VB程序,下面是它打开文件的操作,代码以下,
哪位高手能帮忙注释一下,万分感谢!!!!!
0042C520 > \55 push ebp
0042C521 . 8BEC mov ebp, esp
0042C523 . 83EC 18 sub esp, 18
0042C526 . 68 A6294000 push <jmp.&MSVBVM60.__vbaExceptHandle>; SE 处理程序安装
0042C52B . 64:A1 0000000>mov eax, dword ptr fs:[0]
0042C531 . 50 push eax
0042C532 . 64:8925 00000>mov dword ptr fs:[0], esp
0042C539 . B8 48000000 mov eax, 48
0042C53E . E8 5D64FDFF call <jmp.&MSVBVM60.__vbaChkstk>
0042C543 . 53 push ebx
0042C544 . 56 push esi
0042C545 . 57 push edi
0042C546 . 8965 E8 mov dword ptr [ebp-18], esp
0042C549 . C745 EC E0284>mov dword ptr [ebp-14], 004028E0
0042C550 . C745 F0 00000>mov dword ptr [ebp-10], 0
0042C557 . C745 F4 00000>mov dword ptr [ebp-C], 0
0042C55E . 8B45 08 mov eax, dword ptr [ebp+8]
0042C561 . 8B08 mov ecx, dword ptr [eax]
0042C563 . 8B55 08 mov edx, dword ptr [ebp+8]
0042C566 . 52 push edx
0042C567 . FF51 04 call dword ptr [ecx+4]
0042C56A . C745 FC 01000>mov dword ptr [ebp-4], 1
0042C571 . 8D55 0C lea edx, dword ptr [ebp+C]
0042C574 . 8D4D D0 lea ecx, dword ptr [ebp-30]
0042C577 . FF15 A4114000 call dword ptr [<&MSVBVM60.__vbaVarDu>; MSVBVM60.__vbaVarDup
0042C57D . C745 FC 02000>mov dword ptr [ebp-4], 2
0042C584 . 6A FF push -1 ; /OnErrEvent = Resume Next
0042C586 . FF15 78104000 call dword ptr [<&MSVBVM60.__vbaOnErr>; \__vbaOnError
0042C58C . C745 FC 03000>mov dword ptr [ebp-4], 3
0042C593 . 8D45 D0 lea eax, dword ptr [ebp-30]
0042C596 . 50 push eax
0042C597 . FF15 EC104000 call dword ptr [<&MSVBVM60.__vbaR4Var>; MSVBVM60.__vbaR4Var
0042C59D . D95D C4 fstp dword ptr [ebp-3C]
0042C5A0 . C745 BC 04000>mov dword ptr [ebp-44], 4
0042C5A7 . B8 10000000 mov eax, 10
0042C5AC . E8 EF63FDFF call <jmp.&MSVBVM60.__vbaChkstk>
0042C5B1 . 8BCC mov ecx, esp
0042C5B3 . 8B55 BC mov edx, dword ptr [ebp-44]
0042C5B6 . 8911 mov dword ptr [ecx], edx
0042C5B8 . 8B45 C0 mov eax, dword ptr [ebp-40]
0042C5BB . 8941 04 mov dword ptr [ecx+4], eax
0042C5BE . 8B55 C4 mov edx, dword ptr [ebp-3C]
0042C5C1 . 8951 08 mov dword ptr [ecx+8], edx
0042C5C4 . 8B45 C8 mov eax, dword ptr [ebp-38]
0042C5C7 . 8941 0C mov dword ptr [ecx+C], eax
0042C5CA . 6A 05 push 5
0042C5CC . 8B4D 08 mov ecx, dword ptr [ebp+8]
0042C5CF . 8B11 mov edx, dword ptr [ecx]
0042C5D1 . 8B45 08 mov eax, dword ptr [ebp+8]
0042C5D4 . 50 push eax
0042C5D5 . FF92 04030000 call dword ptr [edx+304]
0042C5DB . 50 push eax
0042C5DC . 8D4D CC lea ecx, dword ptr [ebp-34]
0042C5DF . 51 push ecx
0042C5E0 . FF15 7C104000 call dword ptr [<&MSVBVM60.__vbaObjSe>; MSVBVM60.__vbaObjSet
0042C5E6 . 50 push eax
0042C5E7 . FF15 CC114000 call dword ptr [<&MSVBVM60.__vbaLateI>; MSVBVM60.__vbaLateIdSt
0042C5ED . 8D4D CC lea ecx, dword ptr [ebp-34]
0042C5F0 . FF15 E0114000 call dword ptr [<&MSVBVM60.__vbaFreeO>; MSVBVM60.__vbaFreeObj
0042C5F6 . 9B wait
0042C5F7 . 68 12C64200 push 0042C612
0042C5FC . EB 0A jmp short 0042C608
0042C5FE . 8D4D CC lea ecx, dword ptr [ebp-34]
0042C601 . FF15 E0114000 call dword ptr [<&MSVBVM60.__vbaFreeO>; MSVBVM60.__vbaFreeObj
0042C607 . C3 retn
0042C608 > 8D4D D0 lea ecx, dword ptr [ebp-30]
0042C60B . FF15 18104000 call dword ptr [<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVar
0042C611 . C3 retn
0042C612 . 8B55 08 mov edx, dword ptr [ebp+8]
0042C615 . 8B02 mov eax, dword ptr [edx]
0042C617 . 8B4D 08 mov ecx, dword ptr [ebp+8]
0042C61A . 51 push ecx
0042C61B . FF50 08 call dword ptr [eax+8]
0042C61E . 8B45 F0 mov eax, dword ptr [ebp-10]
0042C621 . 8B4D E0 mov ecx, dword ptr [ebp-20]
0042C624 . 64:890D 00000>mov dword ptr fs:[0], ecx
0042C62B . 5F pop edi
0042C62C . 5E pop esi
0042C62D . 5B pop ebx
0042C62E . 8BE5 mov esp, ebp
0042C630 . 5D pop ebp
0042C631 . C2 1400 retn 14
0042C634 CC int3
0042C635 CC int3
0042C636 CC int3
0042C637 CC int3
0042C638 CC int3
0042C639 CC int3
0042C63A CC int3
0042C63B CC int3
0042C63C CC int3
0042C63D CC int3
0042C63E CC int3
0042C63F CC int3
[培训]《安卓高级研修班(网课)》月薪三万计划,掌握调试、分析还原ollvm、vmp的方法,定制art虚拟机自动化脱壳的方法