我在网上查了很多相关资料都找不到该函数的说明,所以不得不来这里请教了
MSVBVM60.__vbaStrI2
该函数反汇编如下
660DF9B9 > 55 PUSH EBP
660DF9BA 8BEC MOV EBP,ESP
660DF9BC 51 PUSH ECX
660DF9BD 8D45 FC LEA EAX,DWORD PTR SS:[EBP-4]
660DF9C0 50 PUSH EAX
660DF9C1 6A 00 PUSH 0
660DF9C3 E8 AB6AF2FF CALL MSVBVM60.66006473
660DF9C8 50 PUSH EAX
660DF9C9 FF75 08 PUSH DWORD PTR SS:[EBP+8]
660DF9CC FF15 B41A0066 CALL DWORD PTR DS:[<&OLEAUT32.#109>] ; OLEAUT32.VarBstrFromI2
660DF9D2 85C0 TEST EAX,EAX
660DF9D4 7D 0C JGE SHORT MSVBVM60.660DF9E2
660DF9D6 50 PUSH EAX
660DF9D7 E8 DDC3FEFF CALL MSVBVM60.660CBDB9
660DF9DC 50 PUSH EAX
660DF9DD E8 D1E3FEFF CALL MSVBVM60.660CDDB3
660DF9E2 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
660DF9E5 C9 LEAVE
660DF9E6 C2 0400 RETN 4
另外还请教这个函数
OLEAUT32.VarBstrFromI2
此函数反汇编如下
770F68E3 > 8BFF MOV EDI,EDI ; MSVBVM60.__vbaStrVarMove
770F68E5 55 PUSH EBP
770F68E6 8BEC MOV EBP,ESP
770F68E8 83EC 54 SUB ESP,54
770F68EB A1 04201777 MOV EAX,DWORD PTR DS:[77172004]
770F68F0 56 PUSH ESI
770F68F1 8B75 10 MOV ESI,DWORD PTR SS:[EBP+10]
770F68F4 F7C6 00000010 TEST ESI,10000000
770F68FA 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
770F68FD 57 PUSH EDI
770F68FE 8B7D 14 MOV EDI,DWORD PTR SS:[EBP+14]
770F6901 8D45 AC LEA EAX,DWORD PTR SS:[EBP-54]
770F6904 0F85 4EEB0200 JNZ OLEAUT32.77125458
770F690A 50 PUSH EAX
770F690B 0FBF45 08 MOVSX EAX,WORD PTR SS:[EBP+8]
770F690F 50 PUSH EAX
770F6910 E8 36FCFFFF CALL OLEAUT32.770F654B
770F6915 57 PUSH EDI
770F6916 8D45 AC LEA EAX,DWORD PTR SS:[EBP-54]
770F6919 50 PUSH EAX
770F691A E8 A5FBFFFF CALL OLEAUT32.770F64C4
770F691F 8B4D FC MOV ECX,DWORD PTR SS:[EBP-4]
770F6922 5F POP EDI
770F6923 5E POP ESI
770F6924 E8 C7ABFFFF CALL OLEAUT32.770F14F0
770F6929 C9 LEAVE
770F692A C2 1000 RETN 10
770F692D FF35 F0231777 PUSH DWORD PTR DS:[771723F0]
770F6933 891D E4231777 MOV DWORD PTR DS:[771723E4],EBX
770F6939 FF15 04140F77 CALL DWORD PTR DS:[<&KERNEL32.FreeLibrary>] ; kernel32.FreeLibrary
770F693F 891D F0231777 MOV DWORD PTR DS:[771723F0],EBX
770F6945 891D E8231777 MOV DWORD PTR DS:[771723E8],EBX
770F694B E9 A1320100 JMP OLEAUT32.77109BF1
770F6950 E8 0A000000 CALL OLEAUT32.770F695F
770F6955 E9 F8330100 JMP OLEAUT32.77109D52
770F695A 90 NOP
770F695B 90 NOP
770F695C 90 NOP
770F695D 90 NOP
770F695E 90 NOP
770F695F A1 F8201777 MOV EAX,DWORD PTR DS:[771720F8]
770F6964 85C0 TEST EAX,EAX
770F6966 0F85 4F610300 JNZ OLEAUT32.7712CABB
770F696C C3 RETN
能告诉我这两个函数的大概用途吗,谢谢
能告诉我从哪可以找到msvbvm60的函数参考吗
或者能给我一点小小的提示我也非常感激了
[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)