-
-
[旧帖] [求助]请问大家,这个是算法吗? 0.00雪花
-
发表于: 2007-12-14 10:50 2898
-
请问如下:
661065FE > \8D4424 08 lea eax, dword ptr [esp+8]
66106602 . 56 push esi
66106603 . 50 push eax
66106604 . E8 D58BFFFF call 660FF1DE
66106609 . 8D7424 08 lea esi, dword ptr [esp+8]
6610660D . 8B4424 08 mov eax, dword ptr [esp+8]
66106611 .^ E9 C990FFFF jmp 660FF6DF
66106616 > 8B46 08 mov eax, dword ptr [esi+8] ; Cases 9,D of switch 660FF6E4
66106619 . 85C0 test eax, eax
6610661B .^ 0F84 DB90FFFF je 660FF6FC
66106621 . 8B10 mov edx, dword ptr [eax]
66106623 . 50 push eax
66106624 . FF52 04 call dword ptr [edx+4]
66106627 .^ E9 D090FFFF jmp 660FF6FC
6610662C > 8BD6 mov edx, esi ; Default case of switch 660FF6E4
6610662E . 8BCF mov ecx, edi
66106630 . E8 078EFFFF call __vbaVarCopy
66106635 . 8BC7 mov eax, edi
66106637 . 5F pop edi
66106638 . 5E pop esi
66106639 . 83C4 10 add esp, 10
6610663C . C3 retn
6610663D > 8B49 08 mov ecx, dword ptr [ecx+8] ; Case 11 of switch 660FF1FC
66106640 . 8A11 mov dl, byte ptr [ecx]
66106642 . 8850 08 mov byte ptr [eax+8], dl
66106645 . 5F pop edi
66106646 . 5E pop esi
66106647 . C2 0800 retn 8
6610664A > 8B49 08 mov ecx, dword ptr [ecx+8] ; Cases 2,B of switch 660FF1FC
6610664D . 66:8B11 mov dx, word ptr [ecx]
66106650 . 66:8950 08 mov word ptr [eax+8], dx
66106654 . 5F pop edi
66106655 . 5E pop esi
66106656 . C2 0800 retn 8
66106659 > 8B49 08 mov ecx, dword ptr [ecx+8] ; Cases 5,6,7 of switch 660FF1FC
6610665C . 8B11 mov edx, dword ptr [ecx]
6610665E . 8950 08 mov dword ptr [eax+8], edx
66106661 . 8B49 04 mov ecx, dword ptr [ecx+4]
66106664 . 8948 0C mov dword ptr [eax+C], ecx
66106667 . 5F pop edi
66106668 . 5E pop esi
66106669 . C2 0800 retn 8
6610666C > 8B51 08 mov edx, dword ptr [ecx+8] ; Cases C,E of switch 660FF1FC
6610666F . 8B0A mov ecx, dword ptr [edx]
66106671 . 8908 mov dword ptr [eax], ecx
66106673 . 8B4A 04 mov ecx, dword ptr [edx+4]
66106676 . 8948 04 mov dword ptr [eax+4], ecx
66106679 . 8B4A 08 mov ecx, dword ptr [edx+8]
6610667C . 8948 08 mov dword ptr [eax+8], ecx
6610667F . 8B52 0C mov edx, dword ptr [edx+C]
66106682 . 8950 0C mov dword ptr [eax+C], edx
66106685 . 5F pop edi
66106686 . 5E pop esi
66106687 . C2 0800 retn 8
6610668A > 8B51 08 mov edx, dword ptr [ecx+8] ; Case 24 of switch 660FF1FC
6610668D . 8B49 0C mov ecx, dword ptr [ecx+C]
66106690 . 8950 08 mov dword ptr [eax+8], edx
66106693 . 8948 0C mov dword ptr [eax+C], ecx
66106696 . 5F pop edi
66106697 . 5E pop esi
66106698 . C2 0800 retn 8
6610669B > F7C7 00200000 test edi, 2000 ; Default case of switch 660FF1FC
661066A1 . 74 0D je short 661066B0
661066A3 > 8B51 08 mov edx, dword ptr [ecx+8] ; Cases 9,D of switch 660FF1FC
661066A6 . 8B0A mov ecx, dword ptr [edx]
661066A8 . 8948 08 mov dword ptr [eax+8], ecx
661066AB . 5F pop edi
661066AC . 5E pop esi
661066AD . C2 0800 retn 8
661066B0 > 68 CA010000 push 1CA
661066B5 . E8 22E9F1FF call 66024FDC
661066BA > 8A41 08 mov al, byte ptr [ecx+8] ; Case 11 of switch 660FF160
661066BD . F6D8 neg al
661066BF . 1BC0 sbb eax, eax
661066C1 . C2 0400 retn 4
661066C4 > 8B41 08 mov eax, dword ptr [ecx+8] ; Case 3 of switch 660FF160
661066C7 . F7D8 neg eax
661066C9 . 1BC0 sbb eax, eax
661066CB . C2 0400 retn 4
661066CE > D941 08 fld dword ptr [ecx+8] ; Case 4 of switch 660FF160
661066D1 . D81D 20020366 fcomp dword ptr [66030220]
661066D7 > DFE0 fstsw ax
661066D9 . F6C4 40 test ah, 40
661066DC . 75 11 jnz short 661066EF
661066DE . 83C8 FF or eax, FFFFFFFF
661066E1 . C2 0400 retn 4
661066E4 > DD41 08 fld qword ptr [ecx+8] ; Cases 5,7 of switch 660FF160
661066E7 . DC1D 28020366 fcomp qword ptr [66030228]
661066ED .^ EB E8 jmp short 661066D7
661066EF > 33C0 xor eax, eax ; Cases 0,1 of switch 660FF160
661066F1 . C2 0400 retn 4
661066F4 > 8B41 08 mov eax, dword ptr [ecx+8] ; Case 6 of switch 660FF160
661066F7 . 8B51 0C mov edx, dword ptr [ecx+C]
661066FA . 0BC2 or eax, edx
661066FC . F7D8 neg eax
661066FE . 1BC0 sbb eax, eax
66106700 . C2 0400 retn 4
66106703 > 8B41 08 mov eax, dword ptr [ecx+8] ; Case E of switch 660FF160
66106706 . 8B51 0C mov edx, dword ptr [ecx+C]
66106709 . 0BC2 or eax, edx
6610670B . 8B51 04 mov edx, dword ptr [ecx+4]
6610670E . 0BC2 or eax, edx
66106710 . F7D8 neg eax
66106712 . 1BC0 sbb eax, eax
66106714 . C2 0400 retn 4
这段代码是算法吗,怎么看怎么算啊?新人请教,谢谢。
661065FE > \8D4424 08 lea eax, dword ptr [esp+8]
66106602 . 56 push esi
66106603 . 50 push eax
66106604 . E8 D58BFFFF call 660FF1DE
66106609 . 8D7424 08 lea esi, dword ptr [esp+8]
6610660D . 8B4424 08 mov eax, dword ptr [esp+8]
66106611 .^ E9 C990FFFF jmp 660FF6DF
66106616 > 8B46 08 mov eax, dword ptr [esi+8] ; Cases 9,D of switch 660FF6E4
66106619 . 85C0 test eax, eax
6610661B .^ 0F84 DB90FFFF je 660FF6FC
66106621 . 8B10 mov edx, dword ptr [eax]
66106623 . 50 push eax
66106624 . FF52 04 call dword ptr [edx+4]
66106627 .^ E9 D090FFFF jmp 660FF6FC
6610662C > 8BD6 mov edx, esi ; Default case of switch 660FF6E4
6610662E . 8BCF mov ecx, edi
66106630 . E8 078EFFFF call __vbaVarCopy
66106635 . 8BC7 mov eax, edi
66106637 . 5F pop edi
66106638 . 5E pop esi
66106639 . 83C4 10 add esp, 10
6610663C . C3 retn
6610663D > 8B49 08 mov ecx, dword ptr [ecx+8] ; Case 11 of switch 660FF1FC
66106640 . 8A11 mov dl, byte ptr [ecx]
66106642 . 8850 08 mov byte ptr [eax+8], dl
66106645 . 5F pop edi
66106646 . 5E pop esi
66106647 . C2 0800 retn 8
6610664A > 8B49 08 mov ecx, dword ptr [ecx+8] ; Cases 2,B of switch 660FF1FC
6610664D . 66:8B11 mov dx, word ptr [ecx]
66106650 . 66:8950 08 mov word ptr [eax+8], dx
66106654 . 5F pop edi
66106655 . 5E pop esi
66106656 . C2 0800 retn 8
66106659 > 8B49 08 mov ecx, dword ptr [ecx+8] ; Cases 5,6,7 of switch 660FF1FC
6610665C . 8B11 mov edx, dword ptr [ecx]
6610665E . 8950 08 mov dword ptr [eax+8], edx
66106661 . 8B49 04 mov ecx, dword ptr [ecx+4]
66106664 . 8948 0C mov dword ptr [eax+C], ecx
66106667 . 5F pop edi
66106668 . 5E pop esi
66106669 . C2 0800 retn 8
6610666C > 8B51 08 mov edx, dword ptr [ecx+8] ; Cases C,E of switch 660FF1FC
6610666F . 8B0A mov ecx, dword ptr [edx]
66106671 . 8908 mov dword ptr [eax], ecx
66106673 . 8B4A 04 mov ecx, dword ptr [edx+4]
66106676 . 8948 04 mov dword ptr [eax+4], ecx
66106679 . 8B4A 08 mov ecx, dword ptr [edx+8]
6610667C . 8948 08 mov dword ptr [eax+8], ecx
6610667F . 8B52 0C mov edx, dword ptr [edx+C]
66106682 . 8950 0C mov dword ptr [eax+C], edx
66106685 . 5F pop edi
66106686 . 5E pop esi
66106687 . C2 0800 retn 8
6610668A > 8B51 08 mov edx, dword ptr [ecx+8] ; Case 24 of switch 660FF1FC
6610668D . 8B49 0C mov ecx, dword ptr [ecx+C]
66106690 . 8950 08 mov dword ptr [eax+8], edx
66106693 . 8948 0C mov dword ptr [eax+C], ecx
66106696 . 5F pop edi
66106697 . 5E pop esi
66106698 . C2 0800 retn 8
6610669B > F7C7 00200000 test edi, 2000 ; Default case of switch 660FF1FC
661066A1 . 74 0D je short 661066B0
661066A3 > 8B51 08 mov edx, dword ptr [ecx+8] ; Cases 9,D of switch 660FF1FC
661066A6 . 8B0A mov ecx, dword ptr [edx]
661066A8 . 8948 08 mov dword ptr [eax+8], ecx
661066AB . 5F pop edi
661066AC . 5E pop esi
661066AD . C2 0800 retn 8
661066B0 > 68 CA010000 push 1CA
661066B5 . E8 22E9F1FF call 66024FDC
661066BA > 8A41 08 mov al, byte ptr [ecx+8] ; Case 11 of switch 660FF160
661066BD . F6D8 neg al
661066BF . 1BC0 sbb eax, eax
661066C1 . C2 0400 retn 4
661066C4 > 8B41 08 mov eax, dword ptr [ecx+8] ; Case 3 of switch 660FF160
661066C7 . F7D8 neg eax
661066C9 . 1BC0 sbb eax, eax
661066CB . C2 0400 retn 4
661066CE > D941 08 fld dword ptr [ecx+8] ; Case 4 of switch 660FF160
661066D1 . D81D 20020366 fcomp dword ptr [66030220]
661066D7 > DFE0 fstsw ax
661066D9 . F6C4 40 test ah, 40
661066DC . 75 11 jnz short 661066EF
661066DE . 83C8 FF or eax, FFFFFFFF
661066E1 . C2 0400 retn 4
661066E4 > DD41 08 fld qword ptr [ecx+8] ; Cases 5,7 of switch 660FF160
661066E7 . DC1D 28020366 fcomp qword ptr [66030228]
661066ED .^ EB E8 jmp short 661066D7
661066EF > 33C0 xor eax, eax ; Cases 0,1 of switch 660FF160
661066F1 . C2 0400 retn 4
661066F4 > 8B41 08 mov eax, dword ptr [ecx+8] ; Case 6 of switch 660FF160
661066F7 . 8B51 0C mov edx, dword ptr [ecx+C]
661066FA . 0BC2 or eax, edx
661066FC . F7D8 neg eax
661066FE . 1BC0 sbb eax, eax
66106700 . C2 0400 retn 4
66106703 > 8B41 08 mov eax, dword ptr [ecx+8] ; Case E of switch 660FF160
66106706 . 8B51 0C mov edx, dword ptr [ecx+C]
66106709 . 0BC2 or eax, edx
6610670B . 8B51 04 mov edx, dword ptr [ecx+4]
6610670E . 0BC2 or eax, edx
66106710 . F7D8 neg eax
66106712 . 1BC0 sbb eax, eax
66106714 . C2 0400 retn 4
这段代码是算法吗,怎么看怎么算啊?新人请教,谢谢。
赞赏
他的文章
- [求助]视频转换软件的20%限制 4500
- [求助]WinMPGVideoConvert 3223
- [求助]请问这个是什么壳的入口啊 3493
- [求助]Asprotect 1.23rc4 3341
- [求助]antispy问题 3639
赞赏
雪币:
留言: