVM60.#607>] ; MSVBVM60.rtcStringVar 0040BC32 .-FF25 50124000 JMP DWORD PTR DS:[<&MSVBVM60.#573>] ; MSVBVM60.rtcHexVarFromVar 0040BC38 .-FF25 E0114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaR8ErrV>; MSVBVM60.__vbaR8ErrVar 0040BC3E .-FF25 BC104000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaFileCl>; MSVBVM60.__vbaFileCloseAll 0040BC44 .-FF25 B0124000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaUnkVar>; MSVBVM60.__vbaUnkVar 0040BC4A .-FF25 A8114000 JMP DWORD PTR DS:[<&MSVBVM60.__vbaObjIs>>; MSVBVM60.__vbaObjIs 0040BC50 .-FF25 B4114000 JMP DWORD PTR DS:[<&MSVBVM60.EVENT_SINK_>; MSVBVM60.EVENT_SINK_QueryInterface 0040BC56 .-FF25 30114000 JMP DWORD PTR DS:[<&MSVBVM60.EVENT_SINK_>; MSVBVM60.EVENT_SINK_AddRef 0040BC5C .-FF25 9C114000 JMP DWORD PTR DS:[<&MSVBVM60.EVENT_SINK_>; MSVBVM60.EVENT_SINK_Release 0040BC62 .-FF25 90114000 JMP DWORD PTR DS:[<&MSVBVM60.Zombie_GetT>; MSVBVM60.Zombie_GetTypeInfoCount 0040BC68 .-FF25 98104000 JMP DWORD PTR DS:[<&MSVBVM60.Zombie_GetT>; MSVBVM60.Zombie_GetTypeInfo 0040BC6E .-FF25 00104000 JMP DWORD PTR DS:[<&MSVBVM60.EVENT_SINK_>; MSVBVM60.EVENT_SINK_GetIDsOfNames 0040BC74 .-FF25 44104000 JMP DWORD PTR DS:[<&MSVBVM60.EVENT_SINK_>; MSVBVM60.EVENT_SINK_Invoke 0040BC7A .-FF25 D8104000 JMP DWORD PTR DS:[<&MSVBVM60.#303>] ; MSVBVM60.GetMemStr 0040BC80 .-FF25 04114000 JMP DWORD PTR DS:[<&MSVBVM60.#309>] ; MSVBVM60.PutMemStr 0040BC86 .-FF25 B8104000 JMP DWORD PTR DS:[<&MSVBVM60.#300>] ; MSVBVM60.GetMem2 0040BC8C .-FF25 F0104000 JMP DWORD PTR DS:[<&MSVBVM60.#306>] ; MSVBVM60.PutMem2 0040BC92 .-FF25 D0104000 JMP DWORD PTR DS:[<&MSVBVM60.#302>] ; MSVBVM60.GetMem8 0040BC98 .-FF25 00114000 JMP DWORD PTR DS:[<&MSVBVM60.#308>] ; MSVBVM60.PutMem8 0040BC9E $-FF25 80124000 JMP DWORD PTR DS:[<&MSVBVM60.#100>] ; MSVBVM60.ThunRTMain 0040BCA4 > $ 68 84277000 PUSH TPVinfor.00702784 ; ASCII "VB5!6&VB6ES.DLL" 0040BCA9 . E8 F0FFFFFF CALL <JMP.&MSVBVM60.#100> 0040BCAE . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCB0 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCB2 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCB4 . 3000 XOR BYTE PTR DS:[EAX],AL 0040BCB6 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCB8 . 58 POP EAX 0040BCB9 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCBB . 0040 00 ADD BYTE PTR DS:[EAX],AL 0040BCBE . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCC0 . F770 06 DIV DWORD PTR DS:[EAX+6] 0040BCC3 . 6F OUTS DX,DWORD PTR ES:[EDI] ; I/O command 0040BCC4 . 04 CE ADD AL,0CE 0040BCC6 . 50 PUSH EAX 0040BCC7 . 4F DEC EDI 0040BCC8 . 84AB AC41860D TEST BYTE PTR DS:[EBX+D8641AC],CH 0040BCCE . 1A55 00 SBB DL,BYTE PTR SS:[EBP] 0040BCD1 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCD3 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCD5 . 0001 ADD BYTE PTR DS:[ECX],AL 0040BCD7 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCD9 . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCDB . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCDD . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCDF . 0049 6E ADD BYTE PTR DS:[ECX+6E],CL 0040BCE2 . 66:6F OUTS DX,WORD PTR ES:[EDI] ; I/O command 0040BCE4 . 72 70 JB SHORT TPVinfor.0040BD56 0040BCE6 . 79 6D JNS SHORT TPVinfor.0040BD55 0040BCE8 . 65:54 PUSH ESP ; Superfluous prefix 0040BCEA . 50 PUSH EAX 0040BCEB . 56 PUSH ESI 0040BCEC . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCEE . 0000 ADD BYTE PTR DS:[EAX],AL 0040BCF0 . 53 PUSH EBX 0040BCF1 . 6F OUTS DX,DWORD PTR ES:[EDI] ; I/O command 0040BCF2 66 DB 66 ; CHAR 'f'
Gracias
|
|
|
|
|
|
|