unit mlde32unit; // Antarmuka Mesin Disassembler Mikro // 作者忘记了 ， 不好意思。好像出自 29A-7。 // Maaf, penulis! fungsi lde32 (opcode: pointer): integer; Fungsi Implementasi LDE32 (Opcode: Pointer): Integer; const // **************** //*tipe opcode*// **************** O_Unique = 0; O_prefix = 1; O_imm8 = 2; O_imm16 = 3; O_imm24 = 4; O_imm32 = 5; O_imm48 = 6; O_modrm = 7; O_modrm8 = 8; O_modrm32 = 9; O_extended = 10; O_weird = 11; O_error = 12; fungsi mlde32 (opcode: pointer): integer; asm pushad cld xor edx, edx mov esi, [esp+(8*4)+4] mov ebp, esp // 256 bytes, index-compressed opcode type table push 01097F71Ch push 0F71C6780h push 017389718h push 0101CB718h push 017302C17h push 018173017h push 0F715F547h push 04C103748h push 0272CE7F7h push 0F7AC6087h push 01C121C52h push 07C10871Ch push 0201C701Ch push 04767602Bh push 020211011h push 040121625h push 082872022h push 047201220h push 013101419h push 018271013h push 028858260h push 015124045h push 05016A0C7h push 028191812h push 0F2401812h push 019154127h push 050F0F011h mov ecx, 015124710h push ecx push 011151247h push 010111512h push 047101115H MOV EAX, 012472015H PUSH EAX PUSH EAX PUSH 012471A10H Tambahkan cl, 10h Push ECX Sub CL, 20H Push ECX XOR ECX, ECX DEC ECX // Kode Mulai @@ PS: Inc ECX MOV EDI, ESP @@ Go: LODSB MOV BH , al @@ ft: mov ah, [edi] inc edi shr ah, 4 sub al, ah jnc @@ ft mov al, [edi-1] dan al, 0fh cmp al, o_error jnz @@ i7 pop edx bukan edx @@ i7: inc edx cmp al, o_unique jz @@ t_exit cmp al, o_prefix jz @@ ps tambahkan edi, 51h // (@@ _ ettbl - @@ _ ttbl) cmp al, o_extended jz @@ go mov edi, [ebp+ ttbl) cmp al, o_extended jz @@ go mov edi, [ebp+ ebp+ (8*4) +4] @@ i6: inc edx cmp al, o_imm8 jz @@ t_exit cmp al, o_modrm jz @@ t_modrm cmp al, o_weird jz @@ t_weird @@ i5: inc edx cmp al, o_imm16 jz @ @T_EXIT CMP AL, O_MODRM8 JZ @@ T_MODRM @@ I4: Inc Edx CMP AL, O_IMM24 JZ @@ t_exit @@ i3: inc edx @@ i2: inc edx pushad mov al, 66h repnz scasb popad jnz @@ c32 @@ D2: dec edx dec edx @@ c32: cmp al, o_modrm32 jz @@ t_modrm sub al, o_imm32 jz @@ t_imm32 @@ i1: inc edx @@ t_exit: mov esp, eBp mov [esp+(7*4)], edx popad ret // ***************************** //*Proses mod/rm byte*// * * // * 7 6 5 3 2 0 * // * | Mod | Reg/Opcode | R/m | *//**// ******************************* @@ t_modrm: lodsb mov ah, al shr Al, 7 JB @@ PRMK JZ @@ PRM Tambahkan DL, 4 Pushad Mov Al, 67h Repnz scasb popad jnz @@ prm @@ d3: sub DL, 3 dec al @@ prmk: jnz @@ t_exit inc edx inc eax @ @prm: dan ah, 00000111b pushad mov al, 67h repnz scasb popad jz @@ prm67chk cmp ah, 04h jz @@ prmlib cmp Ah, 05h jnz @@ t_exit @@ prm5chk: dec al jz @@ t_exit @@ i42: DL, 4 jmp @@ t_exit @@ prm67chk: cmp ax, 0600h jnz @@ t_exit inc edx jmp @@ i1 @@ prmsib: cmp al, 00h jnz @@ i1 lodsb dan al, 0000011b Sub Al, 05H JNZ @@ Inc edx jmp @@ i42 // ************************** //*Proses Opcodes aneh*//**//* Tes sialan (f6h/f7h)*//**// ************************** @@ t_weird: test byte ptr [ esi], 00111000b jnz @@ t_modrm mov al, o_modrm8 shr bh, 1 adc al, 0 jmp @@ i5 // ************************** ********* //*Proses beberapa omong kosong lain*//**//*fucking mov (a0h/a1h/a2h/a3h)*//**// ******** ************************* @@ t_imm32: Sub BH, 0A0H CMP BH, 04H jae @@ d2 Pushad mov al, 67h repnz scasb popad jnz @@ chk66t @@ d4: dec edx dec edx @@ chk66t: pushad mov al, 66h repnz scasb popad jz @@ i1 jnz @@ d2 end; Mulai ASM Push Opcode Call MLDE32 Tambahkan ESP, 4 END; akhir; akhir. ========= 完