?? clsasm.cls
字號:
VERSION 1.0 CLASS
BEGIN
MultiUse = -1 'True
Persistable = 0 'NotPersistable
DataBindingBehavior = 0 'vbNone
DataSourceBehavior = 0 'vbNone
MTSTransactionMode = 0 'NotAnMTSObject
END
Attribute VB_Name = "clsASM"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = True
Attribute VB_PredeclaredId = False
Attribute VB_Exposed = False
Option Explicit
'+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
'+ 《聲明》 +
'+ 該類可以任意修改和轉載，如有修改，修改者請發送修改后的代碼給原作者 +
'+ ,代碼修改者可以添加修改者的信息，作者保留此類的所有權,凡是用到此類 +
'+ 請保留下列作者的相關信息. +
'+ +
'+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
'+ 《匯編基礎類》 +
'+ 日 期: 2007年7月10日 +
'+ 名 稱: clsASM +
'+ BG Studio +
'+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
'+ 原作者信息 +
'+ 作 者：孫 林 +
'+ 博 客: http://bycw2007.blog.163.com +
'+ E-MAIL: bycw2005@yahoo.com.cn +
'+ +
'+ 關于我：本人就讀與上海工程技術大學(www.sues.edu.cn)，所學專業雖然 +
'+ 是城市軌道交通，與計算機毫無聯系，但是本人從小酷愛計算機 +
'+ 也算比較熱愛編程，希望與廣大編程愛好者交個朋友 +
'+ +
'+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
'+ 代碼修改者信息 +
'+ 源碼更新：不要踩我 +
'+ 更新日期：2007年7月10日 +
'+ 更新內容：略 +
'+ +
'+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long
Private Declare Function WriteProcessMemory Lib "kernel32" (ByVal hProcess As Long, ByVal lpBaseAddress As Any, lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long
Private Declare Function CreateRemoteThread Lib "kernel32" (ByVal hProcess As Long, lpThreadAttributes As Any, ByVal dwStackSize As Long, lpStartAddress As Long, lpParameter As Any, ByVal dwCreationFlags As Long, lpThreadId As Long) As Long
Private Declare Function VirtualFreeEx Lib "kernel32" (ByVal hProcess As Long, lpAddress As Any, ByVal dwSize As Long, ByVal dwFreeType As Long) As Long
Private Declare Function VirtualAllocEx Lib "kernel32" (ByVal hProcess As Long, lpAddress As Any, ByVal dwSize As Long, ByVal flAllocationType As Long, ByVal flProtect As Long) As Long
Private Declare Function CallWindowProc Lib "user32" Alias "CallWindowProcA" (ByVal lpPrevWndFunc As Long, ByVal hWnd As Long, ByVal Msg As Long, ByVal wParam As Long, ByVal lParam As Long) As Long
Const PAGE_EXECUTE_READWRITE = &H40
Const MEM_COMMIT = &H1000
Const MEM_RESERVE = &H2000
Const MEM_RELEASE = &H8000
Dim OPcode As String
Function Get_Result() As String
Dim i As Long
ReDim AsmCode(Len(OPcode) / 2 - 1) As Byte
For i = 0 To UBound(AsmCode)
AsmCode(i) = CByte("&H" & Mid(OPcode, i * 2 + 1, 2))
Next
Get_Result = CallWindowProc(VarPtr(AsmCode(0)), 0, 0, 0, 0)
End Function
Function Get_Code() As String
Get_Code = OPcode
End Function
Function Run_ASM(hProcess As Long) As Long
Dim i As Long, tmp_Addr As Long
ReDim AsmCode(Len(OPcode) / 2 - 1) As Byte
For i = 0 To UBound(AsmCode)
AsmCode(i) = CByte("&H" & Mid(OPcode, i * 2 + 1, 2))
Next
tmp_Addr = VirtualAllocEx(hProcess, ByVal 0&, UBound(AsmCode) + 1, MEM_COMMIT, PAGE_EXECUTE_READWRITE)
WriteProcessMemory hProcess, ByVal tmp_Addr, ByVal VarPtr(AsmCode(0)), UBound(AsmCode) + 1, ByVal 0&
CreateRemoteThread hProcess, ByVal 0&, 0, ByVal tmp_Addr, ByVal 0&, ByVal 0&, ByVal 0&
VirtualFreeEx hProcess, tmp_Addr, UBound(AsmCode) + 1, MEM_RELEASE
End Function
Function Int2Hex(Value As Long, n As Long) As String '高地位互換
Dim tmp1 As String, tmp2 As String, i As Long
tmp1 = Right("0000000" + Hex(Value), n)
For i = 0 To Len(tmp1) / 2 - 1
tmp2 = tmp2 + Mid(tmp1, Len(tmp1) - 1 - 2 * i, 2)
Next i
Int2Hex = tmp2
End Function
Function Leave() As Long
OPcode = OPcode + "C9"
End Function
Function Pushad() As Long
OPcode = OPcode + "60"
End Function
Function Popad() As Long
OPcode = OPcode + "61"
End Function
Function Nop() As Long
OPcode = OPcode + "90"
End Function
Function Ret() As Long
OPcode = OPcode + "C3"
End Function
Function RetA(i As Long) As Long
OPcode = OPcode + Int2Hex(i, 4)
End Function
Function IN_AL_DX() As Long
OPcode = OPcode + "EC"
End Function
Function TEST_EAX_EAX() As Long
OPcode = OPcode + "85C0"
End Function
'Add
'+++++++++++++++++++++++++++++++++++
Function Add_EAX_EDX() As Long
OPcode = OPcode + "03C2"
End Function
Function Add_EBX_EAX() As Long
OPcode = OPcode + "03D8"
End Function
Function Add_EAX_DWORD_Ptr(i As Long) As Long
OPcode = OPcode + "0305" + Int2Hex(i, 8)
End Function
Function Add_EBX_DWORD_Ptr(i As Long) As Long
OPcode = OPcode + "031D" + Int2Hex(i, 8)
End Function
Function Add_EBP_DWORD_Ptr(i As Long) As Long
OPcode = OPcode + "032D" + Int2Hex(i, 8)
End Function
Function Add_EAX(i As Long) As Long
OPcode = OPcode + "05" + Int2Hex(i, 8)
End Function
Function Add_EBX(i As Long) As Long
OPcode = OPcode + "83C3" + Int2Hex(i, 8)
End Function
Function Add_ECX(i As Long) As Long
OPcode = OPcode + "83C1" + Int2Hex(i, 8)
End Function
Function Add_EDX(i As Long) As Long
OPcode = OPcode + "83C2" + Int2Hex(i, 8)
End Function
Function Add_ESI(i As Long) As Long
OPcode = OPcode + "83C6" + Int2Hex(i, 8)
End Function
Function Add_ESP(i As Long) As Long
OPcode = OPcode + "83C4" + Int2Hex(i, 8)
End Function
'Call
'+++++++++++++++++++++++++++++++++++
Function Call_EAX() As Long
OPcode = OPcode + "FFD0"
End Function
Function Call_EBX() As Long
OPcode = OPcode + "FFD3"
End Function
Function Call_ECX() As Long
OPcode = OPcode + "FFD1"
End Function
Function Call_EDX() As Long
OPcode = OPcode + "FFD2"
End Function
Function Call_ESI() As Long
OPcode = OPcode + "FFD2"
End Function
Function Call_ESP() As Long
OPcode = OPcode + "FFD4"
End Function
Function Call_EBP() As Long
OPcode = OPcode + "FFD5"
End Function
Function Call_EDI() As Long
OPcode = OPcode + "FFD7"
End Function
Function Call_DWORD_Ptr(i As Long) As Long
OPcode = OPcode + "FF15" + Int2Hex(i, 8)
End Function
Function Call_DWORD_Ptr_EAX() As Long
OPcode = OPcode + "FF10"
End Function
Function Call_DWORD_Ptr_EBX() As Long
OPcode = OPcode + "FF13"
End Function
'Cmp
'+++++++++++++++++++++++++++++++++++
Function Cmp_EAX(i As Long) As Long
If i <= 255 Then
OPcode = OPcode + "83F8" + Int2Hex(i, 2)
Else
OPcode = OPcode + "3D" + Int2Hex(i, 8)
End If
End Function
Function Cmp_EAX_EDX() As Long
OPcode = OPcode + "3BC2"
End Function
Function Cmp_EAX_DWORD_Ptr(i As Long) As Long
OPcode = OPcode + "3B05" + Int2Hex(i, 8)
End Function
Function Cmp_DWORD_Ptr_EAX(i As Long) As Long
OPcode = OPcode + "3905" + Int2Hex(i, 8)
End Function
'DEC
'+++++++++++++++++++++++++++++++++++
Function Dec_EAX() As Long
OPcode = OPcode + "48"
End Function
Function Dec_EBX() As Long
OPcode = OPcode + "4B"
End Function
Function Dec_ECX() As Long
OPcode = OPcode + "49"
End Function
Function Dec_EDX() As Long
OPcode = OPcode + "4A"
End Function
'Idiv
'+++++++++++++++++++++++++++++++++++
Function Idiv_EAX() As Long
OPcode = OPcode + "F7F8"
End Function
Function Idiv_EBX() As Long
OPcode = OPcode + "F7FB"
End Function
Function Idiv_ECX() As Long
OPcode = OPcode + "F7F9"
End Function
Function Idiv_EDX() As Long
OPcode = OPcode + "F7FA"
End Function
'Imul
'+++++++++++++++++++++++++++++++++++
Function Imul_EAX_EDX() As Long
OPcode = OPcode + "0FAFC2"
End Function
Function Imul_EAX_(i As Long) As Long
If i <= 255 Then
OPcode = OPcode + "6BC0" + Int2Hex(i, 2)
Else
OPcode = OPcode + "69C0" + Int2Hex(i, 8)
End If
End Function
'INC
'+++++++++++++++++++++++++++++++++++
Function Inc_EAX() As Long
OPcode = OPcode + "40"
End Function
Function Inc_EBX() As Long
OPcode = OPcode + "43"
End Function
Function Inc_ECX() As Long
OPcode = OPcode + "41"
End Function
Function Inc_EDX() As Long
OPcode = OPcode + "42"
End Function
Function Inc_EDI() As Long
OPcode = OPcode + "47"
End Function
Function Inc_ESI() As Long
OPcode = OPcode + "46"
End Function
Function Inc_DWORD_Ptr_EAX() As Long
OPcode = OPcode + "FF00"
End Function
Function Inc_DWORD_Ptr_EBX() As Long
OPcode = OPcode + "FF03"
End Function
Function Inc_DWORD_Ptr_ECX() As Long
OPcode = OPcode + "FF01"
End Function
Function Inc_DWORD_Ptr_EDX() As Long
OPcode = OPcode + "FF02"
End Function
'JMP/JE/JNE
'+++++++++++++++++++++++++++++++++++
Function JMP_EAX() As Long
OPcode = OPcode + "FFE0"
End Function
'Mov
Function Mov_DWORD_Ptr_EAX(i As Long) As Long
OPcode = OPcode + "A3" + Int2Hex(i, 8)
End Function
Function Mov_EAX(i As Long) As Long
OPcode = OPcode + "B8" + Int2Hex(i, 8)
End Function
Function Mov_EBX(i As Long) As Long
OPcode = OPcode + "BB" + Int2Hex(i, 8)
End Function
Function Mov_ECX(i As Long) As Long
OPcode = OPcode + "B9" + Int2Hex(i, 8)
End Function
Function Mov_EDX(i As Long) As Long
OPcode = OPcode + "BA" + Int2Hex(i, 8)
End Function
Function Mov_ESI(i As Long) As Long
OPcode = OPcode + "BE" + Int2Hex(i, 8)
End Function
Function Mov_ESP(i As Long) As Long
OPcode = OPcode + "BC" + Int2Hex(i, 8)
End Function
Function Mov_EBP(i As Long) As Long
OPcode = OPcode + "BD" + Int2Hex(i, 8)
End Function
Function Mov_EDI(i As Long) As Long
OPcode = OPcode + "BF" + Int2Hex(i, 8)
End Function
Function Mov_EBX_DWORD_Ptr(i As Long) As Long
OPcode = OPcode + "8B1D" + Int2Hex(i, 8)
End Function
Function Mov_ECX_DWORD_Ptr(i As Long) As Long
OPcode = OPcode + "8B0D" + Int2Hex(i, 8)
End Function
Function Mov_EAX_DWORD_Ptr(i As Long) As Long
OPcode = OPcode + "A1" + Int2Hex(i, 8)
End Function
Function Mov_EDX_DWORD_Ptr(i As Long) As Long
OPcode = OPcode + "8B15" + Int2Hex(i, 8)
End Function
Function Mov_ESI_DWORD_Ptr(i As Long) As Long
OPcode = OPcode + "8B35" + Int2Hex(i, 8)
End Function
Function Mov_ESP_DWORD_Ptr(i As Long) As Long
OPcode = OPcode + "8B25" + Int2Hex(i, 8)
End Function
Function Mov_EBP_DWORD_Ptr(i As Long) As Long
OPcode = OPcode + "8B2D" + Int2Hex(i, 8)
End Function
Function Mov_EAX_DWORD_Ptr_EAX() As Long
OPcode = OPcode + "8B00"
End Function
Function Mov_EAX_DWORD_Ptr_EBP() As Long
OPcode = OPcode + "8B4500"
End Function
Function Mov_EAX_DWORD_Ptr_EBX() As Long
OPcode = OPcode + "8B03"
End Function
Function Mov_EAX_DWORD_Ptr_ECX() As Long
OPcode = OPcode + "8B01"
End Function
Function Mov_EAX_DWORD_Ptr_EDX() As Long
OPcode = OPcode + "8B02"
End Function
Function Mov_EAX_DWORD_Ptr_EDI() As Long
OPcode = OPcode + "8B07"
End Function
Function Mov_EAX_DWORD_Ptr_ESP() As Long
OPcode = OPcode + "8B0424"
End Function
Function Mov_EAX_DWORD_Ptr_ESI() As Long
OPcode = OPcode + "8B06"
End Function
Function Mov_EAX_DWORD_Ptr_EAX_Add(i As Long) As Long
If i <= 255 Then
OPcode = OPcode + "8B40" + Int2Hex(i, 2)
Else
OPcode = OPcode + "8B80" + Int2Hex(i, 8)
End If
End Function
Function Mov_EAX_DWORD_Ptr_ESP_Add(i As Long) As Long
If i <= 255 Then
OPcode = OPcode + "8B4424" + Int2Hex(i, 2)
Else
OPcode = OPcode + "8B8424" + Int2Hex(i, 8)
End If
End Function
Function Mov_EAX_DWORD_Ptr_EBX_Add(i As Long) As Long
If i <= 255 Then
OPcode = OPcode + "8B43" + Int2Hex(i, 2)
Else
OPcode = OPcode + "8B83" + Int2Hex(i, 8)
End If
End Function
Function Mov_EAX_DWORD_Ptr_ECX_Add(i As Long) As Long
If i <= 255 Then
OPcode = OPcode + "8B41" + Int2Hex(i, 2)
Else
OPcode = OPcode + "8B81" + Int2Hex(i, 8)
End If
End Function
?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -