[转贴]VB P-code粗略分析 - 信息科学 - 第2页小木虫论坛-学术科研互动平台

版块导航: 正在加载中...

客户端APP下载

论文辅导

申博辅导

登录注册

应《网络安全法》要求，自2017年10月1日起，未进行实名认证将不得使用互联网跟帖服务。为保障您的帐号能够正常使用，请尽快对帐号进行手机号验证，感谢您的理解与支持！

24小时热门版块排行榜

返回列表

当前主题已经存档。

sdlj8051

金虫 (著名写手)

应助: 0 (幼儿园)
贵宾: 0.1
金币: 1149.8
红花: 3
帖子: 2254
在线: 18.1小时
虫号: 71297
注册: 2005-05-30
专业: 电路与系统

****************************************
      Case "Y"
      strCode = strCode & "94"
****************************************
:00402D2C  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402D2F  1E6605             Branch             ;ESI=00402D4A
:00402D32  04B4FE             FLdRfVar          ;Push LOCAL_014C
******Possible String Ref To->"Z"
                           |
:00402D35  3A48FF4C00       LitVarStr          ;PushVarString ptr_004024FC
:00402D3A  5D                HardType          ;
:00402D3B  FB33             EqVarBool          ;
:00402D3D  1C6605             BranchF             ;If Pop=0 then ESI=00402D4A
:00402D40  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"73"
                           |
:00402D43  1B4D00             LitStr             ;Push ptr_00402504
:00402D46  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "Z"
      strCode = strCode & "73"
****************************************
:00402D47  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
****************************************
小写字符处理
****************************************
:00402D4A  2828FF0100       LitVarI2          ;PushVarInteger 0001
:00402D4F  6B66FF             FLdI2             ;Push WORD [LOCAL_009A]
:00402D52  E7                CI4UI1             ;
:00402D53  0478FF             FLdRfVar          ;Push LOCAL_0088
:00402D56  4D48FF0840       CVarRef             ;
:00402D5B  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:00402D5E  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:00402D63  0418FF             FLdRfVar          ;Push LOCAL_00E8
:00402D66  FDFE5CFF          CStrVarVal          ;
**********Reference To->msvbvm60.rtcAnsiValueBstr
                           |
:00402D6A  0B04000400       ImpAdCallI2       ;Call ptr_00401030; check stack 0004; Push EAX
:00402D6F  F461             LitI2_Byte          ;Push 61
:00402D71  DF                GeI2                ;
:00402D72  28E8FE0100       LitVarI2          ;PushVarInteger 0001
:00402D77  6B66FF             FLdI2             ;Push WORD [LOCAL_009A]
:00402D7A  E7                CI4UI1             ;
:00402D7B  0478FF             FLdRfVar          ;Push LOCAL_0088
:00402D7E  4D08FF0840       CVarRef             ;
:00402D83  04D8FE             FLdRfVar          ;Push LOCAL_0128
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:00402D86  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:00402D8B  04D8FE             FLdRfVar          ;Push LOCAL_0128
:00402D8E  FDFED4FE          CStrVarVal          ;
**********Reference To->msvbvm60.rtcAnsiValueBstr
                           |
:00402D92  0B04000400       ImpAdCallI2       ;Call ptr_00401030; check stack 0004; Push EAX
:00402D97  F47A             LitI2_Byte          ;Push 7A
:00402D99  D5                LeI2                ;
:00402D9A  C4                AndI4             ;
:00402D9B  3204005CFFD4FE    FFreeStr          ;Do SysFreeString [arg_n]; [arg_n]=0 0004/2 times ~ arg
:00402DA2  36080028FF18FFE8 FFreeVar          ;Free 0008/2 variants
:00402DAD  1CAA08             BranchF             ;If Pop=0 then ESI=0040308E
:00402DB0  2828FF0100       LitVarI2          ;PushVarInteger 0001
:00402DB5  6B66FF             FLdI2             ;Push WORD [LOCAL_009A]
:00402DB8  E7                CI4UI1             ;
:00402DB9  0478FF             FLdRfVar          ;Push LOCAL_0088
:00402DBC  4D48FF0840       CVarRef             ;
:00402DC1  0418FF             FLdRfVar          ;Push LOCAL_00E8

赞一下

回复此楼

11楼2006-08-23 15:59:02

已阅回复此楼关注TA 给TA发消息送TA红花 TA的回帖

sdlj8051

金虫 (著名写手)

应助: 0 (幼儿园)
贵宾: 0.1
金币: 1149.8
红花: 3
帖子: 2254
在线: 18.1小时
虫号: 71297
注册: 2005-05-30
专业: 电路与系统

**********Reference To->msvbvm60.rtcMidCharVar
                           |
:00402DC4  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:00402DC9  0418FF             FLdRfVar          ;Push LOCAL_00E8
:00402DCC  FCF6A4FE          FStVar             ;
:00402DD0  3528FF             FFree1Var          ;Free LOCAL_00D8
:00402DD3  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"a"
                           |
:00402DD6  3A48FF4E00       LitVarStr          ;PushVarString ptr_00402510
:00402DDB  5D                HardType          ;
:00402DDC  FB33             EqVarBool          ;
:00402DDE  1C0A06             BranchF             ;If Pop=0 then ESI=00402DEE
:00402DE1  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"10"
                           |
:00402DE4  1B4F00             LitStr             ;Push ptr_00402518
:00402DE7  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "a"
      strCode = strCode & "10"
****************************************
:00402DE8  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402DEB  1EAA08             Branch             ;ESI=0040308E
:00402DEE  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"b"
                           |
:00402DF1  3A48FF5000       LitVarStr          ;PushVarString ptr_00402524
:00402DF6  5D                HardType          ;
:00402DF7  FB33             EqVarBool          ;
:00402DF9  1C2506             BranchF             ;If Pop=0 then ESI=00402E09
:00402DFC  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"26"
                           |
:00402DFF  1B5100             LitStr             ;Push ptr_0040252C
:00402E02  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "b"
      strCode = strCode & "26"
****************************************
:00402E03  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402E06  1EAA08             Branch             ;ESI=0040308E
:00402E09  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"c"
                           |
:00402E0C  3A48FF5200       LitVarStr          ;PushVarString ptr_00402538
:00402E11  5D                HardType          ;
:00402E12  FB33             EqVarBool          ;
:00402E14  1C4006             BranchF             ;If Pop=0 then ESI=00402E24
:00402E17  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"18"
                           |
:00402E1A  1B5300             LitStr             ;Push ptr_00402540
:00402E1D  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "c"
      strCode = strCode & "18"
****************************************
:00402E1E  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402E21  1EAA08             Branch             ;ESI=0040308E
:00402E24  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"d"
                           |
:00402E27  3A48FF5400       LitVarStr          ;PushVarString ptr_0040254C
:00402E2C  5D                HardType          ;
:00402E2D  FB33             EqVarBool          ;
:00402E2F  1C5B06             BranchF             ;If Pop=0 then ESI=00402E3F
:00402E32  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"48"
                           |
:00402E35  1B5500             LitStr             ;Push ptr_00402554
:00402E38  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "d"
      strCode = strCode & "48"
****************************************
:00402E39  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402E3C  1EAA08             Branch             ;ESI=0040308E
:00402E3F  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"e"
                           |
:00402E42  3A48FF5600       LitVarStr          ;PushVarString ptr_00402560
:00402E47  5D                HardType          ;
:00402E48  FB33             EqVarBool          ;
:00402E4A  1C7606             BranchF             ;If Pop=0 then ESI=00402E5A
:00402E4D  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"36"
                           |
:00402E50  1B5700             LitStr             ;Push ptr_00402568
:00402E53  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "e"
      strCode = strCode & "36"
****************************************
:00402E54  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402E57  1EAA08             Branch             ;ESI=0040308E
:00402E5A  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"f"
                           |
:00402E5D  3A48FF5800       LitVarStr          ;PushVarString ptr_00402574
:00402E62  5D                HardType          ;
:00402E63  FB33             EqVarBool          ;
:00402E65  1C9106             BranchF             ;If Pop=0 then ESI=00402E75
:00402E68  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"17"
                           |
:00402E6B  1B5900             LitStr             ;Push ptr_0040257C
:00402E6E  2A                ConcatStr          ;vbaStrCat

赞一下

回复此楼

12楼2006-08-23 15:59:37

已阅回复此楼关注TA 给TA发消息送TA红花 TA的回帖

sdlj8051

金虫 (著名写手)

应助: 0 (幼儿园)
贵宾: 0.1
金币: 1149.8
红花: 3
帖子: 2254
在线: 18.1小时
虫号: 71297
注册: 2005-05-30
专业: 电路与系统

****************************************
      Case "f"
      strCode = strCode & "17"
****************************************
:00402E6F  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402E72  1EAA08             Branch             ;ESI=0040308E
:00402E75  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"g"
                           |
:00402E78  3A48FF5A00       LitVarStr          ;PushVarString ptr_00402588
:00402E7D  5D                HardType          ;
:00402E7E  FB33             EqVarBool          ;
:00402E80  1CAC06             BranchF             ;If Pop=0 then ESI=00402E90
:00402E83  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"27"
                           |
:00402E86  1B5B00             LitStr             ;Push ptr_00402590
:00402E89  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "g"
      strCode = strCode & "27"
****************************************
:00402E8A  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402E8D  1EAA08             Branch             ;ESI=0040308E
:00402E90  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"h"
                           |
:00402E93  3A48FF5C00       LitVarStr          ;PushVarString ptr_0040259C
:00402E98  5D                HardType          ;
:00402E99  FB33             EqVarBool          ;
:00402E9B  1CC706             BranchF             ;If Pop=0 then ESI=00402EAB
:00402E9E  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"19"
                           |
:00402EA1  1B5D00             LitStr             ;Push ptr_004025A4
:00402EA4  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "h"
      strCode = strCode & "19"
****************************************
:00402EA5  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402EA8  1EAA08             Branch             ;ESI=0040308E
:00402EAB  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"i"
                           |
:00402EAE  3A48FF5E00       LitVarStr          ;PushVarString ptr_004025B0
:00402EB3  5D                HardType          ;
:00402EB4  FB33             EqVarBool          ;
:00402EB6  1CE206             BranchF             ;If Pop=0 then ESI=00402EC6
:00402EB9  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"47"
                           |
:00402EBC  1B5F00             LitStr             ;Push ptr_004025B8
:00402EBF  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "i"
      strCode = strCode & "47"
****************************************
:00402EC0  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402EC3  1EAA08             Branch             ;ESI=0040308E
:00402EC6  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"j"
                           |
:00402EC9  3A48FF6000       LitVarStr          ;PushVarString ptr_004025C4
:00402ECE  5D                HardType          ;
:00402ECF  FB33             EqVarBool          ;
:00402ED1  1CFD06             BranchF             ;If Pop=0 then ESI=00402EE1
:00402ED4  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"39"
                           |
:00402ED7  1B6100             LitStr             ;Push ptr_004025CC
:00402EDA  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "j"
      strCode = strCode & "39"
****************************************
:00402EDB  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402EDE  1EAA08             Branch             ;ESI=0040308E
:00402EE1  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"k"
                           |
:00402EE4  3A48FF6200       LitVarStr          ;PushVarString ptr_004025D8
:00402EE9  5D                HardType          ;
:00402EEA  FB33             EqVarBool          ;
:00402EEC  1C1807             BranchF             ;If Pop=0 then ESI=00402EFC
:00402EEF  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"30"
                           |
:00402EF2  1B6300             LitStr             ;Push ptr_004025E0
:00402EF5  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "k"
      strCode = strCode & "30"
****************************************
:00402EF6  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402EF9  1EAA08             Branch             ;ESI=0040308E
:00402EFC  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"l"
                           |
:00402EFF  3A48FF6400       LitVarStr          ;PushVarString ptr_004025EC
:00402F04  5D                HardType          ;
:00402F05  FB33             EqVarBool          ;
:00402F07  1C3307             BranchF             ;If Pop=0 then ESI=00402F17
:00402F0A  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"28"
                           |
:00402F0D  1B6500             LitStr             ;Push ptr_004025F4
:00402F10  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "l"
      strCode = strCode & "28"
****************************************
:00402F11  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402F14  1EAA08             Branch             ;ESI=0040308E
:00402F17  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"m"
                           |
:00402F1A  3A48FF6600       LitVarStr          ;PushVarString ptr_00402600
:00402F1F  5D                HardType          ;
:00402F20  FB33             EqVarBool          ;
:00402F22  1C4E07             BranchF             ;If Pop=0 then ESI=00402F32
:00402F25  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"16"
                           |
:00402F28  1B6700             LitStr             ;Push ptr_00402608
:00402F2B  2A                ConcatStr          ;vbaStrCat

赞一下

回复此楼

13楼2006-08-23 16:00:03

已阅回复此楼关注TA 给TA发消息送TA红花 TA的回帖

sdlj8051

金虫 (著名写手)

应助: 0 (幼儿园)
贵宾: 0.1
金币: 1149.8
红花: 3
帖子: 2254
在线: 18.1小时
虫号: 71297
注册: 2005-05-30
专业: 电路与系统

****************************************
      Case "m"
      strCode = strCode & "16"
****************************************
:00402F2C  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402F2F  1EAA08             Branch             ;ESI=0040308E
:00402F32  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"n"
                           |
:00402F35  3A48FF6800       LitVarStr          ;PushVarString ptr_00402614
:00402F3A  5D                HardType          ;
:00402F3B  FB33             EqVarBool          ;
:00402F3D  1C6907             BranchF             ;If Pop=0 then ESI=00402F4D
:00402F40  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"20"
                           |
:00402F43  1B6900             LitStr             ;Push ptr_0040261C
:00402F46  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "n"
      strCode = strCode & "20"
****************************************
:00402F47  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402F4A  1EAA08             Branch             ;ESI=0040308E
:00402F4D  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"o"
                           |
:00402F50  3A48FF6A00       LitVarStr          ;PushVarString ptr_00402628
:00402F55  5D                HardType          ;
:00402F56  FB33             EqVarBool          ;
:00402F58  1C8407             BranchF             ;If Pop=0 then ESI=00402F68
:00402F5B  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"56"
                           |
:00402F5E  1B6B00             LitStr             ;Push ptr_00402630
:00402F61  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "o"
      strCode = strCode & "56"
****************************************
:00402F62  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402F65  1EAA08             Branch             ;ESI=0040308E
:00402F68  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"p"
                           |
:00402F6B  3A48FF6C00       LitVarStr          ;PushVarString ptr_0040263C
:00402F70  5D                HardType          ;
:00402F71  FB33             EqVarBool          ;
:00402F73  1C9F07             BranchF             ;If Pop=0 then ESI=00402F83
:00402F76  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"3f"
                           |
:00402F79  1B6D00             LitStr             ;Push ptr_00402644
:00402F7C  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "p"
      strCode = strCode & "3f"
****************************************
:00402F7D  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402F80  1EAA08             Branch             ;ESI=0040308E
:00402F83  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"q"
                           |
:00402F86  3A48FF6E00       LitVarStr          ;PushVarString ptr_00402650
:00402F8B  5D                HardType          ;
:00402F8C  FB33             EqVarBool          ;
:00402F8E  1CBA07             BranchF             ;If Pop=0 then ESI=00402F9E
:00402F91  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"29"
                           |
:00402F94  1B6F00             LitStr             ;Push ptr_00402658
:00402F97  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "q"
      strCode = strCode & "29"
****************************************
:00402F98  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402F9B  1EAA08             Branch             ;ESI=0040308E
:00402F9E  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"r"
                           |
:00402FA1  3A48FF7000       LitVarStr          ;PushVarString ptr_00402664
:00402FA6  5D                HardType          ;
:00402FA7  FB33             EqVarBool          ;
:00402FA9  1CD507             BranchF             ;If Pop=0 then ESI=00402FB9
:00402FAC  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"57"
                           |
:00402FAF  1B7100             LitStr             ;Push ptr_0040266C
:00402FB2  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "r"
      strCode = strCode & "57"
****************************************
:00402FB3  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402FB6  1EAA08             Branch             ;ESI=0040308E
:00402FB9  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"s"
                           |
:00402FBC  3A48FF7200       LitVarStr          ;PushVarString ptr_00402678
:00402FC1  5D                HardType          ;
:00402FC2  FB33             EqVarBool          ;
:00402FC4  1CF007             BranchF             ;If Pop=0 then ESI=00402FD4
:00402FC7  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"50"
                           |
:00402FCA  1B7300             LitStr             ;Push ptr_00402680
:00402FCD  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "s"
      strCode = strCode & "50"
****************************************
:00402FCE  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402FD1  1EAA08             Branch             ;ESI=0040308E
:00402FD4  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"t"
                           |
:00402FD7  3A48FF7400       LitVarStr          ;PushVarString ptr_0040268C
:00402FDC  5D                HardType          ;
:00402FDD  FB33             EqVarBool          ;
:00402FDF  1C0B08             BranchF             ;If Pop=0 then ESI=00402FEF
:00402FE2  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"59"
                           |
:00402FE5  1B7500             LitStr             ;Push ptr_00402694
:00402FE8  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "t"
      strCode = strCode & "59"
****************************************
:00402FE9  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00402FEC  1EAA08             Branch             ;ESI=0040308E
:00402FEF  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"u"
                           |
:00402FF2  3A48FF7600       LitVarStr          ;PushVarString ptr_004026A0
:00402FF7  5D                HardType          ;
:00402FF8  FB33             EqVarBool          ;
:00402FFA  1C2608             BranchF             ;If Pop=0 then ESI=0040300A
:00402FFD  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"38"
                           |
:00403000  1B7700             LitStr             ;Push ptr_004026A8
:00403003  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "u"
      strCode = strCode & "38"
****************************************
:00403004  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00403007  1EAA08             Branch             ;ESI=0040308E
:0040300A  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"v"
                           |
:0040300D  3A48FF7800       LitVarStr          ;PushVarString ptr_004026B4
:00403012  5D                HardType          ;
:00403013  FB33             EqVarBool          ;
:00403015  1C4108             BranchF             ;If Pop=0 then ESI=00403025
:00403018  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"46"
                           |
:0040301B  1B7900             LitStr             ;Push ptr_004026BC
:0040301E  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "v"
      strCode = strCode & "46"
****************************************
:0040301F  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00403022  1EAA08             Branch             ;ESI=0040308E
:00403025  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"w"
                           |
:00403028  3A48FF7A00       LitVarStr          ;PushVarString ptr_004026C8
:0040302D  5D                HardType          ;
:0040302E  FB33             EqVarBool          ;
:00403030  1C5C08             BranchF             ;If Pop=0 then ESI=00403040
:00403033  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"58"
                           |
:00403036  1B7B00             LitStr             ;Push ptr_004026D0
:00403039  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "w"
      strCode = strCode & "58"
****************************************
:0040303A  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:0040303D  1EAA08             Branch             ;ESI=0040308E
:00403040  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"x"
                           |
:00403043  3A48FF7C00       LitVarStr          ;PushVarString ptr_004026DC
:00403048  5D                HardType          ;
:00403049  FB33             EqVarBool          ;
:0040304B  1C7708             BranchF             ;If Pop=0 then ESI=0040305B
:0040304E  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]

赞一下

回复此楼

14楼2006-08-23 16:00:22

已阅回复此楼关注TA 给TA发消息送TA红花 TA的回帖

sdlj8051

金虫 (著名写手)

应助: 0 (幼儿园)
贵宾: 0.1
金币: 1149.8
红花: 3
帖子: 2254
在线: 18.1小时
虫号: 71297
注册: 2005-05-30
专业: 电路与系统

******Possible String Ref To->"40"
                           |
:00403051  1B7D00             LitStr             ;Push ptr_004026E4
:00403054  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "x"
      strCode = strCode & "40"
****************************************
:00403055  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00403058  1EAA08             Branch             ;ESI=0040308E
:0040305B  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"y"
                           |
:0040305E  3A48FF7E00       LitVarStr          ;PushVarString ptr_004026F0
:00403063  5D                HardType          ;
:00403064  FB33             EqVarBool          ;
:00403066  1C9208             BranchF             ;If Pop=0 then ESI=00403076
:00403069  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"94"
                           |
:0040306C  1B4B00             LitStr             ;Push ptr_004024F0
:0040306F  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "y"
      strCode = strCode & "94"
****************************************
:00403070  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop
:00403073  1EAA08             Branch             ;ESI=0040308E
:00403076  04A4FE             FLdRfVar          ;Push LOCAL_015C
******Possible String Ref To->"z"
                           |
:00403079  3A48FF7F00       LitVarStr          ;PushVarString ptr_004026F8
:0040307E  5D                HardType          ;
:0040307F  FB33             EqVarBool          ;
:00403081  1CAA08             BranchF             ;If Pop=0 then ESI=0040308E
:00403084  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
******Possible String Ref To->"37"
                           |
:00403087  1B8000             LitStr             ;Push ptr_00402700
:0040308A  2A                ConcatStr          ;vbaStrCat
****************************************
      Case "z"
      strCode = strCode & "37"
****************************************
:0040308B  3170FF             FStStr             ;SysFreeString [LOCAL_0090]; [LOCAL_0090]=Pop

##################################################################################################################
// 以上操作就是用NAME长度来循环，分别取每一个NAME字符，判断是数字或大小写字符，查表替换。
__________________________________________________________________________________________________________________

:0040308E  2828FF0100       LitVarI2          ;PushVarInteger 0001 \ 取长度
:00403093  6B66FF             FLdI2             ;Push WORD [LOCAL_009A] | 变量i的值
:00403096  E7                CI4UI1             ;                      | // MID函数参数入栈
:00403097  0478FF             FLdRfVar          ;Push LOCAL_0088       / 文本内容
:0040309A  4D48FF0840       CVarRef             ;// 创建临时变量
:0040309F  0418FF             FLdRfVar          ;Push LOCAL_00E8 // 加载临时变量
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:004030A2  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX // MID()
:004030A7  0418FF             FLdRfVar          ;Push LOCAL_00E8 \
:004030AA  FDFE5CFF          CStrVarVal          ;             / // ASC函数参数入栈
**********Reference To->msvbvm60.rtcAnsiValueBstr
                           |
:004030AE  0B04000400       ImpAdCallI2       ;Call ptr_00401030; check stack 0004; Push EAX // ASC()
:004030B3  F400             LitI2_Byte          ;Push 00 // 00入栈
:004030B5  DF                GeI2                ;// 大于等于比较操作
:004030B6  28E8FE0100       LitVarI2          ;PushVarInteger 0001 \
:004030BB  6B66FF             FLdI2             ;Push WORD [LOCAL_009A] | // MID函数参数入栈
:004030BE  E7                CI4UI1             ;                      |
:004030BF  0478FF             FLdRfVar          ;Push LOCAL_0088       /
:004030C2  4D08FF0840       CVarRef             ;// 创建临时变量
:004030C7  04D8FE             FLdRfVar          ;Push LOCAL_0128 // 加载临时变量
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:004030CA  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX //MID()
:004030CF  04D8FE             FLdRfVar          ;Push LOCAL_0128 \
:004030D2  FDFED4FE          CStrVarVal          ;             / // ASC函数参数入栈
**********Reference To->msvbvm60.rtcAnsiValueBstr
                           |
:004030D6  0B04000400       ImpAdCallI2       ;Call ptr_00401030; check stack 0004; Push EAX //ASC()
:004030DB  F42F             LitI2_Byte          ;Push 2F // 47入栈
:004030DD  D5                LeI2                ;// 小于等于比较操作
:004030DE  C4                AndI4             ;// AND
:004030DF  3204005CFFD4FE    FFreeStr          ;Do SysFreeString [arg_n]; [arg_n]=0 0004/2 times ~ arg
:004030E6  36080028FF18FFE8 FFreeVar          ;Free 0008/2 variants// 释放临时变量
:004030F1  1C2609             BranchF             ;If Pop=0 then ESI=0040310A //条件为假则跳0040310A
******Possible String Ref To->""
                           |
:004030F4  1B0200             LitStr             ;Push ptr_00402228 // NULL字符入栈
:004030F7  21                FLdPrThis          ;[SR]=[stack2]             \
:004030F8  0F0403             VCallAd             ;Return the control index 03 / // 获得窗体句柄
:004030FB  1960FF             FStAdFunc          ;// 取propput过程地址
:004030FE  0860FF             FLdPr             ;[SR]=[LOCAL_00A0] //加载过程
***********Reference To:[propput]TextBox.Text // propput,TextBox.Text的赋值过程
                           |
:00403101  0DA4000300       VCallHresult       ;Call ptr_0040222C // 给TextBox.Text赋值
:00403106  1A60FF             FFree1Ad          ;Push [LOCAL_00A0]; Call [[[LOCAL_00A0]]+8]; [[LOCAL_00A0]]=0 // 释放加载过程空间
:00403109  13                ExitProcHresult    ;// 退出过程

****************************************
If Asc(Mid(name, i, 1)) >= 0 And Asc(Mid(name, i, 1)) <= 47 Then
   Text1.Text = ""
   Exit Sub

End If
****************************************

:0040310A  2828FF0100       LitVarI2          ;PushVarInteger 0001 \
:0040310F  6B66FF             FLdI2             ;Push WORD [LOCAL_009A] | // MID函数参数入栈
:00403112  E7                CI4UI1             ;                      |
:00403113  0478FF             FLdRfVar          ;Push LOCAL_0088       /
:00403116  4D48FF0840       CVarRef             ;// 创建临时变量
:0040311B  0418FF             FLdRfVar          ;Push LOCAL_00E8 // 加载临时变量
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:0040311E  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX // MID()
:00403123  0418FF             FLdRfVar          ;Push LOCAL_00E8 \
:00403126  FDFE5CFF          CStrVarVal          ;             / // ASC函数参数入栈
**********Reference To->msvbvm60.rtcAnsiValueBstr
                           |
:0040312A  0B04000400       ImpAdCallI2       ;Call ptr_00401030; check stack 0004; Push EAX // ASC()
:0040312F  F43A             LitI2_Byte          ;Push 3A // 58入栈
:00403131  DF                GeI2                ;// 大于等于比较操作
:00403132  28E8FE0100       LitVarI2          ;PushVarInteger 0001 \
:00403137  6B66FF             FLdI2             ;Push WORD [LOCAL_009A] | // MID函数参数入栈
:0040313A  E7                CI4UI1             ;                      |
:0040313B  0478FF             FLdRfVar          ;Push LOCAL_0088       /
:0040313E  4D08FF0840       CVarRef             ;// 创建临时变量
:00403143  04D8FE             FLdRfVar          ;Push LOCAL_0128 // 加载临时变量
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:00403146  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX //MID()
:0040314B  04D8FE             FLdRfVar          ;Push LOCAL_0128 \
:0040314E  FDFED4FE          CStrVarVal          ;             / // ASC函数参数入栈
**********Reference To->msvbvm60.rtcAnsiValueBstr
                           |
:00403152  0B04000400       ImpAdCallI2       ;Call ptr_00401030; check stack 0004; Push EAX //ASC()
:00403157  F440             LitI2_Byte          ;Push 40 // 64入栈
:00403159  D5                LeI2                ;// 小于等于比较操作
:0040315A  C4                AndI4             ;// AND
:0040315B  3204005CFFD4FE    FFreeStr          ;Do SysFreeString [arg_n]; [arg_n]=0 0004/2 times ~ arg
:00403162  36080028FF18FFE8 FFreeVar          ;Free 0008/2 variants // 释放临时变量
:0040316D  1CA209             BranchF             ;If Pop=0 then ESI=00403186 //条件为假则跳00403186
******Possible String Ref To->""
                           |
:00403170  1B0200             LitStr             ;Push ptr_00402228 // NULL字符入栈
:00403173  21                FLdPrThis          ;[SR]=[stack2]             \
:00403174  0F0403             VCallAd             ;Return the control index 03 / // 获得窗体句柄
:00403177  1960FF             FStAdFunc          ;// 取propput过程地址
:0040317A  0860FF             FLdPr             ;[SR]=[LOCAL_00A0] //加载过程
***********Reference To:[propput]TextBox.Text // propput,TextBox.Text的赋值过程
                           |
:0040317D  0DA4000300       VCallHresult       ;Call ptr_0040222C // 给TextBox.Text赋值
:00403182  1A60FF             FFree1Ad          ;Push [LOCAL_00A0]; Call [[[LOCAL_00A0]]+8]; [[LOCAL_00A0]]=0 // 释放加载过程空间
:00403185  13                ExitProcHresult    ;// 退出过程
****************************************
If Asc(Mid(name, i, 1)) >= 58 And Asc(Mid(name, i, 1)) <= 64 Then
   Text1.Text = ""
   Exit Sub

End If

赞一下

回复此楼

15楼2006-08-23 16:00:49

已阅回复此楼关注TA 给TA发消息送TA红花 TA的回帖

sdlj8051

金虫 (著名写手)

应助: 0 (幼儿园)
贵宾: 0.1
金币: 1149.8
红花: 3
帖子: 2254
在线: 18.1小时
虫号: 71297
注册: 2005-05-30
专业: 电路与系统

****************************************

######################下面和上面的两个过程是一样的判断NAME中是否是字母或字符不是则给TEXT赋空值退出过程######################
____________________________________________________________________________________________________________________________
:00403186  2828FF0100       LitVarI2          ;PushVarInteger 0001
:0040318B  6B66FF             FLdI2             ;Push WORD [LOCAL_009A]
:0040318E  E7                CI4UI1             ;
:0040318F  0478FF             FLdRfVar          ;Push LOCAL_0088
:00403192  4D48FF0840       CVarRef             ;
:00403197  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:0040319A  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:0040319F  0418FF             FLdRfVar          ;Push LOCAL_00E8
:004031A2  FDFE5CFF          CStrVarVal          ;
**********Reference To->msvbvm60.rtcAnsiValueBstr
                           |
:004031A6  0B04000400       ImpAdCallI2       ;Call ptr_00401030; check stack 0004; Push EAX
:004031AB  F45B             LitI2_Byte          ;Push 5B
:004031AD  DF                GeI2                ;
:004031AE  28E8FE0100       LitVarI2          ;PushVarInteger 0001
:004031B3  6B66FF             FLdI2             ;Push WORD [LOCAL_009A]
:004031B6  E7                CI4UI1             ;
:004031B7  0478FF             FLdRfVar          ;Push LOCAL_0088
:004031BA  4D08FF0840       CVarRef             ;
:004031BF  04D8FE             FLdRfVar          ;Push LOCAL_0128
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:004031C2  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:004031C7  04D8FE             FLdRfVar          ;Push LOCAL_0128
:004031CA  FDFED4FE          CStrVarVal          ;
**********Reference To->msvbvm60.rtcAnsiValueBstr
                           |
:004031CE  0B04000400       ImpAdCallI2       ;Call ptr_00401030; check stack 0004; Push EAX
:004031D3  F460             LitI2_Byte          ;Push 60
:004031D5  D5                LeI2                ;
:004031D6  C4                AndI4             ;
:004031D7  3204005CFFD4FE    FFreeStr          ;Do SysFreeString [arg_n]; [arg_n]=0 0004/2 times ~ arg
:004031DE  36080028FF18FFE8 FFreeVar          ;Free 0008/2 variants
:004031E9  1C1E0A             BranchF             ;If Pop=0 then ESI=00403202
******Possible String Ref To->""
                           |
:004031EC  1B0200             LitStr             ;Push ptr_00402228
:004031EF  21                FLdPrThis          ;[SR]=[stack2]
:004031F0  0F0403             VCallAd             ;Return the control index 03
:004031F3  1960FF             FStAdFunc          ;
:004031F6  0860FF             FLdPr             ;[SR]=[LOCAL_00A0]
***********Reference To:[propput]TextBox.Text
                           |
:004031F9  0DA4000300       VCallHresult       ;Call ptr_0040222C
:004031FE  1A60FF             FFree1Ad          ;Push [LOCAL_00A0]; Call [[[LOCAL_00A0]]+8]; [[LOCAL_00A0]]=0
:00403201  13                ExitProcHresult    ;
****************************************
If Asc(Mid(name, i, 1)) >= 91 And Asc(Mid(name, i, 1)) <= 96 Then
   Text1.Text = ""
   Exit Sub

End If
****************************************
:00403202  2828FF0100       LitVarI2          ;PushVarInteger 0001
:00403207  6B66FF             FLdI2             ;Push WORD [LOCAL_009A]
:0040320A  E7                CI4UI1             ;
:0040320B  0478FF             FLdRfVar          ;Push LOCAL_0088
:0040320E  4D48FF0840       CVarRef             ;
:00403213  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:00403216  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:0040321B  0418FF             FLdRfVar          ;Push LOCAL_00E8
:0040321E  FDFE5CFF          CStrVarVal          ;
**********Reference To->msvbvm60.rtcAnsiValueBstr
                           |
:00403222  0B04000400       ImpAdCallI2       ;Call ptr_00401030; check stack 0004; Push EAX
:00403227  F47B             LitI2_Byte          ;Push 7B
:00403229  DF                GeI2                ;
:0040322A  28E8FE0100       LitVarI2          ;PushVarInteger 0001
:0040322F  6B66FF             FLdI2             ;Push WORD [LOCAL_009A]
:00403232  E7                CI4UI1             ;
:00403233  0478FF             FLdRfVar          ;Push LOCAL_0088
:00403236  4D08FF0840       CVarRef             ;
:0040323B  04D8FE             FLdRfVar          ;Push LOCAL_0128
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:0040323E  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:00403243  04D8FE             FLdRfVar          ;Push LOCAL_0128
:00403246  FDFED4FE          CStrVarVal          ;
**********Reference To->msvbvm60.rtcAnsiValueBstr
                           |
:0040324A  0B04000400       ImpAdCallI2       ;Call ptr_00401030; check stack 0004; Push EAX
:0040324F  F3FF00             LitI2             ;Push 00FF
:00403252  D5                LeI2                ;
:00403253  C4                AndI4             ;
:00403254  3204005CFFD4FE    FFreeStr          ;Do SysFreeString [arg_n]; [arg_n]=0 0004/2 times ~ arg
:0040325B  36080028FF18FFE8 FFreeVar          ;Free 0008/2 variants
:00403266  1C9B0A             BranchF             ;If Pop=0 then ESI=0040327F
******Possible String Ref To->""
                           |
:00403269  1B0200             LitStr             ;Push ptr_00402228
:0040326C  21                FLdPrThis          ;[SR]=[stack2]
:0040326D  0F0403             VCallAd             ;Return the control index 03
:00403270  1960FF             FStAdFunc          ;
:00403273  0860FF             FLdPr             ;[SR]=[LOCAL_00A0]
***********Reference To:[propput]TextBox.Text
                           |
:00403276  0DA4000300       VCallHresult       ;Call ptr_0040222C
:0040327B  1A60FF             FFree1Ad          ;Push [LOCAL_00A0]; Call [[[LOCAL_00A0]]+8]; [[LOCAL_00A0]]=0
:0040327E  13                ExitProcHresult    ;
****************************************
If Asc(Mid(name, i, 1)) >= 123 And Asc(Mid(name, i, 1)) <= 255 Then
   Text1.Text = ""
   Exit Sub

End If
****************************************

############################################################################################################################
____________________________________________________________________________________________________________________________

:0040327F  0466FF             FLdRfVar          ;Push LOCAL_009A
:00403282  6458FF8E00       NextI2             ;// i循环到这里结束

:00403287  F401             LitI2_Byte          ;Push 01
:00403289  0464FF             FLdRfVar          ;Push LOCAL_009C
:0040328C  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:0040328F  4A                FnLenStr          ;vbaLenBstr
:00403290  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:00403291  FE63A0FEF30A       ForI2             ;// FOR J 循环

:00403297  2828FF0100       LitVarI2          ;PushVarInteger 0001 \ 取长度
:0040329C  6B64FF             FLdI2             ;Push WORD [LOCAL_009C] | 变量j的值
:0040329F  E7                CI4UI1             ;                      | // MID函数参数入栈
:004032A0  0470FF             FLdRfVar          ;Push LOCAL_0090       / 文本内容
:004032A3  4D48FF0840       CVarRef             ;// 创建临时变量
:004032A8  0418FF             FLdRfVar          ;Push LOCAL_00E8 // 加载临时变量
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:004032AB  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX // MID()
:004032B0  0418FF             FLdRfVar          ;Push LOCAL_00E8 // 将MID()的字符入栈
******Possible String Ref To->"f"
                           |
:004032B3  3A08FF5800       LitVarStr          ;PushVarString ptr_00402574 // "f"入栈
:004032B8  5D                HardType          ;
:004032B9  FB33             EqVarBool          ;比较字符是否相等
:004032BB  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:004032C2  1CEB0A             BranchF             ;If Pop=0 then ESI=004032CF // 不相等则跳004032CF       \ 到下面也就是不做字符连接
:004032C5  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C] // 加载code变量                |

赞一下

回复此楼

16楼2006-08-23 16:01:22

已阅回复此楼关注TA 给TA发消息送TA红花 TA的回帖

sdlj8051

金虫 (著名写手)

应助: 0 (幼儿园)
贵宾: 0.1
金币: 1149.8
红花: 3
帖子: 2254
在线: 18.1小时
虫号: 71297
注册: 2005-05-30
专业: 电路与系统

******Possible String Ref To->"f"
                           |
:004032C8  1B5800             LitStr             ;Push ptr_00402574 // "f"入栈                         |
:004032CB  2A                ConcatStr          ;vbaStrCat //连接字符串                               |
:004032CC  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop //释放空间 |
:004032CF  0464FF             FLdRfVar          ;Push LOCAL_009C                                        /
:004032D2  64A0FEB30A       NextI2             ;// 循环结束
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "f" Then code = code & "f"
  Next j
********************************************************往下看看下面分别是edcba9876543210的判断结构
********************************************************如果mid到的字符等于判断的字符则作连接
********************************************************作完这些后我们到最后看看，记住[LOCAL_008C]=code变量
:004032D7  F401             LitI2_Byte          ;Push 01
:004032D9  0464FF             FLdRfVar          ;Push LOCAL_009C
:004032DC  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:004032DF  4A                FnLenStr          ;vbaLenBstr
:004032E0  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:004032E1  FE639CFE430B       ForI2             ;
:004032E7  2828FF0100       LitVarI2          ;PushVarInteger 0001
:004032EC  6B64FF             FLdI2             ;Push WORD [LOCAL_009C]
:004032EF  E7                CI4UI1             ;
:004032F0  0470FF             FLdRfVar          ;Push LOCAL_0090
:004032F3  4D48FF0840       CVarRef             ;
:004032F8  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:004032FB  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:00403300  0418FF             FLdRfVar          ;Push LOCAL_00E8
******Possible String Ref To->"e"
                           |
:00403303  3A08FF5600       LitVarStr          ;PushVarString ptr_00402560
:00403308  5D                HardType          ;
:00403309  FB33             EqVarBool          ;
:0040330B  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:00403312  1C3B0B             BranchF             ;If Pop=0 then ESI=0040331F
:00403315  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C]
******Possible String Ref To->"e"
                           |
:00403318  1B5600             LitStr             ;Push ptr_00402560
:0040331B  2A                ConcatStr          ;vbaStrCat
:0040331C  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop
:0040331F  0464FF             FLdRfVar          ;Push LOCAL_009C
:00403322  649CFE030B       NextI2
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "e" Then code = code & "e"
  Next j
****************************************
:00403327  F401             LitI2_Byte          ;Push 01
:00403329  0464FF             FLdRfVar          ;Push LOCAL_009C
:0040332C  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:0040332F  4A                FnLenStr          ;vbaLenBstr
:00403330  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:00403331  FE6398FE930B       ForI2             ;
:00403337  2828FF0100       LitVarI2          ;PushVarInteger 0001
:0040333C  6B64FF             FLdI2             ;Push WORD [LOCAL_009C]
:0040333F  E7                CI4UI1             ;
:00403340  0470FF             FLdRfVar          ;Push LOCAL_0090
:00403343  4D48FF0840       CVarRef             ;
:00403348  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:0040334B  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:00403350  0418FF             FLdRfVar          ;Push LOCAL_00E8
******Possible String Ref To->"d"
                           |
:00403353  3A08FF5400       LitVarStr          ;PushVarString ptr_0040254C
:00403358  5D                HardType          ;
:00403359  FB33             EqVarBool          ;
:0040335B  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:00403362  1C8B0B             BranchF             ;If Pop=0 then ESI=0040336F
:00403365  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C]
******Possible String Ref To->"d"
                           |
:00403368  1B5400             LitStr             ;Push ptr_0040254C
:0040336B  2A                ConcatStr          ;vbaStrCat
:0040336C  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop
:0040336F  0464FF             FLdRfVar          ;Push LOCAL_009C
:00403372  6498FE530B       NextI2             ;
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "d" Then code = code & "d"
  Next j
****************************************
:00403377  F401             LitI2_Byte          ;Push 01
:00403379  0464FF             FLdRfVar          ;Push LOCAL_009C
:0040337C  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:0040337F  4A                FnLenStr          ;vbaLenBstr
:00403380  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:00403381  FE6394FEE30B       ForI2             ;
:00403387  2828FF0100       LitVarI2          ;PushVarInteger 0001
:0040338C  6B64FF             FLdI2             ;Push WORD [LOCAL_009C]
:0040338F  E7                CI4UI1             ;
:00403390  0470FF             FLdRfVar          ;Push LOCAL_0090
:00403393  4D48FF0840       CVarRef             ;
:00403398  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:0040339B  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:004033A0  0418FF             FLdRfVar          ;Push LOCAL_00E8
******Possible String Ref To->"c"
                           |
:004033A3  3A08FF5200       LitVarStr          ;PushVarString ptr_00402538
:004033A8  5D                HardType          ;
:004033A9  FB33             EqVarBool          ;
:004033AB  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:004033B2  1CDB0B             BranchF             ;If Pop=0 then ESI=004033BF
:004033B5  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C]
******Possible String Ref To->"c"
                           |
:004033B8  1B5200             LitStr             ;Push ptr_00402538
:004033BB  2A                ConcatStr          ;vbaStrCat
:004033BC  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop
:004033BF  0464FF             FLdRfVar          ;Push LOCAL_009C
:004033C2  6494FEA30B       NextI2             ;
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "c" Then code = code & "c"
  Next j
****************************************
:004033C7  F401             LitI2_Byte          ;Push 01
:004033C9  0464FF             FLdRfVar          ;Push LOCAL_009C
:004033CC  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:004033CF  4A                FnLenStr          ;vbaLenBstr
:004033D0  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:004033D1  FE6390FE330C       ForI2             ;
:004033D7  2828FF0100       LitVarI2          ;PushVarInteger 0001
:004033DC  6B64FF             FLdI2             ;Push WORD [LOCAL_009C]
:004033DF  E7                CI4UI1             ;
:004033E0  0470FF             FLdRfVar          ;Push LOCAL_0090
:004033E3  4D48FF0840       CVarRef             ;
:004033E8  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:004033EB  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:004033F0  0418FF             FLdRfVar          ;Push LOCAL_00E8
******Possible String Ref To->"b"
                           |
:004033F3  3A08FF5000       LitVarStr          ;PushVarString ptr_00402524
:004033F8  5D                HardType          ;
:004033F9  FB33             EqVarBool          ;
:004033FB  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:00403402  1C2B0C             BranchF             ;If Pop=0 then ESI=0040340F
:00403405  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C]
******Possible String Ref To->"b"
                           |
:00403408  1B5000             LitStr             ;Push ptr_00402524
:0040340B  2A                ConcatStr          ;vbaStrCat
:0040340C  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop
:0040340F  0464FF             FLdRfVar          ;Push LOCAL_009C
:00403412  6490FEF30B       NextI2             ;
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "b" Then code = code & "b"
  Next j
****************************************
:00403417  F401             LitI2_Byte          ;Push 01
:00403419  0464FF             FLdRfVar          ;Push LOCAL_009C
:0040341C  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:0040341F  4A                FnLenStr          ;vbaLenBstr
:00403420  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:00403421  FE638CFE830C       ForI2             ;
:00403427  2828FF0100       LitVarI2          ;PushVarInteger 0001
:0040342C  6B64FF             FLdI2             ;Push WORD [LOCAL_009C]
:0040342F  E7                CI4UI1             ;
:00403430  0470FF             FLdRfVar          ;Push LOCAL_0090
:00403433  4D48FF0840       CVarRef             ;
:00403438  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:0040343B  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:00403440  0418FF             FLdRfVar          ;Push LOCAL_00E8
******Possible String Ref To->"a"
                           |
:00403443  3A08FF4E00       LitVarStr          ;PushVarString ptr_00402510
:00403448  5D                HardType          ;
:00403449  FB33             EqVarBool          ;
:0040344B  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:00403452  1C7B0C             BranchF             ;If Pop=0 then ESI=0040345F
:00403455  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C]
******Possible String Ref To->"a"
                           |
:00403458  1B4E00             LitStr             ;Push ptr_00402510
:0040345B  2A                ConcatStr          ;vbaStrCat
:0040345C  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop
:0040345F  0464FF             FLdRfVar          ;Push LOCAL_009C
:00403462  648CFE430C       NextI2             ;
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "a" Then code = code & "a"
  Next j

赞一下

回复此楼

17楼2006-08-23 16:01:40

已阅回复此楼关注TA 给TA发消息送TA红花 TA的回帖

sdlj8051

金虫 (著名写手)

应助: 0 (幼儿园)
贵宾: 0.1
金币: 1149.8
红花: 3
帖子: 2254
在线: 18.1小时
虫号: 71297
注册: 2005-05-30
专业: 电路与系统

****************************************
:00403467  F401             LitI2_Byte          ;Push 01
:00403469  0464FF             FLdRfVar          ;Push LOCAL_009C
:0040346C  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:0040346F  4A                FnLenStr          ;vbaLenBstr
:00403470  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:00403471  FE6388FED30C       ForI2             ;
:00403477  2828FF0100       LitVarI2          ;PushVarInteger 0001
:0040347C  6B64FF             FLdI2             ;Push WORD [LOCAL_009C]
:0040347F  E7                CI4UI1             ;
:00403480  0470FF             FLdRfVar          ;Push LOCAL_0090
:00403483  4D48FF0840       CVarRef             ;
:00403488  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:0040348B  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:00403490  0418FF             FLdRfVar          ;Push LOCAL_00E8
******Possible String Ref To->"9"
                           |
:00403493  3A08FF1600       LitVarStr          ;PushVarString ptr_004022E0
:00403498  5D                HardType          ;
:00403499  FB33             EqVarBool          ;
:0040349B  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:004034A2  1CCB0C             BranchF             ;If Pop=0 then ESI=004034AF
:004034A5  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C]
******Possible String Ref To->"9"
                           |
:004034A8  1B1600             LitStr             ;Push ptr_004022E0
:004034AB  2A                ConcatStr          ;vbaStrCat
:004034AC  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop
:004034AF  0464FF             FLdRfVar          ;Push LOCAL_009C
:004034B2  6488FE930C       NextI2             ;
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "9" Then code = code & "9"
  Next j
****************************************
:004034B7  F401             LitI2_Byte          ;Push 01
:004034B9  0464FF             FLdRfVar          ;Push LOCAL_009C
:004034BC  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:004034BF  4A                FnLenStr          ;vbaLenBstr
:004034C0  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:004034C1  FE6384FE230D       ForI2             ;
:004034C7  2828FF0100       LitVarI2          ;PushVarInteger 0001
:004034CC  6B64FF             FLdI2             ;Push WORD [LOCAL_009C]
:004034CF  E7                CI4UI1             ;
:004034D0  0470FF             FLdRfVar          ;Push LOCAL_0090
:004034D3  4D48FF0840       CVarRef             ;
:004034D8  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:004034DB  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:004034E0  0418FF             FLdRfVar          ;Push LOCAL_00E8
******Possible String Ref To->"8"
                           |
:004034E3  3A08FF1400       LitVarStr          ;PushVarString ptr_004022CC
:004034E8  5D                HardType          ;
:004034E9  FB33             EqVarBool          ;
:004034EB  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:004034F2  1C1B0D             BranchF             ;If Pop=0 then ESI=004034FF
:004034F5  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C]
******Possible String Ref To->"8"
                           |
:004034F8  1B1400             LitStr             ;Push ptr_004022CC
:004034FB  2A                ConcatStr          ;vbaStrCat
:004034FC  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop
:004034FF  0464FF             FLdRfVar          ;Push LOCAL_009C
:00403502  6484FEE30C       NextI2             ;
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "8" Then code = code & "8"
  Next j
****************************************
:00403507  F401             LitI2_Byte          ;Push 01
:00403509  0464FF             FLdRfVar          ;Push LOCAL_009C
:0040350C  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:0040350F  4A                FnLenStr          ;vbaLenBstr
:00403510  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:00403511  FE6380FE730D       ForI2             ;
:00403517  2828FF0100       LitVarI2          ;PushVarInteger 0001
:0040351C  6B64FF             FLdI2             ;Push WORD [LOCAL_009C]
:0040351F  E7                CI4UI1             ;
:00403520  0470FF             FLdRfVar          ;Push LOCAL_0090
:00403523  4D48FF0840       CVarRef             ;
:00403528  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:0040352B  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:00403530  0418FF             FLdRfVar          ;Push LOCAL_00E8
******Possible String Ref To->"7"
                           |
:00403533  3A08FF1200       LitVarStr          ;PushVarString ptr_004022B8
:00403538  5D                HardType          ;
:00403539  FB33             EqVarBool          ;
:0040353B  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:00403542  1C6B0D             BranchF             ;If Pop=0 then ESI=0040354F
:00403545  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C]
******Possible String Ref To->"7"
                           |
:00403548  1B1200             LitStr             ;Push ptr_004022B8
:0040354B  2A                ConcatStr          ;vbaStrCat
:0040354C  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop
:0040354F  0464FF             FLdRfVar          ;Push LOCAL_009C
:00403552  6480FE330D       NextI2             ;
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "7" Then code = code & "7"
  Next j
****************************************
:00403557  F401             LitI2_Byte          ;Push 01
:00403559  0464FF             FLdRfVar          ;Push LOCAL_009C
:0040355C  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:0040355F  4A                FnLenStr          ;vbaLenBstr
:00403560  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:00403561  FE637CFEC30D       ForI2             ;
:00403567  2828FF0100       LitVarI2          ;PushVarInteger 0001
:0040356C  6B64FF             FLdI2             ;Push WORD [LOCAL_009C]
:0040356F  E7                CI4UI1             ;
:00403570  0470FF             FLdRfVar          ;Push LOCAL_0090
:00403573  4D48FF0840       CVarRef             ;
:00403578  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:0040357B  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:00403580  0418FF             FLdRfVar          ;Push LOCAL_00E8
******Possible String Ref To->"6"
                           |
:00403583  3A08FF1000       LitVarStr          ;PushVarString ptr_004022A4
:00403588  5D                HardType          ;
:00403589  FB33             EqVarBool          ;
:0040358B  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:00403592  1CBB0D             BranchF             ;If Pop=0 then ESI=0040359F
:00403595  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C]
******Possible String Ref To->"6"
                           |
:00403598  1B1000             LitStr             ;Push ptr_004022A4
:0040359B  2A                ConcatStr          ;vbaStrCat
:0040359C  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop
:0040359F  0464FF             FLdRfVar          ;Push LOCAL_009C
:004035A2  647CFE830D       NextI2             ;
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "6" Then code = code & "6"
  Next j
****************************************
:004035A7  F401             LitI2_Byte          ;Push 01
:004035A9  0464FF             FLdRfVar          ;Push LOCAL_009C
:004035AC  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:004035AF  4A                FnLenStr          ;vbaLenBstr
:004035B0  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:004035B1  FE6378FE130E       ForI2             ;
:004035B7  2828FF0100       LitVarI2          ;PushVarInteger 0001
:004035BC  6B64FF             FLdI2             ;Push WORD [LOCAL_009C]
:004035BF  E7                CI4UI1             ;
:004035C0  0470FF             FLdRfVar          ;Push LOCAL_0090
:004035C3  4D48FF0840       CVarRef             ;
:004035C8  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:004035CB  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:004035D0  0418FF             FLdRfVar          ;Push LOCAL_00E8
******Possible String Ref To->"5"
                           |
:004035D3  3A08FF0E00       LitVarStr          ;PushVarString ptr_00402290
:004035D8  5D                HardType          ;
:004035D9  FB33             EqVarBool          ;
:004035DB  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:004035E2  1C0B0E             BranchF             ;If Pop=0 then ESI=004035EF
:004035E5  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C]
******Possible String Ref To->"5"
                           |
:004035E8  1B0E00             LitStr             ;Push ptr_00402290
:004035EB  2A                ConcatStr          ;vbaStrCat
:004035EC  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop
:004035EF  0464FF             FLdRfVar          ;Push LOCAL_009C
:004035F2  6478FED30D       NextI2             ;
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "5" Then code = code & "5"
  Next j
****************************************
:004035F7  F401             LitI2_Byte          ;Push 01
:004035F9  0464FF             FLdRfVar          ;Push LOCAL_009C
:004035FC  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:004035FF  4A                FnLenStr          ;vbaLenBstr
:00403600  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:00403601  FE6374FE630E       ForI2             ;
:00403607  2828FF0100       LitVarI2          ;PushVarInteger 0001
:0040360C  6B64FF             FLdI2             ;Push WORD [LOCAL_009C]
:0040360F  E7                CI4UI1             ;
:00403610  0470FF             FLdRfVar          ;Push LOCAL_0090
:00403613  4D48FF0840       CVarRef             ;
:00403618  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:0040361B  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:00403620  0418FF             FLdRfVar          ;Push LOCAL_00E8
******Possible String Ref To->"4"
                           |
:00403623  3A08FF0C00       LitVarStr          ;PushVarString ptr_0040227C
:00403628  5D                HardType          ;
:00403629  FB33             EqVarBool          ;
:0040362B  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:00403632  1C5B0E             BranchF             ;If Pop=0 then ESI=0040363F
:00403635  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C]
******Possible String Ref To->"4"
                           |
:00403638  1B0C00             LitStr             ;Push ptr_0040227C
:0040363B  2A                ConcatStr          ;vbaStrCat
:0040363C  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop
:0040363F  0464FF             FLdRfVar          ;Push LOCAL_009C
:00403642  6474FE230E       NextI2             ;
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "4" Then code = code & "4"
  Next j
****************************************
:00403647  F401             LitI2_Byte          ;Push 01
:00403649  0464FF             FLdRfVar          ;Push LOCAL_009C
:0040364C  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:0040364F  4A                FnLenStr          ;vbaLenBstr
:00403650  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:00403651  FE6370FEB30E       ForI2             ;
:00403657  2828FF0100       LitVarI2          ;PushVarInteger 0001
:0040365C  6B64FF             FLdI2             ;Push WORD [LOCAL_009C]
:0040365F  E7                CI4UI1             ;
:00403660  0470FF             FLdRfVar          ;Push LOCAL_0090
:00403663  4D48FF0840       CVarRef             ;
:00403668  0418FF             FLdRfVar          ;Push LOCAL_00E8

赞一下

回复此楼

18楼2006-08-23 16:01:59

已阅回复此楼关注TA 给TA发消息送TA红花 TA的回帖

sdlj8051

金虫 (著名写手)

应助: 0 (幼儿园)
贵宾: 0.1
金币: 1149.8
红花: 3
帖子: 2254
在线: 18.1小时
虫号: 71297
注册: 2005-05-30
专业: 电路与系统

**********Reference To->msvbvm60.rtcMidCharVar
                           |
:0040366B  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:00403670  0418FF             FLdRfVar          ;Push LOCAL_00E8
******Possible String Ref To->"3"
                           |
:00403673  3A08FF0A00       LitVarStr          ;PushVarString ptr_00402268
:00403678  5D                HardType          ;
:00403679  FB33             EqVarBool          ;
:0040367B  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:00403682  1CAB0E             BranchF             ;If Pop=0 then ESI=0040368F
:00403685  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C]
******Possible String Ref To->"3"
                           |
:00403688  1B0A00             LitStr             ;Push ptr_00402268
:0040368B  2A                ConcatStr          ;vbaStrCat
:0040368C  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop
:0040368F  0464FF             FLdRfVar          ;Push LOCAL_009C
:00403692  6470FE730E       NextI2             ;
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "3" Then code = code & "3"
  Next j
****************************************
:00403697  F401             LitI2_Byte          ;Push 01
:00403699  0464FF             FLdRfVar          ;Push LOCAL_009C
:0040369C  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:0040369F  4A                FnLenStr          ;vbaLenBstr
:004036A0  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:004036A1  FE636CFE030F       ForI2             ;
:004036A7  2828FF0100       LitVarI2          ;PushVarInteger 0001
:004036AC  6B64FF             FLdI2             ;Push WORD [LOCAL_009C]
:004036AF  E7                CI4UI1             ;
:004036B0  0470FF             FLdRfVar          ;Push LOCAL_0090
:004036B3  4D48FF0840       CVarRef             ;
:004036B8  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:004036BB  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:004036C0  0418FF             FLdRfVar          ;Push LOCAL_00E8
******Possible String Ref To->"2"
                           |
:004036C3  3A08FF0800       LitVarStr          ;PushVarString ptr_00402254
:004036C8  5D                HardType          ;
:004036C9  FB33             EqVarBool          ;
:004036CB  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:004036D2  1CFB0E             BranchF             ;If Pop=0 then ESI=004036DF
:004036D5  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C]
******Possible String Ref To->"2"
                           |
:004036D8  1B0800             LitStr             ;Push ptr_00402254
:004036DB  2A                ConcatStr          ;vbaStrCat
:004036DC  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop
:004036DF  0464FF             FLdRfVar          ;Push LOCAL_009C
:004036E2  646CFEC30E       NextI2             ;
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "2" Then code = code & "2"
  Next j
****************************************
:004036E7  F401             LitI2_Byte          ;Push 01
:004036E9  0464FF             FLdRfVar          ;Push LOCAL_009C
:004036EC  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:004036EF  4A                FnLenStr          ;vbaLenBstr
:004036F0  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:004036F1  FE6368FE530F       ForI2             ;
:004036F7  2828FF0100       LitVarI2          ;PushVarInteger 0001
:004036FC  6B64FF             FLdI2             ;Push WORD [LOCAL_009C]
:004036FF  E7                CI4UI1             ;
:00403700  0470FF             FLdRfVar          ;Push LOCAL_0090
:00403703  4D48FF0840       CVarRef             ;
:00403708  0418FF             FLdRfVar          ;Push LOCAL_00E8

赞一下

回复此楼

19楼2006-08-23 16:02:18

已阅回复此楼关注TA 给TA发消息送TA红花 TA的回帖

sdlj8051

金虫 (著名写手)

应助: 0 (幼儿园)
贵宾: 0.1
金币: 1149.8
红花: 3
帖子: 2254
在线: 18.1小时
虫号: 71297
注册: 2005-05-30
专业: 电路与系统

**********Reference To->msvbvm60.rtcMidCharVar
                           |
:0040370B  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:00403710  0418FF             FLdRfVar          ;Push LOCAL_00E8
******Possible String Ref To->"1"
                           |
:00403713  3A08FF0600       LitVarStr          ;PushVarString ptr_00402240
:00403718  5D                HardType          ;
:00403719  FB33             EqVarBool          ;
:0040371B  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:00403722  1C4B0F             BranchF             ;If Pop=0 then ESI=0040372F
:00403725  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C]
******Possible String Ref To->"1"
                           |
:00403728  1B0600             LitStr             ;Push ptr_00402240
:0040372B  2A                ConcatStr          ;vbaStrCat
:0040372C  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop
:0040372F  0464FF             FLdRfVar          ;Push LOCAL_009C
:00403732  6468FE130F       NextI2             ;
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "1" Then code = code & "1"
  Next j
****************************************
:00403737  F401             LitI2_Byte          ;Push 01
:00403739  0464FF             FLdRfVar          ;Push LOCAL_009C
:0040373C  6C70FF             ILdRf             ;Push DWORD [LOCAL_0090]
:0040373F  4A                FnLenStr          ;vbaLenBstr
:00403740  E4                CI2I4             ;Verify [stack] high word is 0000, ECX=[ECX]
:00403741  FE6364FEA30F       ForI2             ;
:00403747  2828FF0100       LitVarI2          ;PushVarInteger 0001
:0040374C  6B64FF             FLdI2             ;Push WORD [LOCAL_009C]
:0040374F  E7                CI4UI1             ;
:00403750  0470FF             FLdRfVar          ;Push LOCAL_0090
:00403753  4D48FF0840       CVarRef             ;
:00403758  0418FF             FLdRfVar          ;Push LOCAL_00E8
**********Reference To->msvbvm60.rtcMidCharVar
                           |
:0040375B  0A05001000       ImpAdCallFPR4       ;Call ptr_00401036; check stack 0010; Push EAX
:00403760  0418FF             FLdRfVar          ;Push LOCAL_00E8
******Possible String Ref To->"0"
                           |
:00403763  3A08FF1800       LitVarStr          ;PushVarString ptr_004022F4
:00403768  5D                HardType          ;
:00403769  FB33             EqVarBool          ;
:0040376B  36040028FF18FF    FFreeVar          ;Free 0004/2 variants
:00403772  1C9B0F             BranchF             ;If Pop=0 then ESI=0040377F
:00403775  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C] //*********到这里code已经形成*********
******Possible String Ref To->"0"
                           |
:00403778  1B1800             LitStr             ;Push ptr_004022F4
:0040377B  2A                ConcatStr          ;vbaStrCat
:0040377C  3174FF             FStStr             ;SysFreeString [LOCAL_008C]; [LOCAL_008C]=Pop
:0040377F  0464FF             FLdRfVar          ;Push LOCAL_009C
:00403782  6464FE630F       NextI2             ;
****************************************
  For j = 1 To Len(strCode)
If Mid(strCode, j, 1) = "0" Then code = code & "0"
  Next j
****************************************
:00403787  045CFF             FLdRfVar          ;Push LOCAL_00A4 // 开辟内存空间
:0040378A  21                FLdPrThis          ;[SR]=[stack2]             \
:0040378B  0F0003             VCallAd             ;Return the control index 02 / // 获得窗体句柄
:0040378E  1960FF             FStAdFunc          ;// 取propget过程地址
:00403791  0860FF             FLdPr             ;[SR]=[LOCAL_00A0] // 加载过程
***********Reference To:[propget]TextBox.Text
                           |
:00403794  0DA0000300       VCallHresult       ;Call ptr_0040222C // 获得文本框中的内容(假码)
:00403799  6C5CFF             ILdRf             ;Push DWORD [LOCAL_00A4] // (假码)
:0040379C  6C74FF             ILdRf             ;Push DWORD [LOCAL_008C] // code
:0040379F  FB30             EqStr             ;// 字符串比较
:004037A1  2F5CFF             FFree1Str          ;SysFreeString [LOCAL_00A4]; [LOCAL_00A4]=0 //释放空间
:004037A4  1A60FF             FFree1Ad          ;Push [LOCAL_00A0]; Call [[[LOCAL_00A0]]+8]; [[LOCAL_00A0]]=0
:004037A7  1CF50F             BranchF             ;If Pop=0 then ESI=004037D9 // 不相等则跳004037D9
:004037AA  27E8FE             LitVar             ;PushVar LOCAL_0118       \
:004037AD  2718FF             LitVar             ;PushVar LOCAL_00E8       |
******Possible String Ref To->"CrackmeONEII+LYSA-II"
                           |
:004037B0  3A38FF8100       LitVarStr          ;PushVarString ptr_0040270C  |
:004037B5  4E28FF             FStVarCopyObj       ;[LOCAL_00D8]=vbaVarDup(Pop) | // MsgBox函数参数入栈
:004037B8  0428FF             FLdRfVar          ;Push LOCAL_00D8          |
:004037BB  F500000000       LitI4             ;Push 00000000             |
:004037C0  046CFF             FLdRfVar          ;Push LOCAL_0094          /
:004037C3  4D48FF0840       CVarRef             ;
**********Reference To->msvbvm60.rtcMsgBox
                           |
:004037C8  0A82001400       ImpAdCallFPR4       ;Call ptr_0040103C; check stack 0014; Push EAX // MsgBox()
:004037CD  36060028FF18FFE8 FFreeVar          ;Free 0006/2 variants
:004037D6  1E4B10             Branch             ;ESI=0040382F //探出正确注册后跳到结束过程0040382F
******Possible String Ref To->""
                           |
:004037D9  1B0200             LitStr             ;Push ptr_00402228 // 不正确跳到这里,NULL字符入栈
:004037DC  21                FLdPrThis          ;[SR]=[stack2]             \
:004037DD  0F0403             VCallAd             ;Return the control index 03 / //取窗体句柄
:004037E0  1960FF             FStAdFunc          ;// 取propput过程地址
:004037E3  0860FF             FLdPr             ;[SR]=[LOCAL_00A0] // 加载过程
***********Reference To:[propput]TextBox.Text
                           |
:004037E6  0DA4000300       VCallHresult       ;Call ptr_0040222C // 给TextBox.Text赋值
:004037EB  1A60FF             FFree1Ad          ;Push [LOCAL_00A0]; Call [[[LOCAL_00A0]]+8]; [[LOCAL_00A0]]=0
******Possible String Ref To->""
                           |
:004037EE  1B0200             LitStr             ;Push ptr_00402228 // NULL字符入栈
:004037F1  21                FLdPrThis          ;[SR]=[stack2]             \
:004037F2  0F0003             VCallAd             ;Return the control index 02 / //取窗体句柄
:004037F5  1960FF             FStAdFunc          ;// 取propput过程地址
:004037F8  0860FF             FLdPr             ;[SR]=[LOCAL_00A0] // 加载过程
***********Reference To:[propput]TextBox.Text
                           |
:004037FB  0DA4000300       VCallHresult       ;Call ptr_0040222C // 给TextBox.Text赋值
:00403800  1A60FF             FFree1Ad          ;Push [LOCAL_00A0]; Call [[[LOCAL_00A0]]+8]; [[LOCAL_00A0]]=0
:00403803  27E8FE             LitVar             ;PushVar LOCAL_0118       \
:00403806  2718FF             LitVar             ;PushVar LOCAL_00E8       |
******Possible String Ref To->"CrackmeONEII+LYSA-II"
                           |
:00403809  3A38FF8100       LitVarStr          ;PushVarString ptr_0040270C  |
:0040380E  4E28FF             FStVarCopyObj       ;[LOCAL_00D8]=vbaVarDup(Pop) |  // MsgBox函数参数入栈
:00403811  0428FF             FLdRfVar          ;Push LOCAL_00D8          |
:00403814  F500000000       LitI4             ;Push 00000000             |
:00403819  0468FF             FLdRfVar          ;Push LOCAL_0098          /
:0040381C  4D48FF0840       CVarRef             ;
**********Reference To->msvbvm60.rtcMsgBox
                           |
:00403821  0A82001400       ImpAdCallFPR4       ;Call ptr_0040103C; check stack 0014; Push EAX //MsgBox,探出错误码
:00403826  36060028FF18FFE8 FFreeVar          ;Free 0006/2 variants
:0040382F  13                ExitProcHresult    ;// 退出过程

感谢大家对我的支持,看完这篇文章,还是老话,小鸟一只请大家不要见笑,如有错误还希望大家批评指正

赞一下

回复此楼

20楼2006-08-23 16:02:41

已阅回复此楼关注TA 给TA发消息送TA红花 TA的回帖

相关版块跳转我要订阅楼主 sdlj8051 的主题更新

返回列表