How to convert ASM to read

2018-05-29 20:34:24

I have an exe which I have opened with PE Explorer Disassembler. Now I can see the asm code, which looks like that:

    push    ebx
    push    esi
    mov ebx,eax
    mov eax,[ebx+38h]
    push    eax
    mov eax,[ebx+3Ch]
    push    eax
    mov ecx,edx
    mov eax,ebx
    mov edx,[ebx+30h]
    mov esi,[eax]
    call    [esi+7Ch]
    or  byte ptr [ebx+00000088h],02h
    pop esi
    pop ebx
    retn

I have no idea what that means. Is there a way to convert this now into read-able code (C, C++, C# or VB.NET)?

Background info: The reason why I need this is because I need to call the above function from my windows app. Now this function resides in the third party exe - there is no API or source-code for it. Any help or advice is appreciated.

What you want is called "decompilation".

That is not easy to solve task, and often not possible at all. You might try Google as a start.

You would need to know what arguments are used. In this case, it looks like the arguments are passed to this routine in the eax & edx registers. Once you know what those values mean, you can probably figure out how this routine is used and re-code it in whatever language you're using.

如果你能掌握它，IDA Pro + Hex-Rays可以将其反编译为半可读代码。

链接地址: http://www.djcxy.com/p/2584.html

上一篇: wymeditor无法保存插入的iframe

下一篇: 如何将ASM转换为读取