- 积分
- 213
- 实力分
- 点
- 金钱数
- 两
- 技术分
- 分
- 贡献分
- 分
|
发表于 2005-12-23 11:15:39
|
显示全部楼层
反汇编很简单:
在Ultraedit调出sfe.exe,然后按F9,或选择“高级”--“Dos命令”
方框里输入 sfe d mp3.txt,4f2874,200
4f2874为 开始地址, 200为反汇编的数量(任意取)
结果如下:
;File mp3.txt (pos=0x0,sz=0xB042,rd=0xB042) buffered
;Disassembly: offset=0x0, size=0xB042, baseAddr=0x000000
4F2874: 88 90 : mov [-r0], r9
4F2876: 88 80 : mov [-r0], r8
4F2878: 88 70 : mov [-r0], r7
4F287A: 88 60 : mov [-r0], r6
4F287C: 28 04 : sub r0, #4
4F287E: F0 7D : mov r7, r13
4F2880: F0 6C : mov r6, r12
4F2882: F0 E6 : mov r14, r6
4F2884: F0 F7 : mov r15, r7
4F2886: 06 FE 3A 00 : add r14, #3Ah
4F288A: DC 5F : extp r15, #2
4F288C: 98 1E : mov r1, [r14+]
4F288E: A8 2E : mov r2, [r14]
4F2890: 06 F1 26 00 : add r1, #26h
4F2894: DC 52 : extp r2, #2
4F2896: 98 C1 : mov r12, [r1+]
4F2898: A8 D1 : mov r13, [r1]
4F289A: E0 08 : mov r8, #0
4F289C: E6 F9 22 00 : mov r9, #22h
4F28A0: 88 C0 : mov [-r0], r12
4F28A2: 88 D0 : mov [-r0], r13
4F28A4: E0 4E : mov r14, #4
4F28A6: 88 E0 : mov [-r0], r14
4F28A8: E6 FC 2C 14 : mov r12, #142Ch
4F28AC: E0 6D : mov r13, #6
4F28AE: 00 D0 : add r13, r0
4F28B0: 66 FD FF 3F : and r13, #3FFFh
4F28B4: F2 FE 02 FE : mov r14, DPP1
4F28B8: E0 0F : mov r15, #0
4F28BA: D7 50 BC 03 : extp #3BCh, #2
4F28BE: F2 F4 4C 07 : mov r4, 0EF074Ch ; (03BC:074C)
4F28C2: F2 F5 4E 07 : mov r5, 0EF074Eh ; (03BC:074E)
4F28C6: DA EF 7A 00 : calls 0EFh, loc_EF007A
4F28CA: 08 02 : add r0, #2
4F28CC: 98 D0 : mov r13, [r0+]
4F28CE: 98 C0 : mov r12, [r0+]
4F28D0: F0 ED : mov r14, r13
4F28D2: 70 EC : or r14, r12
4F28D4: EA 20 8A 2A : jmpa cc_Z, loc_4F2A8A
4F28D8: 48 C4 : cmp r12, #4
4F28DA: 2D 0D : jmpr cc_Z, loc_4F28F6
4F28DC: F0 EC : mov r14, r12
4F28DE: F0 FD : mov r15, r13
4F28E0: E0 4C : mov r12, #4
4F28E2: E6 FD 20 00 : mov r13, #20h
4F28E6: D7 50 BC 03 : extp #3BCh, #2
4F28EA: F2 F4 10 07 : mov r4, 0EF0710h ; (03BC:0710)
4F28EE: F2 F5 12 07 : mov r5, 0EF0712h ; (03BC:0712)
4F28F2: DA EF 7A 00 : calls 0EFh, loc_EF007A
4F28F6: E0 1C : loc_4F28F6:
4F28F6: E0 1C : mov r12, #1
4F28F8: E0 2D : mov r13, #2
4F28FA: E6 FE 20 00 : mov r14, #20h
4F28FE: DC 4E : extp r14, #1
4F2900: B8 CD : mov [r13], r12
4F2902: E0 4C : mov r12, #4
4F2904: E6 FD 20 00 : mov r13, #20h
4F2908: E0 4E : mov r14, #4
4F290A: E6 FF 20 00 : mov r15, #20h
4F290E: DC 4F : extp r15, #1
4F2910: A9 2E : movb rl1, [r14]
4F2912: 2D 22 : jmpr cc_Z, loc_4F2958
4F2914: DC 4D : loc_4F2914:
4F2914: DC 4D : extp r13, #1
4F2916: A9 2C : movb rl1, [r12]
4F2918: 47 F2 0A 00 : cmpb rl1, #0Ah
4F291C: 3D 19 : jmpr cc_NZ, loc_4F2950
4F291E: E0 2E : mov r14, #2
4F2920: E6 FF 20 00 : mov r15, #20h
4F2924: DC 4F : extp r15, #1
4F2926: A8 1E : mov r1, [r14]
4F2928: 08 11 : add r1, #1
4F292A: DC 4F : extp r15, #1
4F292C: B8 1E : mov [r14], r1
4F292E: DC 4D : extp r13, #1
4F2930: A9 2C : movb rl1, [r12]
4F2932: 2D 0E : jmpr cc_Z, loc_4F2950
4F2934: DC 4D : extp r13, #1
4F2936: A9 2C : movb rl1, [r12]
4F2938: 47 F2 20 00 : cmpb rl1, #20h
4F293C: 9D 09 : jmpr cc_NC, loc_4F2950
4F293E: 08 C1 : loc_4F293E:
4F293E: 08 C1 : add r12, #1
4F2940: DC 4D : extp r13, #1
4F2942: A9 2C : movb rl1, [r12]
4F2944: 2D 05 : jmpr cc_Z, loc_4F2950
4F2946: DC 4D : extp r13, #1
4F2948: A9 2C : movb rl1, [r12]
4F294A: 47 F2 20 00 : cmpb rl1, #20h
4F294E: 8D F7 : jmpr cc_C, loc_4F293E
4F2950: 08 C1 : loc_4F2950:
4F2950: 08 C1 : add r12, #1
4F2952: DC 4D : extp r13, #1
4F2954: A9 2C : movb rl1, [r12]
4F2956: 3D DE : jmpr cc_NZ, loc_4F2914
4F2958: 28 C1 : loc_4F2958:
4F2958: 28 C1 : sub r12, #1
4F295A: DC 4D : extp r13, #1
4F295C: A9 2C : movb rl1, [r12]
4F295E: 47 F2 33 00 : cmpb rl1, #33h
4F2962: 3D 22 : jmpr cc_NZ, loc_4F29A8
4F2964: F0 EC : mov r14, r12
4F2966: F0 FD : mov r15, r13
4F2968: 06 FE FF FF : add r14, #0FFFFh
4F296C: DC 4F : extp r15, #1
4F296E: A9 2E : movb rl1, [r14]
4F2970: 47 F2 70 00 : cmpb rl1, #70h
4F2974: 2D 05 : jmpr cc_Z, loc_4F2980
4F2976: DC 4F : extp r15, #1
4F2978: A9 2E : movb rl1, [r14]
4F297A: 47 F2 50 00 : cmpb rl1, #50h
4F297E: 3D 14 : jmpr cc_NZ, loc_4F29A8
4F2980: F0 EC : loc_4F2980:
4F2980: F0 EC : mov r14, r12
4F2982: F0 FD : mov r15, r13
4F2984: 06 FE FE FF : add r14, #0FFFEh
4F2988: DC 4F : extp r15, #1
4F298A: A9 2E : movb rl1, [r14]
4F298C: 47 F2 6D 00 : cmpb rl1, #6Dh
4F2990: 2D 05 : jmpr cc_Z, loc_4F299C
4F2992: DC 4F : extp r15, #1
4F2994: A9 2E : movb rl1, [r14]
4F2996: 47 F2 4D 00 : cmpb rl1, #4Dh
4F299A: 3D 06 : jmpr cc_NZ, loc_4F29A8
4F299C: DC 4D : loc_4F299C:
4F299C: DC 4D : extp r13, #1
4F299E: F4 2C FD FF : movb rl1, [r12+#0FFFDh]
4F29A2: 47 F2 2E 00 : cmpb rl1, #2Eh
4F29A6: 2D 08 : jmpr cc_Z, loc_4F29B8
4F29A8: E0 2E : loc_4F29A8:
4F29A8: E0 2E : mov r14, #2
4F29AA: E6 FF 20 00 : mov r15, #20h
4F29AE: DC 4F : extp r15, #1
4F29B0: A8 1E : mov r1, [r14]
4F29B2: 28 11 : sub r1, #1
4F29B4: DC 4F : extp r15, #1
4F29B6: B8 1E : mov [r14], r1
4F29B8: DC 4D : loc_4F29B8:
4F29B8: DC 4D : extp r13, #1
4F29BA: A9 2C : movb rl1, [r12]
4F29BC: 47 F2 33 00 : cmpb rl1, #33h
4F29C0: 3D 22 : jmpr cc_NZ, loc_4F2A06
4F29C2: F0 EC : mov r14, r12
4F29C4: F0 FD : mov r15, r13
4F29C6: 06 FE FF FF : add r14, #0FFFFh
4F29CA: DC 4F : extp r15, #1
4F29CC: A9 2E : movb rl1, [r14]
4F29CE: 47 F2 70 00 : cmpb rl1, #70h
4F29D2: 2D 05 : jmpr cc_Z, loc_4F29DE
4F29D4: DC 4F : extp r15, #1
4F29D6: A9 2E : movb rl1, [r14]
4F29D8: 47 F2 50 00 : cmpb rl1, #50h
4F29DC: 3D 14 : jmpr cc_NZ, loc_4F2A06
4F29DE: F0 EC : loc_4F29DE:
4F29DE: F0 EC : mov r14, r12
4F29E0: F0 FD : mov r15, r13
4F29E2: 06 FE FE FF : add r14, #0FFFEh
4F29E6: DC 4F : extp r15, #1
4F29E8: A9 2E : movb rl1, [r14]
4F29EA: 47 F2 6D 00 : cmpb rl1, #6Dh
4F29EE: 2D 05 : jmpr cc_Z, loc_4F29FA
4F29F0: DC 4F : extp r15, #1
4F29F2: A9 2E : movb rl1, [r14]
4F29F4: 47 F2 4D 00 : cmpb rl1, #4Dh
4F29F8: 3D 06 : jmpr cc_NZ, loc_4F2A06
4F29FA: DC 4D : loc_4F29FA:
4F29FA: DC 4D : extp r13, #1
4F29FC: F4 2C FD FF : movb rl1, [r12+#0FFFDh]
4F2A00: 47 F2 2E 00 : cmpb rl1, #2Eh
4F2A04: 2D 2B : jmpr cc_Z, loc_4F2A5C
4F2A06: E1 02 : loc_4F2A06:
4F2A06: E1 02 : movb rl1, #0
4F2A08: DC 4D : extp r13, #1
4F2A0A: B9 2C : movb [r12], rl1
4F2A0C: 28 C1 : sub r12, #1
4F2A0E: DC 4D : extp r13, #1
4F2A10: A9 4C : movb rl2, [r12]
4F2A12: 47 F4 33 00 : cmpb rl2, #33h
4F2A16: 3D F7 : jmpr cc_NZ, loc_4F2A06
4F2A18: F0 EC : mov r14, r12
4F2A1A: F0 FD : mov r15, r13
4F2A1C: 06 FE FF FF : add r14, #0FFFFh
4F2A20: DC 4F : extp r15, #1
4F2A22: A9 4E : movb rl2, [r14]
4F2A24: 47 F4 70 00 : cmpb rl2, #70h
4F2A28: 2D 05 : jmpr cc_Z, loc_4F2A34
4F2A2A: DC 4F : extp r15, #1
4F2A2C: A9 4E : movb rl2, [r14]
4F2A2E: 47 F4 50 00 : cmpb rl2, #50h
4F2A32: 3D E9 : jmpr cc_NZ, loc_4F2A06
4F2A34: F0 EC : loc_4F2A34:
4F2A34: F0 EC : mov r14, r12
4F2A36: F0 FD : mov r15, r13
4F2A38: 06 FE FE FF : add r14, #0FFFEh
4F2A3C: DC 4F : extp r15, #1
4F2A3E: A9 2E : movb rl1, [r14]
4F2A40: 47 F2 6D 00 : cmpb rl1, #6Dh
4F2A44: 2D 05 : jmpr cc_Z, loc_4F2A50
4F2A46: DC 4F : extp r15, #1
4F2A48: A9 2E : movb rl1, [r14]
4F2A4A: 47 F2 4D 00 : cmpb rl1, #4Dh
4F2A4E: 3D DB : jmpr cc_NZ, loc_4F2A06
4F2A50: DC 4D : loc_4F2A50:
4F2A50: DC 4D : extp r13, #1
4F2A52: F4 2C FD FF : movb rl1, [r12+#0FFFDh]
4F2A56: 47 F2 2E 00 : cmpb rl1, #2Eh
4F2A5A: 3D D5 : jmpr cc_NZ, loc_4F2A06
4F2A5C: F0 C8 : loc_4F2A5C:
4F2A5C: F0 C8 : mov r12, r8
4F2A5E: F0 D9 : mov r13, r9
4F2A60: E0 2E : mov r14, #2
4F2A62: E6 FF 20 00 : mov r15, #20h
4F2A66: DC 4F : extp r15, #1
4F2A68: A8 EE : mov r14, [r14]
4F2A6A: DA EF CC 27 : calls 0EFh, loc_EF27CC
4F2A6E: A8 C0 : mov r12, [r0]
4F2A70: D4 D0 02 00 : mov r13, [r0+#2] |
|