modasm.bas

VB的反编译分析代码,很强的功能,能分析VB生成的EXE、DLL文件的结构

    AddAOC TblASM_OPCODE(272), &H6E, 1, 0, 0, 0, 0, 51, 0, 0, 0, "OUTS DX,", ""
    TblPtrASM(110) = 272
    AddAOC TblASM_OPCODE(273), &H6F, 1, 0, 0, 0, 0, 53, 0, 0, 0, "OUTS DX,", ""
    TblPtrASM(111) = 273
    AddAOC TblASM_OPCODE(274), &H70, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JO ", ""
    TblPtrASM(112) = 274
    AddAOC TblASM_OPCODE(275), &H71, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JNO ", ""
    TblPtrASM(113) = 275
    AddAOC TblASM_OPCODE(276), &H72, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JC ", ""
    TblPtrASM(114) = 276
    AddAOC TblASM_OPCODE(277), &H73, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JAE ", ""
    TblPtrASM(115) = 277
    AddAOC TblASM_OPCODE(278), &H74, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JE ", ""
    TblPtrASM(116) = 278
    AddAOC TblASM_OPCODE(279), &H75, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JNE ", ""
    TblPtrASM(117) = 279
    AddAOC TblASM_OPCODE(280), &H76, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JBE ", ""
    TblPtrASM(118) = 280
    AddAOC TblASM_OPCODE(281), &H77, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JA ", ""
    TblPtrASM(119) = 281
    AddAOC TblASM_OPCODE(282), &H78, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JS ", ""
    TblPtrASM(120) = 282
    AddAOC TblASM_OPCODE(283), &H79, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JNS ", ""
    TblPtrASM(121) = 283
    AddAOC TblASM_OPCODE(284), &H7A, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JPE ", ""
    TblPtrASM(122) = 284
    AddAOC TblASM_OPCODE(285), &H7B, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JPO ", ""
    TblPtrASM(123) = 285
    AddAOC TblASM_OPCODE(286), &H7C, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JL ", ""
    TblPtrASM(124) = 286
    AddAOC TblASM_OPCODE(287), &H7D, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JGE ", ""
    TblPtrASM(125) = 287
    AddAOC TblASM_OPCODE(288), &H7E, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JLE ", ""
    TblPtrASM(126) = 288
    AddAOC TblASM_OPCODE(289), &H7F, 1, 0, 0, 0, 22, 34, 0, 0, 0, "JG ", ""
    TblPtrASM(127) = 289
    AddAOC TblASM_OPCODE(290), &H80, 1, 0, 0, 0, 26, 18, 42, 0, 0, "ADD ", ""
    TblPtrASM(128) = 290
    AddAOC TblASM_OPCODE(291), &H80, 1, 0, 0, 2, 26, 18, 42, 0, 0, "OR ", ""
    AddAOC TblASM_OPCODE(292), &H80, 1, 0, 0, 3, 26, 18, 42, 0, 0, "ADC ", ""
    AddAOC TblASM_OPCODE(293), &H80, 1, 0, 0, 4, 26, 18, 42, 0, 0, "SBB ", ""
    AddAOC TblASM_OPCODE(294), &H80, 1, 0, 0, 5, 26, 18, 42, 0, 0, "AND ", ""
    AddAOC TblASM_OPCODE(295), &H80, 1, 0, 0, 6, 26, 18, 42, 0, 0, "SUB ", ""
    AddAOC TblASM_OPCODE(296), &H80, 1, 0, 0, 7, 26, 18, 42, 0, 0, "XOR ", ""
    AddAOC TblASM_OPCODE(297), &H80, 1, 0, 0, 8, 26, 18, 42, 0, 0, "CMP ", ""
    AddAOC TblASM_OPCODE(298), &H81, 1, 0, 0, 0, 28, 20, 44, 0, 0, "ADD ", ""
    TblPtrASM(129) = 298
    AddAOC TblASM_OPCODE(299), &H81, 1, 0, 0, 2, 28, 20, 44, 0, 0, "OR ", ""
    AddAOC TblASM_OPCODE(300), &H81, 1, 0, 0, 3, 28, 20, 44, 0, 0, "ADC ", ""
    AddAOC TblASM_OPCODE(301), &H81, 1, 0, 0, 4, 28, 20, 44, 0, 0, "SBB ", ""
    AddAOC TblASM_OPCODE(302), &H81, 1, 0, 0, 5, 28, 20, 44, 0, 0, "AND ", ""
    AddAOC TblASM_OPCODE(303), &H81, 1, 0, 0, 6, 28, 20, 44, 0, 0, "SUB ", ""
    AddAOC TblASM_OPCODE(304), &H81, 1, 0, 0, 7, 28, 20, 44, 0, 0, "XOR ", ""
    AddAOC TblASM_OPCODE(305), &H81, 1, 0, 0, 8, 28, 20, 44, 0, 0, "CMP ", ""
    AddAOC TblASM_OPCODE(306), &H83, 1, 0, 0, 0, 26, 20, 42, 0, 0, "ADD ", ""
    TblPtrASM(131) = 306
    AddAOC TblASM_OPCODE(307), &H83, 1, 0, 0, 2, 26, 20, 42, 0, 0, "OR ", ""
    AddAOC TblASM_OPCODE(308), &H83, 1, 0, 0, 3, 26, 20, 42, 0, 0, "ADC ", ""
    AddAOC TblASM_OPCODE(309), &H83, 1, 0, 0, 4, 26, 20, 42, 0, 0, "SBB ", ""
    AddAOC TblASM_OPCODE(310), &H83, 1, 0, 0, 5, 26, 20, 42, 0, 0, "AND ", ""
    AddAOC TblASM_OPCODE(311), &H83, 1, 0, 0, 6, 26, 20, 42, 0, 0, "SUB ", ""
    AddAOC TblASM_OPCODE(312), &H83, 1, 0, 0, 7, 26, 20, 42, 0, 0, "XOR ", ""
    AddAOC TblASM_OPCODE(313), &H83, 1, 0, 0, 8, 26, 20, 42, 0, 0, "CMP ", ""
    AddAOC TblASM_OPCODE(314), &H84, 1, 0, 0, 17, 0, 18, 38, 0, 0, "TEST ", ""
    TblPtrASM(132) = 314
    AddAOC TblASM_OPCODE(315), &H85, 1, 0, 0, 17, 0, 19, 39, 0, 0, "TEST ", ""
    TblPtrASM(133) = 315
    AddAOC TblASM_OPCODE(316), &H85, 1, 0, 0, 17, 0, 20, 40, 0, 0, "TEST ", ""
    AddAOC TblASM_OPCODE(317), &H86, 1, 0, 0, 17, 0, 18, 38, 0, 0, "XCHG ", ""
    TblPtrASM(134) = 317
    AddAOC TblASM_OPCODE(318), &H86, 1, 0, 0, 17, 0, 38, 18, 0, 0, "XCHG ", ""
    AddAOC TblASM_OPCODE(319), &H87, 1, 0, 0, 17, 0, 20, 40, 0, 0, "XCHG ", ""
    TblPtrASM(135) = 319
    AddAOC TblASM_OPCODE(320), &H87, 1, 0, 0, 17, 0, 40, 20, 0, 0, "XCHG ", ""
    AddAOC TblASM_OPCODE(321), &H88, 1, 0, 0, 17, 0, 18, 38, 0, 0, "MOV ", ""
    TblPtrASM(136) = 321
    AddAOC TblASM_OPCODE(322), &H89, 1, 0, 0, 17, 0, 20, 40, 0, 0, "MOV ", ""
    TblPtrASM(137) = 322
    AddAOC TblASM_OPCODE(323), &H8A, 1, 0, 0, 17, 0, 38, 18, 0, 0, "MOV ", ""
    TblPtrASM(138) = 323
    AddAOC TblASM_OPCODE(324), &H8B, 1, 0, 0, 17, 0, 40, 20, 0, 0, "MOV ", ""
    TblPtrASM(139) = 324
    AddAOC TblASM_OPCODE(325), &H8C, 1, 0, 0, 17, 0, 19, 0, 0, 0, "MOV ", ""
    TblPtrASM(140) = 325
    AddAOC TblASM_OPCODE(326), &H8D, 1, 0, 0, 17, 0, 40, 50, 0, 0, "LEA ", ""
    TblPtrASM(141) = 326
    AddAOC TblASM_OPCODE(327), &H8E, 1, 0, 0, 17, 0, 0, 0, 0, 0, "MOV S", ""
    TblPtrASM(142) = 327
    AddAOC TblASM_OPCODE(328), &H8F, 1, 0, 0, 0, 0, 53, 0, 0, 0, "POP ", ""
    TblPtrASM(143) = 328
    AddAOC TblASM_OPCODE(329), &H90, 1, 0, 0, 0, 0, 0, 0, 0, 0, "NOP", ""
    TblPtrASM(144) = 329

    'equivoque ???
    AddAOC TblASM_OPCODE(330), &H90, 1, 32, 0, 0, 0, 40, 0, 0, 0, "XCHG EAX,", ""
    TblPtrASM(145) = 330
    TblPtrASM(146) = 330
    TblPtrASM(147) = 330
    TblPtrASM(148) = 330
    TblPtrASM(149) = 330
    TblPtrASM(150) = 330
    TblPtrASM(151) = 330
    AddAOC TblASM_OPCODE(331), &H90, 1, 32, 0, 0, 0, 40, 0, 0, 0, "XCHG ", ",EAX"
    'ee

    AddAOC TblASM_OPCODE(332), &H98, 1, 0, 0, 0, 0, 0, 0, 0, 0, "CBW", ""
    TblPtrASM(152) = 332
    AddAOC TblASM_OPCODE(333), &H99, 1, 0, 0, 0, 0, 0, 0, 0, 0, "CDQ", ""
    TblPtrASM(153) = 333
    AddAOC TblASM_OPCODE(334), &H99, 1, 0, 0, 0, 0, 0, 0, 0, 0, "CWD", ""
    AddAOC TblASM_OPCODE(335), &H9A, 1, 0, 0, 0, 0, 0, 0, 0, 0, "CALL pt", ""
    TblPtrASM(154) = 335
    AddAOC TblASM_OPCODE(336), &H9B, 1, 0, 0, 0, 0, 0, 0, 0, 0, "FWAIT", ""
    TblPtrASM(155) = 336
    AddAOC TblASM_OPCODE(337), &H9B, 1, 0, 0, 0, 0, 0, 0, 0, 0, "WAIT", ""
    AddAOC TblASM_OPCODE(338), &HD99B, 2, 0, 0, 7, 0, 0, 0, 0, 0, "FSTENV ", ""
    AddAOC TblASM_OPCODE(339), &HD99B, 2, 0, 0, 8, 0, 0, 0, 0, 0, "FSTCW ", ""
    AddAOC TblASM_OPCODE(340), &HDB9B, 2, 0, 0, 0, 0, 0, 0, 0, 0, "FCLEX", ""
    AddAOC TblASM_OPCODE(341), &HDB9B, 2, 0, 0, 0, 0, 0, 0, 0, 0, "FINIT", ""
    AddAOC TblASM_OPCODE(342), &HDD9B, 2, 0, 0, 7, 0, 0, 0, 0, 0, "FSAVE ", ""
    AddAOC TblASM_OPCODE(343), &HDD9B, 2, 0, 0, 8, 0, 0, 0, 0, 0, "FSTSW ", ""
    AddAOC TblASM_OPCODE(344), &HDF9B, 2, 0, 0, 0, 0, 0, 0, 0, 0, "FSTSW AX", ""
    AddAOC TblASM_OPCODE(345), &H9C, 1, 0, 0, 0, 0, 0, 0, 0, 0, "PUSHFD", ""
    TblPtrASM(156) = 345
    AddAOC TblASM_OPCODE(346), &H9D, 1, 0, 0, 0, 0, 0, 0, 0, 0, "POPFD", ""
    TblPtrASM(157) = 346
    AddAOC TblASM_OPCODE(347), &H9E, 1, 0, 0, 0, 0, 0, 0, 0, 0, "SAHF", ""
    TblPtrASM(158) = 347
    AddAOC TblASM_OPCODE(348), &H9F, 1, 0, 0, 0, 0, 0, 0, 0, 0, "LAHF", ""
    TblPtrASM(159) = 348
    AddAOC TblASM_OPCODE(349), &HA0, 1, 0, 0, 0, 0, 0, 0, 0, 0, "MOV AL, ", ""
    TblPtrASM(160) = 349
    AddAOC TblASM_OPCODE(350), &HA1, 1, 0, 0, 0, 0, 0, 0, 0, 0, "MOV AX, ", ""
    TblPtrASM(161) = 350
    AddAOC TblASM_OPCODE(351), &HA1, 1, 0, 0, 0, 0, 0, 0, 0, 0, "MOV EAX, ", ""
    AddAOC TblASM_OPCODE(352), &HA2, 1, 0, 0, 0, 0, 0, 0, 0, 0, "MOV ", ",AL"
    TblPtrASM(162) = 352
    AddAOC TblASM_OPCODE(353), &HA3, 1, 0, 0, 0, 0, 0, 0, 0, 0, "MOV ", ",AX"
    TblPtrASM(163) = 353
    AddAOC TblASM_OPCODE(354), &HA3, 1, 0, 0, 0, 0, 0, 0, 0, 0, "MOV ", ",EAX"
    AddAOC TblASM_OPCODE(355), &HA4, 1, 0, 0, 0, 0, 51, 51, 0, 0, "MOVS ", ""
    TblPtrASM(164) = 355
    AddAOC TblASM_OPCODE(356), &HA5, 1, 0, 0, 0, 0, 53, 53, 0, 0, "MOVS ", ""
    TblPtrASM(165) = 356
    AddAOC TblASM_OPCODE(357), &HA6, 1, 0, 0, 0, 0, 0, 0, 0, 0, "CMPSB", ""
    TblPtrASM(166) = 357
    AddAOC TblASM_OPCODE(358), &HA7, 1, 0, 0, 0, 0, 0, 0, 0, 0, "CMPSD", ""
    TblPtrASM(167) = 358
    AddAOC TblASM_OPCODE(359), &HA8, 1, 0, 0, 0, 26, 42, 0, 0, 0, "TEST AL,", ""
    TblPtrASM(168) = 359
    AddAOC TblASM_OPCODE(360), &HA9, 1, 0, 0, 0, 28, 44, 0, 0, 0, "TEST EAX,", ""
    TblPtrASM(169) = 360
    AddAOC TblASM_OPCODE(361), &HAA, 1, 0, 0, 0, 0, 51, 0, 0, 0, "STOS ", ""
    TblPtrASM(170) = 361
    AddAOC TblASM_OPCODE(362), &HAB, 1, 0, 0, 0, 0, 53, 0, 0, 0, "STOS ", ""
    TblPtrASM(171) = 362
    AddAOC TblASM_OPCODE(363), &HAC, 1, 0, 0, 0, 0, 51, 0, 0, 0, "LODS ", ""
    TblPtrASM(172) = 363
    AddAOC TblASM_OPCODE(364), &HAD, 1, 0, 0, 0, 0, 53, 0, 0, 0, "LODS ", ""
    TblPtrASM(173) = 364
    AddAOC TblASM_OPCODE(365), &HAE, 1, 0, 0, 0, 0, 51, 0, 0, 0, "SCAS ", ""
    TblPtrASM(174) = 365
    AddAOC TblASM_OPCODE(366), &HAF, 1, 0, 0, 0, 0, 53, 0, 0, 0, "SCAS ", ""
    TblPtrASM(175) = 366
    AddAOC TblASM_OPCODE(367), &HB0, 1, 30, 0, 0, 0, 38, 42, 0, 0, "MOV ", ""
    TblPtrASM(176) = 367
    TblPtrASM(177) = 367
    TblPtrASM(178) = 367
    TblPtrASM(179) = 367
    TblPtrASM(180) = 367
    TblPtrASM(181) = 367
    TblPtrASM(182) = 367
    TblPtrASM(183) = 367
    AddAOC TblASM_OPCODE(368), &HB8, 1, 32, 0, 0, 0, 40, 44, 0, 0, "MOV ", ""
    TblPtrASM(184) = 368
    TblPtrASM(185) = 368
    TblPtrASM(186) = 368
    TblPtrASM(187) = 368
    TblPtrASM(188) = 368
    TblPtrASM(189) = 368
    TblPtrASM(190) = 368
    TblPtrASM(191) = 368
    AddAOC TblASM_OPCODE(369), &HC0, 1, 0, 0, 0, 26, 18, 42, 0, 0, "ROL ", ""
    TblPtrASM(192) = 369
    AddAOC TblASM_OPCODE(370), &HC0, 1, 0, 0, 2, 26, 18, 42, 0, 0, "ROR ", ""
    AddAOC TblASM_OPCODE(371), &HC0, 1, 0, 0, 3, 26, 18, 42, 0, 0, "RCL ", ""
    AddAOC TblASM_OPCODE(372), &HC0, 1, 0, 0, 4, 26, 18, 42, 0, 0, "RCR ", ""
    AddAOC TblASM_OPCODE(373), &HC0, 1, 0, 0, 5, 26, 18, 42, 0, 0, "SAL ", ""
    AddAOC TblASM_OPCODE(374), &HC0, 1, 0, 0, 5, 26, 18, 42, 0, 0, "SHL ", ""
    AddAOC TblASM_OPCODE(375), &HC0, 1, 0, 0, 6, 26, 18, 42, 0, 0, "SHR ", ""
    AddAOC TblASM_OPCODE(376), &HC0, 1, 0, 0, 8, 26, 18, 42, 0, 0, "SAR ", ""
    AddAOC TblASM_OPCODE(377), &HC1, 1, 0, 0, 0, 26, 20, 42, 0, 0, "ROL ", ""
    TblPtrASM(193) = 377
    AddAOC TblASM_OPCODE(378), &HC1, 1, 0, 0, 2, 26, 20, 42, 0, 0, "ROR ", ""
    AddAOC TblASM_OPCODE(379), &HC1, 1, 0, 0, 3, 26, 20, 42, 0, 0, "RCL ", ""
    AddAOC TblASM_OPCODE(380), &HC1, 1, 0, 0, 4, 26, 20, 42, 0, 0, "RCR ", ""
    AddAOC TblASM_OPCODE(381), &HC1, 1, 0, 0, 5, 26, 20, 42, 0, 0, "SAL ", ""
    AddAOC TblASM_OPCODE(382), &HC1, 1, 0, 0, 5, 26, 20, 42, 0, 0, "SHL ", ""
    AddAOC TblASM_OPCODE(383), &HC1, 1, 0, 0, 6, 26, 20, 42, 0, 0, "SHR ", ""
    AddAOC TblASM_OPCODE(384), &HC1, 1, 0, 0, 8, 26, 20, 42, 0, 0, "SAR ", ""
    AddAOC TblASM_OPCODE(385), &HC2, 1, 0, 0, 0, 27, 43, 0, 0, 0, "RET ", ""
    TblPtrASM(194) = 385
    AddAOC TblASM_OPCODE(386), &HC3, 1, 0, 0, 0, 0, 0, 0, 0, 0, "RET", ""
    TblPtrASM(195) = 386
    AddAOC TblASM_OPCODE(387), &HC4, 1, 0, 0, 17, 0, 40, 61, 0, 0, "LES ", ""
    TblPtrASM(196) = 387
    AddAOC TblASM_OPCODE(388), &HC5, 1, 0, 0, 17, 0, 40, 61, 0, 0, "LDS ", ""
    TblPtrASM(197) = 388
    AddAOC TblASM_OPCODE(389), &HC6, 1, 0, 0, 0, 26, 18, 42, 0, 0, "MOV ", ""
    TblPtrASM(198) = 389
    AddAOC TblASM_OPCODE(390), &HC7, 1, 0, 0, 0, 28, 20, 44, 0, 0, "MOV ", ""
    TblPtrASM(199) = 390
    AddAOC TblASM_OPCODE(391), &HC8, 1, 0, 0, 27, 0, 43, 0, 0, 0, "ENTER ", ",0"
    TblPtrASM(200) = 391
    AddAOC TblASM_OPCODE(392), &HC8, 1, 0, 0, 27, 0, 43, 0, 0, 0, "ENTER ", ",1"
    AddAOC TblASM_OPCODE(393), &HC8, 1, 0, 0, 27, 26, 43, 42, 0, 0, "ENTER ", ""
    AddAOC TblASM_OPCODE(394), &HC9, 1, 0, 0, 0, 0, 0, 0, 0, 0, "LEAVE", ""
    TblPtrASM(201) = 394
    AddAOC TblASM_OPCODE(395), &HCA, 1, 0, 0, 0, 27, 43, 0, 0, 0, "RET ", ""
    TblPtrASM(202) = 395
    AddAOC TblASM_OPCODE(396), &HCB, 1, 0, 0, 0, 0, 0, 0, 0, 0, "RET", ""
    TblPtrASM(203) = 396
    AddAOC TblASM_OPCODE(397), &HCC, 1, 0, 0, 0, 0, 0, 0, 0, 0, "INT 3", ""
    TblPtrASM(204) = 397
    AddAOC TblASM_OPCODE(398), &HCD, 1, 0, 0, 0, 26, 42, 0, 0, 0, "INT ", ""
    TblPtrASM(205) = 398
    AddAOC TblASM_OPCODE(399), &HCE, 1, 0, 0, 0, 0, 0, 0, 0, 0, "INTO", ""
    TblPtrASM(206) = 399
    AddAOC TblASM_OPCODE(400), &HCF, 1, 0, 0, 0, 0, 0, 0, 0, 0, "IRETD", ""
    TblPtrASM(207) = 400
    AddAOC TblASM_OPCODE(401), &HD0, 1, 0, 0, 0, 0, 18, 0, 0, 0, "ROL ", ",1"
    TblPtrASM(208) = 401
    AddAOC TblASM_OPCODE(402), &HD0, 1, 0, 0, 2, 0, 18, 0, 0, 0, "ROR ", ",1"
    AddAOC TblASM_OPCODE(403), &HD0, 1, 0, 0, 3, 0, 18, 0, 0, 0, "RCL ", ",1"
    AddAOC TblASM_OPCODE(404), &HD0, 1, 0, 0, 4, 0, 18, 0, 0, 0, "RCR ", ",1"
    AddAOC TblASM_OPCODE(405), &HD0, 1, 0, 0, 5, 0, 18, 0, 0, 0, "SAL ", ",1"
    AddAOC TblASM_OPCODE(406), &HD0, 1, 0, 0, 5, 0, 18, 0, 0, 0, "SHL ", ",1"
    AddAOC TblASM_OPCODE(407), &HD0, 1, 0, 0, 6, 0, 18, 0, 0, 0, "SHR ", ",1"