能力值:
(RANK:330 )
|
-
-
4 楼
00402640 > \55 push ebp
00402641 . 8BEC mov ebp, esp
00402643 . 83EC 0C sub esp, 0C
00402646 . 68 36114000 push <jmp.&MSVBVM60.__vbaExceptHandle>; SE 处理程序安装
0040264B . 64:A1 0000000>mov eax, dword ptr fs:[0]
00402651 . 50 push eax
00402652 . 64:8925 00000>mov dword ptr fs:[0], esp
00402659 . 81EC 20010000 sub esp, 120
0040265F . 53 push ebx
00402660 . 56 push esi
00402661 . 57 push edi
00402662 . 8965 F4 mov dword ptr [ebp-C], esp
00402665 . C745 F8 F0104>mov dword ptr [ebp-8], 004010F0
0040266C . 8B7D 08 mov edi, dword ptr [ebp+8]
0040266F . 8BC7 mov eax, edi
00402671 . 83E0 01 and eax, 1
00402674 . 8945 FC mov dword ptr [ebp-4], eax
00402677 . 83E7 FE and edi, FFFFFFFE
0040267A . 57 push edi
0040267B . 897D 08 mov dword ptr [ebp+8], edi
0040267E . 8B0F mov ecx, dword ptr [edi]
00402680 . FF51 04 call dword ptr [ecx+4]
00402683 . 8B1D B8104000 mov ebx, dword ptr [<&MSVBVM60.__vba>; MSVBVM60.__vbaVarCopy
00402689 . 33F6 xor esi, esi
0040268B . 89B5 20FFFFFF mov dword ptr [ebp-E0], esi
00402691 . 8D95 20FFFFFF lea edx, dword ptr [ebp-E0]
00402697 . 8D4D B4 lea ecx, dword ptr [ebp-4C]
0040269A . 8975 E8 mov dword ptr [ebp-18], esi
0040269D . 8975 D8 mov dword ptr [ebp-28], esi
004026A0 . 8975 C4 mov dword ptr [ebp-3C], esi
004026A3 . 8975 B4 mov dword ptr [ebp-4C], esi
004026A6 . 8975 A0 mov dword ptr [ebp-60], esi
004026A9 . 8975 90 mov dword ptr [ebp-70], esi
004026AC . 8975 8C mov dword ptr [ebp-74], esi
004026AF . 8975 88 mov dword ptr [ebp-78], esi
004026B2 . 8975 84 mov dword ptr [ebp-7C], esi
004026B5 . 8975 80 mov dword ptr [ebp-80], esi
004026B8 . 89B5 7CFFFFFF mov dword ptr [ebp-84], esi
004026BE . 89B5 78FFFFFF mov dword ptr [ebp-88], esi
004026C4 . 89B5 74FFFFFF mov dword ptr [ebp-8C], esi
004026CA . 89B5 70FFFFFF mov dword ptr [ebp-90], esi
004026D0 . 89B5 60FFFFFF mov dword ptr [ebp-A0], esi
004026D6 . 89B5 50FFFFFF mov dword ptr [ebp-B0], esi
004026DC . 89B5 40FFFFFF mov dword ptr [ebp-C0], esi
004026E2 . 89B5 30FFFFFF mov dword ptr [ebp-D0], esi
004026E8 . 89B5 10FFFFFF mov dword ptr [ebp-F0], esi
004026EE . 89B5 ECFEFFFF mov dword ptr [ebp-114], esi
004026F4 . 89B5 E8FEFFFF mov dword ptr [ebp-118], esi
004026FA . C785 28FFFFFF>mov dword ptr [ebp-D8], 00401D18 ; UNICODE "c:\"
00402704 . C785 20FFFFFF>mov dword ptr [ebp-E0], 8
0040270E . FFD3 call ebx ; <&MSVBVM60.__vbaVarCopy>
00402710 . 8D55 C4 lea edx, dword ptr [ebp-3C]
00402713 . 52 push edx
00402714 . FF15 A8104000 call dword ptr [<&MSVBVM60.__vbaI4Var>; MSVBVM60.__vbaI4Var
0040271A . 8985 E8FEFFFF mov dword ptr [ebp-118], eax
00402720 . 8D45 D8 lea eax, dword ptr [ebp-28]
00402723 . 50 push eax
00402724 . FF15 A8104000 call dword ptr [<&MSVBVM60.__vbaI4Var>; MSVBVM60.__vbaI4Var
0040272A . 8D4D A0 lea ecx, dword ptr [ebp-60]
0040272D . 6A 7F push 7F
0040272F . 8D95 78FFFFFF lea edx, dword ptr [ebp-88]
00402735 . 51 push ecx
00402736 . 52 push edx
00402737 . 8985 ECFEFFFF mov dword ptr [ebp-114], eax
0040273D . FF15 80104000 call dword ptr [<&MSVBVM60.__vbaStrVa>; MSVBVM60.__vbaStrVarVal
00402743 . 50 push eax
00402744 . 8D85 74FFFFFF lea eax, dword ptr [ebp-8C]
0040274A . 50 push eax
0040274B . FF15 B4104000 call dword ptr [<&MSVBVM60.__vbaStrTo>; MSVBVM60.__vbaStrToAnsi
00402751 . 8D4D E8 lea ecx, dword ptr [ebp-18]
00402754 . 50 push eax
00402755 . 8D95 E8FEFFFF lea edx, dword ptr [ebp-118]
0040275B . 51 push ecx
0040275C . 8D85 ECFEFFFF lea eax, dword ptr [ebp-114]
00402762 . 52 push edx
00402763 . 50 push eax
00402764 . 8D4D 90 lea ecx, dword ptr [ebp-70]
00402767 . 6A 7F push 7F
00402769 . 8D55 80 lea edx, dword ptr [ebp-80]
0040276C . 51 push ecx
0040276D . 52 push edx
0040276E . FF15 80104000 call dword ptr [<&MSVBVM60.__vbaStrVa>; MSVBVM60.__vbaStrVarVal
00402774 . 50 push eax
00402775 . 8D85 7CFFFFFF lea eax, dword ptr [ebp-84]
0040277B . 50 push eax
0040277C . FF15 B4104000 call dword ptr [<&MSVBVM60.__vbaStrTo>; MSVBVM60.__vbaStrToAnsi
00402782 . 8D4D B4 lea ecx, dword ptr [ebp-4C]
00402785 . 50 push eax
00402786 . 51 push ecx
00402787 . 8D55 88 lea edx, dword ptr [ebp-78]
0040278A . 52 push edx
0040278B . FF15 80104000 call dword ptr [<&MSVBVM60.__vbaStrVa>; MSVBVM60.__vbaStrVarVal
00402791 . 50 push eax
00402792 . 8D45 84 lea eax, dword ptr [ebp-7C]
00402795 . 50 push eax
00402796 . FF15 B4104000 call dword ptr [<&MSVBVM60.__vbaStrTo>; MSVBVM60.__vbaStrToAnsi
0040279C . 50 push eax
0040279D . E8 C2F5FFFF call 00401D64
004027A2 . FF15 20104000 call dword ptr [<&MSVBVM60.__vbaSetSy>; MSVBVM60.__vbaSetSystemError
004027A8 . 8B8D ECFEFFFF mov ecx, dword ptr [ebp-114]
004027AE . 8D95 20FFFFFF lea edx, dword ptr [ebp-E0]
004027B4 . 898D 28FFFFFF mov dword ptr [ebp-D8], ecx
004027BA . 8D4D D8 lea ecx, dword ptr [ebp-28]
004027BD . C785 20FFFFFF>mov dword ptr [ebp-E0], 3
004027C7 . FFD3 call ebx
004027C9 . 8B95 E8FEFFFF mov edx, dword ptr [ebp-118]
004027CF . 8D4D C4 lea ecx, dword ptr [ebp-3C]
004027D2 . 8995 18FFFFFF mov dword ptr [ebp-E8], edx
004027D8 . 8D95 10FFFFFF lea edx, dword ptr [ebp-F0]
004027DE . C785 10FFFFFF>mov dword ptr [ebp-F0], 3
004027E8 . FFD3 call ebx
004027EA . 8D85 74FFFFFF lea eax, dword ptr [ebp-8C]
004027F0 . 8D8D 78FFFFFF lea ecx, dword ptr [ebp-88]
004027F6 . 50 push eax
004027F7 . 8D95 7CFFFFFF lea edx, dword ptr [ebp-84]
004027FD . 51 push ecx
004027FE . 8D45 80 lea eax, dword ptr [ebp-80]
00402801 . 52 push edx
00402802 . 8D4D 84 lea ecx, dword ptr [ebp-7C]
00402805 . 50 push eax
00402806 . 8D55 88 lea edx, dword ptr [ebp-78]
00402809 . 51 push ecx
0040280A . 52 push edx
0040280B . 6A 06 push 6
0040280D . FF15 98104000 call dword ptr [<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStrList
00402813 . B8 02000000 mov eax, 2
00402818 . 83C4 1C add esp, 1C
0040281B . 8985 28FFFFFF mov dword ptr [ebp-D8], eax
00402821 . 8985 20FFFFFF mov dword ptr [ebp-E0], eax
00402827 . 8D45 D8 lea eax, dword ptr [ebp-28]
0040282A . 8D8D 20FFFFFF lea ecx, dword ptr [ebp-E0]
00402830 . 50 push eax
00402831 . 8D95 60FFFFFF lea edx, dword ptr [ebp-A0]
00402837 . 51 push ecx
00402838 . 52 push edx
00402839 . C785 18FFFFFF>mov dword ptr [ebp-E8], 75BCD15
00402843 . C785 10FFFFFF>mov dword ptr [ebp-F0], 3
0040284D . FF15 78104000 call dword ptr [<&MSVBVM60.__vbaVarDi>; MSVBVM60.__vbaVarDiv
00402853 . 50 push eax
00402854 . 8D85 10FFFFFF lea eax, dword ptr [ebp-F0]
0040285A . 8D8D 50FFFFFF lea ecx, dword ptr [ebp-B0]
00402860 . 50 push eax
00402861 . 51 push ecx
00402862 . FF15 AC104000 call dword ptr [<&MSVBVM60.__vbaVarAd>; MSVBVM60.__vbaVarAdd
00402868 . 50 push eax
00402869 . FF15 A8104000 call dword ptr [<&MSVBVM60.__vbaI4Var>; MSVBVM60.__vbaI4Var
0040286F . 8D8D 50FFFFFF lea ecx, dword ptr [ebp-B0]
00402875 . FF15 10104000 call dword ptr [<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVar
0040287B . 8B17 mov edx, dword ptr [edi]
0040287D . 57 push edi
0040287E . FF92 08030000 call dword ptr [edx+308]
00402884 . 50 push eax
00402885 . 8D85 70FFFFFF lea eax, dword ptr [ebp-90]
0040288B . 50 push eax
0040288C . FF15 30104000 call dword ptr [<&MSVBVM60.__vbaObjSe>; MSVBVM60.__vbaObjSet
00402892 . 8BD8 mov ebx, eax
00402894 . 8D55 88 lea edx, dword ptr [ebp-78]
00402897 . 52 push edx
00402898 . 53 push ebx
00402899 . 8B0B mov ecx, dword ptr [ebx]
0040289B . FF91 A0000000 call dword ptr [ecx+A0]
004028A1 . 3BC6 cmp eax, esi
004028A3 . DBE2 fclex
004028A5 . 7D 12 jge short 004028B9
004028A7 . 68 A0000000 push 0A0
004028AC . 68 8C1D4000 push 00401D8C
004028B1 . 53 push ebx
004028B2 . 50 push eax
004028B3 . FF15 24104000 call dword ptr [<&MSVBVM60.__vbaHresu>; MSVBVM60.__vbaHresultCheckObj
004028B9 > 8B45 88 mov eax, dword ptr [ebp-78]
004028BC . 83C7 34 add edi, 34
004028BF . 8985 68FFFFFF mov dword ptr [ebp-98], eax
004028C5 . 8D85 60FFFFFF lea eax, dword ptr [ebp-A0]
004028CB . 50 push eax
004028CC . 57 push edi
004028CD . 8975 88 mov dword ptr [ebp-78], esi
004028D0 . C785 60FFFFFF>mov dword ptr [ebp-A0], 8008
004028DA . FF15 4C104000 call dword ptr [<&MSVBVM60.__vbaVarTs>; MSVBVM60.__vbaVarTstEq
004028E0 . 8D8D 70FFFFFF lea ecx, dword ptr [ebp-90]
004028E6 . 8BF8 mov edi, eax
004028E8 . FF15 D0104000 call dword ptr [<&MSVBVM60.__vbaFreeO>; MSVBVM60.__vbaFreeObj
004028EE . 8D8D 60FFFFFF lea ecx, dword ptr [ebp-A0]
004028F4 . FF15 10104000 call dword ptr [<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVar
004028FA . B9 04000280 mov ecx, 80020004
004028FF . B8 0A000000 mov eax, 0A
00402904 . 66:3BFE cmp di, si
00402907 . 898D 38FFFFFF mov dword ptr [ebp-C8], ecx
0040290D . 8985 30FFFFFF mov dword ptr [ebp-D0], eax
00402913 . 898D 48FFFFFF mov dword ptr [ebp-B8], ecx
00402919 . 8985 40FFFFFF mov dword ptr [ebp-C0], eax
0040291F . 898D 58FFFFFF mov dword ptr [ebp-A8], ecx
00402925 . 8985 50FFFFFF mov dword ptr [ebp-B0], eax
0040292B . 74 67 je short 00402994
0040292D . 8D95 20FFFFFF lea edx, dword ptr [ebp-E0]
00402933 . 8D8D 60FFFFFF lea ecx, dword ptr [ebp-A0]
00402939 . C785 28FFFFFF>mov dword ptr [ebp-D8], 00401DA0
00402943 . C785 20FFFFFF>mov dword ptr [ebp-E0], 8
0040294D . FF15 B0104000 call dword ptr [<&MSVBVM60.__vbaVarDu>; MSVBVM60.__vbaVarDup
00402953 . 8D8D 30FFFFFF lea ecx, dword ptr [ebp-D0]
00402959 . 8D95 40FFFFFF lea edx, dword ptr [ebp-C0]
0040295F . 51 push ecx
00402960 . 8D85 50FFFFFF lea eax, dword ptr [ebp-B0]
00402966 . 52 push edx
00402967 . 50 push eax
00402968 . 8D8D 60FFFFFF lea ecx, dword ptr [ebp-A0]
0040296E . 56 push esi
0040296F . 51 push ecx
00402970 . FF15 2C104000 call dword ptr [<&MSVBVM60.#595>] ; MSVBVM60.rtcMsgBox
00402976 . 8D95 30FFFFFF lea edx, dword ptr [ebp-D0]
0040297C . 8D85 40FFFFFF lea eax, dword ptr [ebp-C0]
00402982 . 52 push edx
00402983 . 8D8D 50FFFFFF lea ecx, dword ptr [ebp-B0]
00402989 . 50 push eax
0040298A . 8D95 60FFFFFF lea edx, dword ptr [ebp-A0]
00402990 . 51 push ecx
00402991 . 52 push edx
00402992 . EB 65 jmp short 004029F9
00402994 > 8D95 20FFFFFF lea edx, dword ptr [ebp-E0]
0040299A . 8D8D 60FFFFFF lea ecx, dword ptr [ebp-A0]
004029A0 . C785 28FFFFFF>mov dword ptr [ebp-D8], 00401DAC
004029AA . C785 20FFFFFF>mov dword ptr [ebp-E0], 8
004029B4 . FF15 B0104000 call dword ptr [<&MSVBVM60.__vbaVarDu>; MSVBVM60.__vbaVarDup
004029BA . 8D85 30FFFFFF lea eax, dword ptr [ebp-D0]
004029C0 . 8D8D 40FFFFFF lea ecx, dword ptr [ebp-C0]
004029C6 . 50 push eax
004029C7 . 8D95 50FFFFFF lea edx, dword ptr [ebp-B0]
004029CD . 51 push ecx
004029CE . 52 push edx
004029CF . 8D85 60FFFFFF lea eax, dword ptr [ebp-A0]
004029D5 . 56 push esi
004029D6 . 50 push eax
004029D7 . FF15 2C104000 call dword ptr [<&MSVBVM60.#595>] ; MSVBVM60.rtcMsgBox
004029DD . 8D8D 30FFFFFF lea ecx, dword ptr [ebp-D0]
004029E3 . 8D95 40FFFFFF lea edx, dword ptr [ebp-C0]
004029E9 . 51 push ecx
004029EA . 8D85 50FFFFFF lea eax, dword ptr [ebp-B0]
004029F0 . 52 push edx
004029F1 . 8D8D 60FFFFFF lea ecx, dword ptr [ebp-A0]
004029F7 . 50 push eax
004029F8 . 51 push ecx
004029F9 > 6A 04 push 4
004029FB . FF15 14104000 call dword ptr [<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVarList
00402A01 . 83C4 14 add esp, 14
00402A04 . 8975 FC mov dword ptr [ebp-4], esi
00402A07 . 68 972A4000 push 00402A97
00402A0C . EB 60 jmp short 00402A6E
00402A0E . 8D95 74FFFFFF lea edx, dword ptr [ebp-8C]
00402A14 . 8D85 78FFFFFF lea eax, dword ptr [ebp-88]
00402A1A . 52 push edx
00402A1B . 8D8D 7CFFFFFF lea ecx, dword ptr [ebp-84]
00402A21 . 50 push eax
00402A22 . 8D55 80 lea edx, dword ptr [ebp-80]
00402A25 . 51 push ecx
00402A26 . 8D45 84 lea eax, dword ptr [ebp-7C]
00402A29 . 52 push edx
00402A2A . 8D4D 88 lea ecx, dword ptr [ebp-78]
00402A2D . 50 push eax
00402A2E . 51 push ecx
00402A2F . 6A 06 push 6
00402A31 . FF15 98104000 call dword ptr [<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStrList
00402A37 . 83C4 1C add esp, 1C
00402A3A . 8D8D 70FFFFFF lea ecx, dword ptr [ebp-90]
00402A40 . FF15 D0104000 call dword ptr [<&MSVBVM60.__vbaFreeO>; MSVBVM60.__vbaFreeObj
00402A46 . 8D95 30FFFFFF lea edx, dword ptr [ebp-D0]
00402A4C . 8D85 40FFFFFF lea eax, dword ptr [ebp-C0]
00402A52 . 52 push edx
00402A53 . 8D8D 50FFFFFF lea ecx, dword ptr [ebp-B0]
00402A59 . 50 push eax
00402A5A . 8D95 60FFFFFF lea edx, dword ptr [ebp-A0]
00402A60 . 51 push ecx
00402A61 . 52 push edx
00402A62 . 6A 04 push 4
00402A64 . FF15 14104000 call dword ptr [<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVarList
00402A6A . 83C4 14 add esp, 14
00402A6D . C3 retn
00402A6E > 8B35 10104000 mov esi, dword ptr [<&MSVBVM60.__vba>; MSVBVM60.__vbaFreeVar
00402A74 . 8D4D D8 lea ecx, dword ptr [ebp-28]
00402A77 . FFD6 call esi ; <&MSVBVM60.__vbaFreeVar>
00402A79 . 8D4D C4 lea ecx, dword ptr [ebp-3C]
00402A7C . FFD6 call esi
00402A7E . 8D4D B4 lea ecx, dword ptr [ebp-4C]
00402A81 . FFD6 call esi
00402A83 . 8D4D A0 lea ecx, dword ptr [ebp-60]
00402A86 . FFD6 call esi
00402A88 . 8D4D 90 lea ecx, dword ptr [ebp-70]
00402A8B . FFD6 call esi
00402A8D . 8D4D 8C lea ecx, dword ptr [ebp-74]
00402A90 . FF15 D4104000 call dword ptr [<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStr
00402A96 . C3 retn
00402A97 . 8B45 08 mov eax, dword ptr [ebp+8]
00402A9A . 50 push eax
00402A9B . 8B08 mov ecx, dword ptr [eax]
00402A9D . FF51 08 call dword ptr [ecx+8]
00402AA0 . 8B45 FC mov eax, dword ptr [ebp-4]
00402AA3 . 8B4D EC mov ecx, dword ptr [ebp-14]
00402AA6 . 5F pop edi
00402AA7 . 5E pop esi
00402AA8 . 64:890D 00000>mov dword ptr fs:[0], ecx
00402AAF . 5B pop ebx
00402AB0 . 8BE5 mov esp, ebp
00402AB2 . 5D pop ebp
00402AB3 . C2 0400 retn 4
东西都在这了,没啥好看的.
|