-
-
有谁帮助分析一下这个函数(汇编)。谢谢!
-
发表于:
2010-5-20 16:59
2802
-
有谁帮助分析一下这个函数。谢谢!
大约是传BCD码,经过处理后。变成字段串。
.text:081D6D63 align 4
.text:081D6D64
.text:081D6D64 ; =============== S U B R O U T I N E =======================================
.text:081D6D64
.text:081D6D64
.text:081D6D64 sub_81D6D64 proc near ; CODE XREF: sub_81D6E14+EEp
.text:081D6D64 push ebx
.text:081D6D65 push esi
.text:081D6D66 push edi
.text:081D6D67 push ebp
.text:081D6D68 mov ebp, edx
.text:081D6D6A mov edi, eax
.text:081D6D6C mov eax, edi
.text:081D6D6E test eax, eax
.text:081D6D70 jz short loc_81D6D77
.text:081D6D72 sub eax, 4
.text:081D6D75 mov eax, [eax]
.text:081D6D77
.text:081D6D77 loc_81D6D77: ; CODE XREF: sub_81D6D64+Cj
.text:081D6D77 mov ebx, eax
.text:081D6D79 test ebx, ebx
.text:081D6D7B jz short loc_81D6D82
.text:081D6D7D cmp byte ptr [edi], 1
.text:081D6D80 jz short loc_81D6D8D
.text:081D6D82
.text:081D6D82 loc_81D6D82: ; CODE XREF: sub_81D6D64+17j
.text:081D6D82 mov eax, ebp
.text:081D6D84 mov edx, edi
.text:081D6D86 call @System@@LStrAsg$qqrpvpxv ; System::__linkproc__ LStrAsg(void *,void *)
.text:081D6D8B jmp short loc_81D6DC6
.text:081D6D8D ; ---------------------------------------------------------------------------
.text:081D6D8D
.text:081D6D8D loc_81D6D8D: ; CODE XREF: sub_81D6D64+1Cj
.text:081D6D8D mov edx, ebx
.text:081D6D8F dec edx
.text:081D6D90 mov eax, ebp
.text:081D6D92 call @System@@LStrSetLength$qqrv ; System::__linkproc__ LStrSetLength(void)
.text:081D6D97 mov esi, ebx
.text:081D6D99 sub esi, 2
.text:081D6D9C jl short loc_81D6DC6
.text:081D6D9E inc esi
.text:081D6D9F mov ebx, 2
.text:081D6DA4
.text:081D6DA4 loc_81D6DA4: ; CODE XREF: sub_81D6D64+60j
.text:081D6DA4 movzx eax, byte ptr [edi+ebx-1]
.text:081D6DA9 xor al, 7Fh
.text:081D6DAB call sub_81CDD88
.text:081D6DB0 mov edx, ebx
.text:081D6DB2 dec edx
.text:081D6DB3 xor al, dl
.text:081D6DB5 push eax
.text:081D6DB6 mov eax, ebp
.text:081D6DB8 call j_unknown_libname_69_0
.text:081D6DBD pop edx
.text:081D6DBE mov [eax+ebx-2], dl
.text:081D6DC2 inc ebx
.text:081D6DC3 dec esi
.text:081D6DC4 jnz short loc_81D6DA4
.text:081D6DC6
.text:081D6DC6 loc_81D6DC6: ; CODE XREF: sub_81D6D64+27j
.text:081D6DC6 ; sub_81D6D64+38j
.text:081D6DC6 pop ebp
.text:081D6DC7 pop edi
.text:081D6DC8 pop esi
.text:081D6DC9 pop ebx
.text:081D6DCA retn
.text:081D6DCA sub_81D6D64 endp
[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)