【vb6】vb6逆向相关

AyalaRs

有点懒，身体也不太好，把之前vb6逆向的一些东西发下，i64文件,msvbvm60的pdb文件等

1. int __cdecl WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine, int nShowCmd)
   
2. {
   
3.   CFileRep *v4; // ebx
   
4.   int v5; // eax
   
5.   DWORD CurrentThreadId; // eax
   
6.   const void *inited; // eax
   
7.   int v9; // esi
   
8.   bool v10; // sf
   
9.   HANDLE v11; // esi
   
10.   t_heap *v12; // eax
    
11.   CFileRep *p_U; // eax
    
12.   HWND v14; // eax
    
13.   HWND ThreadHwndMain; // eax
    
14.   BOOL v16; // [esp+Ch] [ebp-4h]
    
15. 
    
16.   v16 = 0;
    
17.   v4 = 0;
    
18.   hmod = hInstance;
    
19.   gnShowCmd = nShowCmd;
    
20.   g_hinstExe = hInstance;
    
21.   if ( CThreadPool::InitRuntime(hInstance, lpCmdLine) )
    
22.   {
    
23.     WinMain_InitRuntime_After();
    
24.     if ( Cmd_ty == 1 )
    
25.     {
    
26.       v5 = XSignFilter_49_50_52(1, 1u);
    
27.       if ( g_tCmdLine.runexitset1 )
    
28.       {
    
29.         v16 = v5;
    
30.         if ( !v5 )
    
31.         {
    
32.           ThreadHwndMain = GetThreadHwndMain();
    
33.           PostMessageA(ThreadHwndMain, WM_CLOSE, 0, 0);
    
34.         }
    
35.       }
    
36.     }
    
37.     else if ( Cmd_ty == 2 )
    
38.     {
    
39.       Cmd_ty = 0;
    
40.       inited = (const void *)WinMain_InitRuntime_After_case2();
    
41.       v9 = (int)inited;
    
42.       if ( (int)inited < 0 )
    
43.         ErrorHr(inited);
    
44.       if ( g_tCmdLine.makedllset1 )
    
45.       {
    
46.         v10 = v9 < 0;
    
47.         v11 = process_heap;
    
48.         v16 = !v10;
    
49.         v12 = HeapAlloc(process_heap, HEAP_ZERO_MEMORY, 0x10u);
    
50.         if ( v12 && (v12->hheap = v11, (p_U = (CFileRep *)&v12->U__) != 0) )
    
51.           v4 = CFileRep::CFileRep(p_U);
    
52.         else
    
53.           v4 = 0;
    
54.         if ( v4 )
    
55.         {
    
56.           if ( (g_t_d14_p->flags & 4) != 0 )
    
57.             WinMain_InitRuntime_After_case2_d14(g_t_d14_p, v4);
    
58.           else
    
59.             WinMain_InitRuntime_After_case2_project(g_Project_p, v4);
    
60.           hInstance = (HINSTANCE)CFileRep::GetNonPrintFileNameExt(v4);
    
61.         }
    
62.         else
    
63.         {
    
64.           hInstance = 0;
    
65.         }
    
66.       }
    
67.       v14 = GetThreadHwndMain();
    
68.       SendMessageA(v14, WM_CLOSE, 0, 0);
    
69.     }
    
70.     if ( g_tCmdLine.makedllset1
    
71.       || (CurrentThreadId = GetCurrentThreadId(),
    
72.           PostThreadMessageA(CurrentThreadId, LVM_INSERTCOLUMNW|WM_KILLFOCUS, 0, 0),
    
73.           CMsoComponent::PushMsgLoop(&tgui.CMsoComponent_p->lpVtbl, -1),
    
74.           g_tCmdLine.makedllset1) )
    
75.     {
    
76.       sub_5001B3(v16, hInstance);
    
77.     }
    
78.     if ( v4 )
    
79.       CFileRep::`scalar deleting destructor'(v4, 1);
    
80.     CThreadPool::TerminateRuntime();
    
81.     if ( g_tCmdLine.makedllset1 || g_tCmdLine.runexitset1 )
    
82.       return !v16;
    
83.   }
    
84.   else if ( g_tCmdLine.makedllset1 || g_tCmdLine.runexitset1 )
    
85.   {
    
86.     return 1;
    
87.   }
    
88.   return 0;
    
89. }

复制代码

游客，如果您要查看本帖隐藏内容请回复

vb6.i64.7z.002 (2 MB, 下载次数: 2)

2024-7-15 20:14 上传

点击文件名下载附件

vb6.i64.7z.003 (2 MB, 下载次数: 2)

2024-7-15 20:14 上传

点击文件名下载附件

vb6.i64.7z.004 (2 MB, 下载次数: 2)

2024-7-15 20:14 上传

点击文件名下载附件

vb6.i64.7z.005 (2 MB, 下载次数: 2)

2024-7-15 20:14 上传

点击文件名下载附件

vb6.i64.7z.006 (2 MB, 下载次数: 2)

2024-7-15 20:14 上传

点击文件名下载附件

vb6.i64.7z.006 (2 MB, 下载次数: 2)

2024-7-15 20:14 上传

点击文件名下载附件

vb6.i64.7z.007 (924.56 KB, 下载次数: 2)

2024-7-15 20:14 上传

点击文件名下载附件

Vb6.exe (1.8 MB, 下载次数: 2)

2024-7-15 20:20 上传

点击文件名下载附件

gujin163

啥也不说了，楼主就是给力！