-
-
[旧帖] [求助]求高手看看这段汇编啥意思。。。。 0.00雪花
-
发表于: 2011-11-29 15:26 1095
-
不知道怎么个比较法 最后就跳转了???
-------------------------------------------------------------------------------
0042BC49 . 50 push eax
0042BC4A . 68 F8884200 push 004288F8 ; e0bK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8U0p5&6x3W2)9J5k6e0p5$3z5q4)9J5k6e0m8Q4x3X3f1I4x3q4)9J5c8X3I4G2k6$3W2F1i4K6g2X3M7#2)9J5k6h3q4K6M7q4)9K6c8R3`.`.
0042BC4F . FF15 8C104000 call dword ptr [<&MSVBVM60.__vbaStrCm>; MSVBVM60.__vbaStrCmp
此处执行完以后 eax的值就变成了FFFFFFFF,这是为神马呢???
0042BC55 . 8B16 mov edx, dword ptr [esi]
0042BC57 . 8BD8 mov ebx, eax
0042BC59 . F7DB neg ebx
0042BC5B . 1BDB sbb ebx, ebx
0042BC5D . 6A 00 push 0
0042BC5F . F7DB neg ebx
0042BC61 . 68 D3000000 push 0D3
0042BC66 . 56 push esi
0042BC67 . F7DB neg ebx
0042BC69 . FF92 C8030000 call dword ptr [edx+3C8]
0042BC6F . 50 push eax
0042BC70 . 8D45 9C lea eax, dword ptr [ebp-64]
0042BC73 . 50 push eax
0042BC74 . FF15 58104000 call dword ptr [<&MSVBVM60.__vbaObjSe>; MSVBVM60.__vbaObjSet
0042BC7A . 8D4D 88 lea ecx, dword ptr [ebp-78]
0042BC7D . 50 push eax
0042BC7E . 51 push ecx
0042BC7F . FF15 AC104000 call dword ptr [<&MSVBVM60.__vbaLateI>; MSVBVM60.__vbaLateIdCallLd
0042BC85 . 83C4 10 add esp, 10
0042BC88 . 50 push eax
0042BC89 . FF15 28104000 call dword ptr [<&MSVBVM60.__vbaStrVa>; MSVBVM60.__vbaStrVarMove
0042BC8F . 8BD0 mov edx, eax
0042BC91 . 8D4D B4 lea ecx, dword ptr [ebp-4C]
0042BC94 . FF15 58114000 call dword ptr [<&MSVBVM60.__vbaStrMo>; MSVBVM60.__vbaStrMove
0042BC9A . 50 push eax
0042BC9B . 68 A0884200 push 004288A0 ; 695K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8U0p5&6x3W2)9J5k6e0p5$3z5q4)9J5k6e0m8Q4x3X3f1I4x3q4)9J5c8Y4g2Q4y4h3k6K6i4K6u0W2j5i4y4H3i4K6y4r3j5h3y4@1K9h3!0F1i4K6y4p5M7$3S2G2N6H3`.`.
0042BCA0 . FF15 8C104000 call dword ptr [<&MSVBVM60.__vbaStrCm>; MSVBVM60.__vbaStrCmp
0042BCA6 . F7D8 neg eax
0042BCA8 . 1BC0 sbb eax, eax
0042BCAA . 8D55 B0 lea edx, dword ptr [ebp-50]
0042BCAD . F7D8 neg eax
0042BCAF . F7D8 neg eax
0042BCB1 . 23D8 and ebx, eax
0042BCB3 . 8D45 B4 lea eax, dword ptr [ebp-4C]
0042BCB6 . 52 push edx ; ntdll.KiFastSystemCallRet
0042BCB7 . 50 push eax
0042BCB8 . 6A 02 push 2
0042BCBA . FF15 14114000 call dword ptr [<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStrList
0042BCC0 . 8D4D 98 lea ecx, dword ptr [ebp-68]
0042BCC3 . 8D55 9C lea edx, dword ptr [ebp-64]
0042BCC6 . 51 push ecx
0042BCC7 . 52 push edx ; ntdll.KiFastSystemCallRet
0042BCC8 . 6A 02 push 2
0042BCCA . FF15 34104000 call dword ptr [<&MSVBVM60.__vbaFreeO>; MSVBVM60.__vbaFreeObjList
0042BCD0 . 8D85 78FFFFFF lea eax, dword ptr [ebp-88]
0042BCD6 . 8D4D 88 lea ecx, dword ptr [ebp-78]
0042BCD9 . 50 push eax
0042BCDA . 51 push ecx
0042BCDB . 6A 02 push 2
0042BCDD . FF15 2C104000 call dword ptr [<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVarList
0042BCE3 . 83C4 24 add esp, 24
0042BCE6 . 66:85DB test bx, bx
0042BCE9 0F84 A0050000 je 0042C28F
-------------------------------------------------------------------------------
0042BC49 . 50 push eax
0042BC4A . 68 F8884200 push 004288F8 ; e0bK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8U0p5&6x3W2)9J5k6e0p5$3z5q4)9J5k6e0m8Q4x3X3f1I4x3q4)9J5c8X3I4G2k6$3W2F1i4K6g2X3M7#2)9J5k6h3q4K6M7q4)9K6c8R3`.`.
0042BC4F . FF15 8C104000 call dword ptr [<&MSVBVM60.__vbaStrCm>; MSVBVM60.__vbaStrCmp
此处执行完以后 eax的值就变成了FFFFFFFF,这是为神马呢???
0042BC55 . 8B16 mov edx, dword ptr [esi]
0042BC57 . 8BD8 mov ebx, eax
0042BC59 . F7DB neg ebx
0042BC5B . 1BDB sbb ebx, ebx
0042BC5D . 6A 00 push 0
0042BC5F . F7DB neg ebx
0042BC61 . 68 D3000000 push 0D3
0042BC66 . 56 push esi
0042BC67 . F7DB neg ebx
0042BC69 . FF92 C8030000 call dword ptr [edx+3C8]
0042BC6F . 50 push eax
0042BC70 . 8D45 9C lea eax, dword ptr [ebp-64]
0042BC73 . 50 push eax
0042BC74 . FF15 58104000 call dword ptr [<&MSVBVM60.__vbaObjSe>; MSVBVM60.__vbaObjSet
0042BC7A . 8D4D 88 lea ecx, dword ptr [ebp-78]
0042BC7D . 50 push eax
0042BC7E . 51 push ecx
0042BC7F . FF15 AC104000 call dword ptr [<&MSVBVM60.__vbaLateI>; MSVBVM60.__vbaLateIdCallLd
0042BC85 . 83C4 10 add esp, 10
0042BC88 . 50 push eax
0042BC89 . FF15 28104000 call dword ptr [<&MSVBVM60.__vbaStrVa>; MSVBVM60.__vbaStrVarMove
0042BC8F . 8BD0 mov edx, eax
0042BC91 . 8D4D B4 lea ecx, dword ptr [ebp-4C]
0042BC94 . FF15 58114000 call dword ptr [<&MSVBVM60.__vbaStrMo>; MSVBVM60.__vbaStrMove
0042BC9A . 50 push eax
0042BC9B . 68 A0884200 push 004288A0 ; 695K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8U0p5&6x3W2)9J5k6e0p5$3z5q4)9J5k6e0m8Q4x3X3f1I4x3q4)9J5c8Y4g2Q4y4h3k6K6i4K6u0W2j5i4y4H3i4K6y4r3j5h3y4@1K9h3!0F1i4K6y4p5M7$3S2G2N6H3`.`.
0042BCA0 . FF15 8C104000 call dword ptr [<&MSVBVM60.__vbaStrCm>; MSVBVM60.__vbaStrCmp
0042BCA6 . F7D8 neg eax
0042BCA8 . 1BC0 sbb eax, eax
0042BCAA . 8D55 B0 lea edx, dword ptr [ebp-50]
0042BCAD . F7D8 neg eax
0042BCAF . F7D8 neg eax
0042BCB1 . 23D8 and ebx, eax
0042BCB3 . 8D45 B4 lea eax, dword ptr [ebp-4C]
0042BCB6 . 52 push edx ; ntdll.KiFastSystemCallRet
0042BCB7 . 50 push eax
0042BCB8 . 6A 02 push 2
0042BCBA . FF15 14114000 call dword ptr [<&MSVBVM60.__vbaFreeS>; MSVBVM60.__vbaFreeStrList
0042BCC0 . 8D4D 98 lea ecx, dword ptr [ebp-68]
0042BCC3 . 8D55 9C lea edx, dword ptr [ebp-64]
0042BCC6 . 51 push ecx
0042BCC7 . 52 push edx ; ntdll.KiFastSystemCallRet
0042BCC8 . 6A 02 push 2
0042BCCA . FF15 34104000 call dword ptr [<&MSVBVM60.__vbaFreeO>; MSVBVM60.__vbaFreeObjList
0042BCD0 . 8D85 78FFFFFF lea eax, dword ptr [ebp-88]
0042BCD6 . 8D4D 88 lea ecx, dword ptr [ebp-78]
0042BCD9 . 50 push eax
0042BCDA . 51 push ecx
0042BCDB . 6A 02 push 2
0042BCDD . FF15 2C104000 call dword ptr [<&MSVBVM60.__vbaFreeV>; MSVBVM60.__vbaFreeVarList
0042BCE3 . 83C4 24 add esp, 24
0042BCE6 . 66:85DB test bx, bx
0042BCE9 0F84 A0050000 je 0042C28F
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课
赞赏
他的文章
- [求助]求监控窗体控件代码[重金] 1459
- [讨论]没通过审核 杯具啊!!~~~~~ 1511
- [申请邀请码][原创]某程序登陆模式的分析与实现 1866
- [求助]求高手看看这段汇编啥意思。。。。 1096
赞赏
雪币:
留言: