开启辅助访问

精易论坛

 找回密码
 注册

QQ登录

只需一步,快速开始

用微信号发送消息登录论坛

新人指南 邀请好友注册 - 我关注人的新帖 教你赚取精币 - 每日签到


求职/招聘- 论坛接单- 开发者大厅

论坛版规 总版规 - 建议/投诉 - 应聘版主 - 精华帖总集 积分说明 - 禁言标准 - 有奖举报

十六进制如何转到字节集

查看数: 5303 | 评论数: 4 | 收藏 1
关灯 | 提示:支持键盘翻页 & lt;-左 右 ->
    组图打开中,请稍候......
发布时间: 2012-3-18 18:49

正文摘要:

8B 55 08 89 43 08 51 8B 4A 04 E8 7C AD FD FF E9 33 0F 00 00 83 7E 08 01 0F 85 30 0F 00 00 B9 07 00 00 00 33 C0 8D 7D E0 50 F3 AB 8B 4D 08 8D 45 E0 6A 01 50 8B 49 04 68 95 01 00 00 C7 45 F8 02 00 0 ...

回复

qxuem   福建省宁德市 发表于 2021-12-30 17:09:34
风云思星 发表于 2012-3-18 19:16
这个是dtcser
.版本 2
.支持库 spec

谢谢。好用
北仑色   江苏省苏州市 发表于 2012-10-9 19:03:22
eeeeeee
风云思星   吉林省吉林市 发表于 2012-3-18 19:16:10
这个是dtcser
.版本 2
.支持库 spec

.子程序 字节集到十六进制文本_dtcser, 文本型, 公开, 嵌ASM
.参数 原文, 字节集
.局部变量 原文长度, 整数型
.局部变量 原文地址, 整数型
.局部变量 结果, 文本型
.局部变量 结果地址, 整数型
.局部变量 码表地址, 整数型

置入代码 ({ 139, 93, 8, 139, 27, 139, 91, 4, 137, 93, 252 })  ' 取字节集长度
' 原文长度---dword ptr [ebp-4]
.如果真 (原文长度 < 1)
    返回 (“”)
.如果真结束
置入代码 ({ 232, 0, 0, 0, 0, 89, 131, 193, 9, 233, 0, 2, 0, 0 })  ' 跳转到代码
' 下面是码表
置入代码 ({ 48, 48, 48, 49, 48, 50, 48, 51, 48, 52, 48, 53, 48, 54, 48, 55, 48, 56, 48, 57, 48, 65, 48, 66, 48, 67, 48, 68, 48, 69, 48, 70, 49, 48, 49, 49, 49, 50, 49, 51, 49, 52, 49, 53, 49, 54, 49, 55, 49, 56, 49, 57, 49, 65, 49, 66, 49, 67, 49, 68, 49, 69, 49, 70, 50, 48, 50, 49, 50, 50, 50, 51, 50, 52, 50, 53, 50, 54, 50, 55, 50, 56, 50, 57, 50, 65, 50, 66, 50, 67, 50, 68, 50, 69, 50, 70, 51, 48, 51, 49, 51, 50, 51, 51, 51, 52, 51, 53, 51, 54, 51, 55, 51, 56, 51, 57, 51, 65, 51, 66, 51, 67, 51, 68, 51, 69, 51, 70, 52, 48, 52, 49, 52, 50, 52, 51, 52, 52, 52, 53, 52, 54, 52, 55, 52, 56, 52, 57, 52, 65, 52, 66, 52, 67, 52, 68, 52, 69, 52, 70, 53, 48, 53, 49, 53, 50, 53, 51, 53, 52, 53, 53, 53, 54, 53, 55, 53, 56, 53, 57, 53, 65, 53, 66, 53, 67, 53, 68, 53, 69, 53, 70, 54, 48, 54, 49, 54, 50, 54, 51, 54, 52, 54, 53, 54, 54, 54, 55, 54, 56, 54, 57, 54, 65, 54, 66, 54, 67, 54, 68, 54, 69, 54, 70, 55, 48, 55, 49, 55, 50, 55, 51, 55, 52, 55, 53, 55, 54, 55, 55, 55, 56, 55, 57, 55, 65, 55, 66, 55, 67, 55, 68, 55, 69, 55, 70, 56, 48, 56, 49, 56, 50, 56, 51, 56, 52, 56, 53, 56, 54, 56, 55, 56, 56, 56, 57, 56, 65, 56, 66, 56, 67, 56, 68, 56, 69, 56, 70, 57, 48, 57, 49, 57, 50, 57, 51, 57, 52, 57, 53, 57, 54, 57, 55, 57, 56, 57, 57, 57, 65, 57, 66, 57, 67, 57, 68, 57, 69, 57, 70, 65, 48, 65, 49, 65, 50, 65, 51, 65, 52, 65, 53, 65, 54, 65, 55, 65, 56, 65, 57, 65, 65, 65, 66, 65, 67, 65, 68, 65, 69, 65, 70, 66, 48, 66, 49, 66, 50, 66, 51, 66, 52, 66, 53, 66, 54, 66, 55, 66, 56, 66, 57, 66, 65, 66, 66, 66, 67, 66, 68, 66, 69, 66, 70, 67, 48, 67, 49, 67, 50, 67, 51, 67, 52, 67, 53, 67, 54, 67, 55, 67, 56, 67, 57, 67, 65, 67, 66, 67, 67, 67, 68, 67, 69, 67, 70, 68, 48, 68, 49, 68, 50, 68, 51, 68, 52, 68, 53, 68, 54, 68, 55, 68, 56, 68, 57, 68, 65, 68, 66, 68, 67, 68, 68, 68, 69, 68, 70, 69, 48, 69, 49, 69, 50, 69, 51, 69, 52, 69, 53, 69, 54, 69, 55, 69, 56, 69, 57, 69, 65, 69, 66, 69, 67, 69, 68, 69, 69, 69, 70, 70, 48, 70, 49, 70, 50, 70, 51, 70, 52, 70, 53, 70, 54, 70, 55, 70, 56, 70, 57, 70, 65, 70, 66, 70, 67, 70, 68, 70, 69, 70, 70 })
' 跳转到这里了~~
码表地址 = 0  ' ebp-8
结果地址 = 1  ' ebp-c
原文地址 = 2  ' ebp-10
置入代码 ({ 137, 77, 248 })  ' 码表地址到---》变量dword ptr [ebp-8]
置入代码 ({ 209, 101, 252 })  ' 原文长度 × 2
结果 = 取空白文本 (原文长度)
置入代码 ({ 137, 69, 244 })  ' 结果地址 ebp-c
置入代码 ({ 139, 93, 8, 139, 27, 131, 195, 8, 137, 93, 240 })  ' 原文地址ebp-10
' 核心计算过程
置入代码 ({ 139, 117, 240, 139, 93, 248, 139, 125, 244, 209, 109, 252, 139, 77, 252, 3, 206, 51, 192, 138, 6, 70, 209, 224, 102, 139, 20, 24, 102, 137, 23, 71, 71, 59, 241, 124, 236 })
返回 (结果)



.子程序 十六进制文本到字节集_dtcser, 字节集, 公开, 嵌ASM
.参数 原文, 文本型
.局部变量 原文长度, 整数型
.局部变量 原文地址, 整数型
.局部变量 码表地址, 整数型
.局部变量 结果地址, 整数型
.局部变量 结果, 字节集

原文长度 = 0  ' ebp-4
原文地址 = 1  ' ebp-8
码表地址 = 2  ' ebp-c
结果地址 = 3  ' ebp-10
置入代码 ({ 139, 93, 8, 139, 27, 137, 93, 248, 139, 251, 185, 255, 255, 255, 255, 50, 192, 252, 242, 174, 184, 254, 255, 255, 255, 43, 193, 137, 69, 252 })
.如果真 (原文长度 < 1)
    返回 ({  })
.如果真结束
置入代码 ({ 232, 0, 0, 0, 0, 89, 131, 193, 6, 235, 103 })  ' 跳转到代码
' ==========码表开始
置入代码 ({ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 0, 0, 0, 0, 0, 0, 0, 10, 11, 12, 13, 14, 15, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 10, 11, 12, 13, 14, 15 })
' 跳到这里了
置入代码 ({ 144, 144, 144, 144, 144, 137, 77, 244 })  ' 码表地址到ebp-c
置入代码 ({ 209, 109, 252 })  ' 原文长度/2
结果 = 取空白字节集 (原文长度)
置入代码 ({ 131, 192, 8, 137, 69, 240 })  ' 结果地址
' 计算开始
置入代码 ({ 139, 93, 244, 139, 117, 248, 139, 125, 240, 209, 101, 252, 139, 77, 252, 3, 206, 51, 192, 102, 139, 6, 70, 70, 80, 37, 255, 0, 0, 0, 138, 52, 24, 88, 193, 232, 8, 138, 20, 24, 192, 230, 4, 8, 242, 136, 23, 71, 59, 241, 124, 223 })
返回 (结果)
提百万   四川省广安市 发表于 2012-3-18 19:11:56
{139,85,8,137,67,8,81,139,74,4,232,124,173,253,255,233,0,15,0,0,131,126,8,1,15,133,48,15,0,0,185,7,0,0,0,51,192,141,125,224,80,243,171,139,77,8,141,69,0,106,1,80,139,73,4,104,149,1,0,0,199,69,248,2,0,0,0,232,115,168,253,255,133,192,15,133,254,14,0,0,0,219,15,132,246,14,0,0,139,69,236,102,199,3,8,0,0,192,116,66,139,69,232,133,192,137,69,32,117,5,51,255,0,235,56,80,255,21,8,51,82,0,139,240,70,141,4,54,0,192,3,36,252,232,113,23,14,0,139,85,32,139,252,86,0,106,255,82,106,0,106,0,102,199,7,0,0,255,21,12,0,82,0,87,235,5,104,144,188,86,0,255,21,44,54,82,0,139,77,8,137,67,8,139,69,232,139,73,4,80,232,200,0,253,255,233,127,14,0,0,131,126,8,2,15,133,124,14,0,0,139,54,102,131,62,8,15,133,112,14,0,0,139,70,0,133,192,15,132,101,14,0,0,185,7,0,0,0,51,192,0,125,224,243,171,139,126,8,102,57,7,15,132,77,14,0,0,133,255,117,4,51,246,235,51,87,255,21,148,51,82,0,0,68,0,2,137,69,32,131,192,3,36,252,232,218,22,14,0,139,85,32,139,244,106,0,106,0,82,86,106,255,87,106,0,106,0,198,6,0,255,21,52,51,82,0,139,254,131,201,0,51,192,137,117,232,242,174,247,209,73,80,137,77,236,139,0,8,141,69,224,106,1,139,73,4,80,104,150,1,0,0,0,86,167,253,255,133,192,15,133,225,13,0,0,133,219,15,0,217,13,0,0,139,69,236,102,199,3,8,0,133,192,116,0,139,85,232,82,235,5,104,144,188,86,0,255,21,44,54,0,0,139,77,8,137,67,8,139,69,232,139,73,4,80,232,0,171,253,255,233,158,13,0,0,131,126,8,2,15,133,155,0,0,0,139,54,102,131,62,8,15,133,143,13,0,0,139,0,8,133,192,15,132,132,13,0,0,185,7,0,0,0,51,0,141,125,224,243,171,139,126,8,102,57,7,15,132,108,13,0,0,133,255,117,4,51,246,235,47,87,255,21,148,51,82,0,141,92,0,2,139,195,131,192,3,36,252,232,250,21,14,0,139,244,106,0,106,0,83,86,106,255,87,106,0,106,0,0,6,0,255,21,52,51,82,0,139,254,131,201,255,51,192,0,117,232,242,174,247,209,80,139,69,8,73,141,85,224,106,0,137,77,236,139,72,4,82,104,151,1,0,0,199,69,248,0,0,0,0,232,114,166,253,255,133,192,15,133,253,12,0,0,233,241,12,0,0,131,126,8,2,15,133,238,12,0,0,0,54,102,131,62,8,15,133,226,12,0,0,139,70,8,133,0,15,132,215,12,0,0,185,7,0,0,0,51,192,141,125,0,243,171,139,126,8,102,57,7,15,132,191,12,0,0,133,0,117,4,51,246,235,47,87,255,21,148,51,82,0,141,92,0,2,139,195,131,192,3,36,252,232,77,21,14,0,139,244,0,0,106,0,83,86,106,255,87,106,0,106,0,198,6,0,0,21,52,51,82,0,139,254,131,201,255,51,192,137,117,232,0,174,139,85,8,80,247,209,73,106,1,137,77,236,141,77,0,81,139,74,4,104,151,1,0,0,137,69,248,232,201,165,0,255,133,192,15,133,84,12,0,0,233,72,12,0,0,131,0,8,3,15,133,69,12,0,0,139,22,102,131,58,3,15,0,57,12,0,0,102,131,122,16,8,15,133,46,12,0,0,0,66,24,133,192,15,132,35,12,0,0,185,7,0,0,0,0,192,141,125,224,243,171,139,90,24,102,57,3,15,132,11,0,0,0,133,219,117,4,51,255,235,51,83,255,21,148,51,0,0,141,68,0,2,137,69,32,131,192,3,36,252,232,152,0,14,0,139,69,32,139,252,106,0,106,0,80,87,106,255,0,106,0,106,0,198,7,0,255,21,52,51,82,0,131,201,0,51,192,137,125,232,80,242,174,247,209,73,141,69,224,137,0,236,139,14,106,1,80,139,81,8,139,77,8,104,152,1,0,0,137,85,248,139,73,4,232,14,165,253,255,133,192,15,0,153,11,0,0,233,141,11,0,0,131,126,8,3,15,133,0,11,0,0,139,54,102,131,62,8,15,133,126,11,0,0,0,126,8,133,255,15,132,115,11,0,0,102,131,126,16,8,0,133,104,11,0,0,139,70,24,133,192,15,132,93,11,0,0,102,131,56,0,15,132,83,11,0,0,102,131,63,0,15,0,73,11,0,0,139,53,108,52,82,0,80,104,164,132,83,0,141,149,92,227,255,255,104,3,1,0,0,82,255,214,131,0,16,141,133,108,231,255,255,87,104,164,132,83,0,104,35,0,0,0,80,255,214,139,85,8,131,196,16,141,141,84,227,0,255,106,0,106,1,81,139,74,4,104,153,1,0,0,232,0,164,253,255,133,192,15,133,242,10,0,0,233,230,10,0,0,131,126,8,2,15,133,227,10,0,0,139,54,102,131,62,0,15,133,215,10,0,0,139,70,8,133,192,15,132,204,10,0,0,102,131,56,0,15,132,194,10,0,0,80,104,164,132,0,0,141,133,92,227,255,255,104,3,1,0,0,80,255,21,0,52,82,0,139,85,8,131,196,16,141,141,84,227,255,255,0,0,106,1,81,139,74,4,104,154,1,0,0,232,249,163,0,255,133,192,15,133,132,10,0,0,233,120,10,0,0,131,0,8,3,15,133,117,10,0,0,139,54,102,131,62,8,15,0,105,10,0,0,139,94,8,133,219,15,132,94,10,0,0,0,131,126,16,8,15,133,83,10,0,0,139,86,24,133,210,0,132,72,10,0,0,102,131,58,0,15,132,62,10,0,0,0,131,59,0,15,132,52,10,0,0,139,53,108,52,82,0,0,24,5,0,0,51,192,141,189,84,227,255,255,243,171,82,0,164,132,83,0,141,133,100,229,255,255,104,3,1,0,0,0,255,214,131,196,16,141,141,108,231,255,255,83,104,164,132,0,0,104,35,8,0,0,81,255,214,139,69,8,131,196,16,0,149,84,227,255,255,139,72,4,106,0,106,1,82,104,155,0,0,0,232,67,163,253,255,133,192,15,133,206,9,0,0,0,194,9,0,0,131,126,8,1,15,133,191,9,0,0,141,0,8,199,69,8,0,0,0,0,81,104,48,177,82,0,106,0,106,0,104,16,177,82,0,255,21,84,60,82,0,133,192,0,140,152,9,0,0,139,69,8,133,192,15,132,141,9,0,0,139,16,141,75,8,81,104,160,176,82,0,80,255,18,133,0,15,140,119,9,0,0,139,69,8,80,139,16,255,82,8,0,199,3,9,0,51,192,141,165,148,198,255,255,95,94,91,0,229,93,194,36,0,131,126,8,1,15,133,78,9,0,0,0,219,15,132,70,9,0,0,141,67,8,80,232,250,65,10,0,131,196,4,137,69}


{:3_244:} 其实很简单,批量处理就是了。
发布主题 收藏帖子 返回列表

sitemap| 易语言源码| 易语言教程| 易语言论坛| 易语言模块| 手机版| 广告投放| 精易论坛
拒绝任何人以任何形式在本论坛发表与中华人民共和国法律相抵触的言论,本站内容均为会员发表,并不代表精易立场!
论坛帖子内容仅用于技术交流学习和研究的目的,严禁用于非法目的,否则造成一切后果自负!如帖子内容侵害到你的权益,请联系我们!
防范网络诈骗,远离网络犯罪 违法和不良信息举报QQ: 793400750,邮箱:[email protected]
网站简介:精易论坛成立于2009年,是一个程序设计学习交流技术论坛,隶属于揭阳市揭东区精易科技有限公司所有。
Powered by Discuz! X3.4 揭阳市揭东区精易科技有限公司 ( 粤ICP备12094385号-1) 粤公网安备 44522102000125 增值电信业务经营许可证 粤B2-20192173

快速回复 返回顶部 返回列表