-
-
[旧帖] [求助]谁能帮忙分析下这段代码?找到使用的算法? 0.00雪花
-
发表于: 2009-10-6 06:23 948
-
Exported fn(): DecodeBin - Ord:0001h
:10001260 83EC08 sub esp, 00000008
:10001263 8B44240C mov eax, dword ptr [esp+0C]
:10001267 53 push ebx
:10001268 55 push ebp
:10001269 8B6C2418 mov ebp, dword ptr [esp+18]
:1000126D 56 push esi
:1000126E 57 push edi
:1000126F 8944241C mov dword ptr [esp+1C], eax
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:100012D6(C)
|
:10001273 BB08000000 mov ebx, 00000008
:10001278 3BEB cmp ebp, ebx
:1000127A 7D02 jge 1000127E
:1000127C 8BDD mov ebx, ebp
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:1000127A(C)
|
:1000127E 33C9 xor ecx, ecx
:10001280 8B74241C mov esi, dword ptr [esp+1C]
:10001284 894C2410 mov dword ptr [esp+10], ecx
:10001288 8D7C2410 lea edi, dword ptr [esp+10]
:1000128C 894C2414 mov dword ptr [esp+14], ecx
:10001290 8BCB mov ecx, ebx
:10001292 8BD1 mov edx, ecx
:10001294 8B442424 mov eax, dword ptr [esp+24]
:10001298 C1E902 shr ecx, 02
:1000129B F3 repz
:1000129C A5 movsd
:1000129D 8BCA mov ecx, edx
:1000129F 50 push eax
:100012A0 83E103 and ecx, 00000003
:100012A3 F3 repz
:100012A4 A4 movsb
:100012A5 8D4C2414 lea ecx, dword ptr [esp+14]
:100012A9 51 push ecx
:100012AA E851FFFFFF call 10001200
:100012AF 8B442424 mov eax, dword ptr [esp+24]
:100012B3 8BCB mov ecx, ebx
:100012B5 8BD1 mov edx, ecx
:100012B7 8D742418 lea esi, dword ptr [esp+18]
:100012BB 8BF8 mov edi, eax
:100012BD 2BEB sub ebp, ebx
:100012BF C1E902 shr ecx, 02
:100012C2 F3 repz
:100012C3 A5 movsd
:100012C4 8BCA mov ecx, edx
:100012C6 83C408 add esp, 00000008
:100012C9 83E103 and ecx, 00000003
:100012CC 03C3 add eax, ebx
:100012CE 85ED test ebp, ebp
:100012D0 F3 repz
:100012D1 A4 movsb
:100012D2 8944241C mov dword ptr [esp+1C], eax
:100012D6 7F9B jg 10001273
:100012D8 5F pop edi
:100012D9 5E pop esi
:100012DA 5D pop ebp
:100012DB 33C0 xor eax, eax
:100012DD 5B pop ebx
:100012DE 83C408 add esp, 00000008
:100012E1 C3 ret
:10001260 83EC08 sub esp, 00000008
:10001263 8B44240C mov eax, dword ptr [esp+0C]
:10001267 53 push ebx
:10001268 55 push ebp
:10001269 8B6C2418 mov ebp, dword ptr [esp+18]
:1000126D 56 push esi
:1000126E 57 push edi
:1000126F 8944241C mov dword ptr [esp+1C], eax
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:100012D6(C)
|
:10001273 BB08000000 mov ebx, 00000008
:10001278 3BEB cmp ebp, ebx
:1000127A 7D02 jge 1000127E
:1000127C 8BDD mov ebx, ebp
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:1000127A(C)
|
:1000127E 33C9 xor ecx, ecx
:10001280 8B74241C mov esi, dword ptr [esp+1C]
:10001284 894C2410 mov dword ptr [esp+10], ecx
:10001288 8D7C2410 lea edi, dword ptr [esp+10]
:1000128C 894C2414 mov dword ptr [esp+14], ecx
:10001290 8BCB mov ecx, ebx
:10001292 8BD1 mov edx, ecx
:10001294 8B442424 mov eax, dword ptr [esp+24]
:10001298 C1E902 shr ecx, 02
:1000129B F3 repz
:1000129C A5 movsd
:1000129D 8BCA mov ecx, edx
:1000129F 50 push eax
:100012A0 83E103 and ecx, 00000003
:100012A3 F3 repz
:100012A4 A4 movsb
:100012A5 8D4C2414 lea ecx, dword ptr [esp+14]
:100012A9 51 push ecx
:100012AA E851FFFFFF call 10001200
:100012AF 8B442424 mov eax, dword ptr [esp+24]
:100012B3 8BCB mov ecx, ebx
:100012B5 8BD1 mov edx, ecx
:100012B7 8D742418 lea esi, dword ptr [esp+18]
:100012BB 8BF8 mov edi, eax
:100012BD 2BEB sub ebp, ebx
:100012BF C1E902 shr ecx, 02
:100012C2 F3 repz
:100012C3 A5 movsd
:100012C4 8BCA mov ecx, edx
:100012C6 83C408 add esp, 00000008
:100012C9 83E103 and ecx, 00000003
:100012CC 03C3 add eax, ebx
:100012CE 85ED test ebp, ebp
:100012D0 F3 repz
:100012D1 A4 movsb
:100012D2 8944241C mov dword ptr [esp+1C], eax
:100012D6 7F9B jg 10001273
:100012D8 5F pop edi
:100012D9 5E pop esi
:100012DA 5D pop ebp
:100012DB 33C0 xor eax, eax
:100012DD 5B pop ebx
:100012DE 83C408 add esp, 00000008
:100012E1 C3 ret
[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)
赞赏
他的文章
- [求助]这段代码是什么意思? 1423
- [求助]谁能帮忙分析下这段代码?找到使用的算法? 949
- [求助]谁能根据这两组编码推断出算法? 1427
看原图
赞赏
雪币:
留言: