请问lisugar一些问题。。

bill_wfm · 发表于 2005-9-12 16:50:16

马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。

您需要登录才可以下载或查看，没有帐号？注册会员

x

lisugar，我在看老大的《如何用Keil ARM编译器作x65的Patch》是发现他反编译S65V50的代码片断如下：

A1253530 ; 圹圹圹圹圹圹圹?S U B R O U T I N E 圹圹圹圹圹圹圹圹圹圹圹圹圹圹圹圹圹圹圹?
A1253530
A1253530
A1253530 wndACCUMonitor ; CODE XREF: j_wndACCUMonitorj
A1253530 ; DATA XREF: ROM:off_A0A2EBD8o
A1253530
A1253530 var_34 = -0x34
A1253530 var_30 = -0x30
A1253530 var_2C = -0x2C
A1253530
A1253530 F0 4D 2D E9 STMFD SP!, {R4-R8,R10,R11,LR}
A1253534 01 40 A0 E1 MOV R4, R1
A1253538 00 70 A0 E1 MOV R7, R0
A125353C 04 00 A0 E1 MOV R0, R4
A1253540 4C 13 9F E5 LDR R1, =asc_A1410094
A1253544 18 D0 4D E2 SUB SP, SP, #0x18
A1253548 9A 20 A0 E3 MOV R2, #0x9A
A125354C 71 D7 0E EB BL memcpy
A1253550 0C 20 A0 E3 MOV R2, #0xC
A1253554 CF 1F 8F E2 ADR R1, asc_A1253898 ; "AkkuMon (1)"
A1253558 07 00 A0 E1 MOV R0, R7
A125355C 6D D7 0E EB BL memcpy
A1253560 09 10 A0 E3 MOV R1, #9
A1253564 00 00 A0 E3 MOV R0, #0
A1253568 B0 04 00 EB BL GetAkku
A125356C 08 00 8D E5 STR R0, [SP,#0x38+var_30]
A1253570 00 00 A0 E3 MOV R0, #0
A1253574 07 10 A0 E3 MOV R1, #7
A1253578 AC 04 00 EB BL GetAkku
A125357C 04 00 8D E5 STR R0, [SP,#0x38+var_34]
A1253580 00 00 A0 E3 MOV R0, #0
A1253584 08 10 A0 E3 MOV R1, #8
A1253588 A8 04 00 EB BL GetAkku
A125358C 00 50 A0 E1 MOV R5, R0
A1253590 00 00 A0 E3 MOV R0, #0
A1253594 06 10 A0 E3 MOV R1, #6
A1253598 A4 04 00 EB BL GetAkku

复制代码

但是我按照老大的反编译方法后处理的结果如下：

ROM:A1253530 F0 4D LDR R5, =0xE59F06B4
ROM:A1253530 ; ?
ROM:A1253532 2D DCB 0x2D ; -
ROM:A1253533 E9 DCB 0xE9 ; ?
ROM:A1253534 ; ?
ROM:A1253534 01 40 AND R1, R0
ROM:A1253536 A0 E1 B loc_A125387A
ROM:A1253538 ; ?
ROM:A1253538
ROM:A1253538 loc_A1253538 ; CODE XREF: ROM:loc_A12532D6j
ROM:A1253538 00 70 STRB R0, [R0]
ROM:A125353A A0 E1 B unk_A125387E
ROM:A125353C ; ?
ROM:A125353C 04 00 LSL R4, R0, #0
ROM:A125353E A0 E1 B loc_A1253882
ROM:A1253540 ; ?
ROM:A1253540 4C 13 ASR R4, R1, #0xD
ROM:A1253542 9F E5 B loc_A1253084
ROM:A1253544 ; ?
ROM:A1253544 18 D0 BEQ loc_A1253578
ROM:A1253546 4D E2 B loc_A12539E4
ROM:A1253548 ; ?
ROM:A1253548
ROM:A1253548 loc_A1253548 ; CODE XREF: ROM:A12532E6j
ROM:A1253548 9A 20 MOV R0, #0x9A
ROM:A125354A A0 E3 B loc_A1253C8E
ROM:A125354C ; ?
ROM:A125354C 71 D7 BVC loc_A1253632
ROM:A125354C ; ?
ROM:A125354E 0E DCB 0xE
ROM:A125354F EB DCB 0xEB ; ?
ROM:A1253550 ; ?
ROM:A1253550
ROM:A1253550 loc_A1253550 ; CODE XREF: ROM:A12532EEj
ROM:A1253550 0C 20 MOV R0, #0xC
ROM:A1253552 A0 E3 B loc_A1253C96
ROM:A1253554 ; ?
ROM:A1253554
ROM:A1253554 loc_A1253554 ; CODE XREF: ROM:A12539CEj
ROM:A1253554 CF 1F SUB R7, R1, #7
ROM:A1253556 8F E2 B unk_A1253A78
ROM:A1253558 ; ?
ROM:A1253558
ROM:A1253558 loc_A1253558 ; CODE XREF: ROM:A12532F6j
ROM:A1253558 07 00 LSL R7, R0, #0
ROM:A125355A A0 E1 B loc_A125389E
ROM:A125355C ; ?
ROM:A125355C
ROM:A125355C loc_A125355C ; CODE XREF: ROM:A1253A1Aj
ROM:A125355C 6D D7 BVC loc_A125363A
ROM:A125355C ; ?
ROM:A125355E 0E unk_A125355E DCB 0xE ; CODE XREF: ROM:A1252E1Aj
ROM:A125355F EB DCB 0xEB ; ?
ROM:A1253560 ; ?
ROM:A1253560
ROM:A1253560 loc_A1253560 ; CODE XREF: ROM:A12532FEj
ROM:A1253560 ; ROM:A1253A1Ej
ROM:A1253560 09 10 ASR R1, R1, #0x20
ROM:A1253562 A0 E3 B unk_A1253CA6
ROM:A1253564 ; ?
ROM:A1253564 00 00 LSL R0, R0, #0
ROM:A1253566 A0 E3 B unk_A1253CAA
ROM:A1253568 ; ?
ROM:A1253568
ROM:A1253568 loc_A1253568 ; CODE XREF: ROM:A1253306j
ROM:A1253568 B0 04 LSL R0, R6, #0x12
ROM:A1253568 ; ?
ROM:A125356A 00 DCB 0
ROM:A125356B EB DCB 0xEB ; ?
ROM:A125356C ; ?
ROM:A125356C 08 00 LSL R0, R1, #0
ROM:A125356E 8D E5 B loc_A125308C
ROM:A1253570 ; ?
ROM:A1253570 00 00 LSL R0, R0, #0
ROM:A1253572 A0 E3 B unk_A1253CB6
ROM:A1253574 ; ?
ROM:A1253574 07 10 ASR R7, R0, #0x20
ROM:A1253576 A0 E3 B unk_A1253CBA
ROM:A1253578 ; ?
ROM:A1253578
ROM:A1253578 loc_A1253578 ; CODE XREF: ROM:A1253544j
ROM:A1253578 AC 04 LSL R4, R5, #0x12
ROM:A1253578 ; ?
ROM:A125357A 00 DCB 0
ROM:A125357B EB DCB 0xEB ; ?
ROM:A125357C ; ?
ROM:A125357C 04 00 LSL R4, R0, #0
ROM:A125357E 8D E5 B loc_A125309C
ROM:A1253580 ; ?
ROM:A1253580
ROM:A1253580 loc_A1253580 ; CODE XREF: ROM:A1252EDAj
ROM:A1253580 ; ROM:A12539FAj
ROM:A1253580 00 00 LSL R0, R0, #0
ROM:A1253582 A0 E3 B unk_A1253CC6
ROM:A1253584 ; ?
ROM:A1253584 08 10 ASR R0, R1, #0x20
ROM:A1253586 A0 E3 B unk_A1253CCA
ROM:A1253588 ; ?
ROM:A1253588 A8 04 LSL R0, R5, #0x12
ROM:A1253588 ; ?
ROM:A125358A 00 unk_A125358A DCB 0 ; CODE XREF: ROM:A1252EE6j
ROM:A125358B EB DCB 0xEB ; ?
ROM:A125358C ; ?
ROM:A125358C 00 50 STR R0, [R0,R0]
ROM:A125358E A0 E1 B loc_A12538D2
ROM:A1253590 ; ?
ROM:A1253590
ROM:A1253590 loc_A1253590 ; CODE XREF: ROM:loc_A125332Ej
ROM:A1253590 00 00 LSL R0, R0, #0
ROM:A1253592 ; START OF FUNCTION CHUNK FOR sub_A125170E
ROM:A1253592
ROM:A1253592 loc_A1253592 ; CODE XREF: sub_A125170E+17E0j
ROM:A1253592 A0 E3 B loc_A1253CD6
ROM:A1253592 ; END OF FUNCTION CHUNK FOR sub_A125170E
ROM:A1253594 ; ?
ROM:A1253594
ROM:A1253594 loc_A1253594 ; CODE XREF: ROM:A12538C0j
ROM:A1253594 06 10 ASR R6, R0, #0x20
ROM:A1253596 A0 E3 B loc_A1253CDA
ROM:A1253598 ; ?
ROM:A1253598 A4 04 LSL R4, R4, #0x12
ROM:A1253598 ; ?

复制代码

这是为什么，是不是在反编译的时候有什么设置？？？

robin · 发表于 2005-9-12 17:57:07

这段用32位反编译啊

bill_wfm · 发表于 2005-9-12 18:23:10

原帖由 robin 于 2005-9-12 17:57 发表
这段用32位反编译啊

再问老大，是在ＩＤＡ最开始反编译的时候设置还是说后期通过手动调整的？？？

lisugar · 发表于 2005-9-12 21:38:45

是的，Bennie那段是ARM代码不是Thumb模式下的代码，你用的是Thumb模式下反汇编出来的

bill_wfm · 发表于 2005-9-13 09:43:50

原帖由 lisugar 于 2005-9-12 21:38 发表
是的，Bennie那段是ARM代码不是Thumb模式下的代码，你用的是Thumb模式下反汇编出来的

同样的问：是在ＩＤＡ最开始反编译的时候设置还是说后期通过手动调整的？？？

robin · 发表于 2005-9-13 11:36:35

IDA打开那段之后,直接按C转换,不用ALT+G改

bill_wfm · 发表于 2005-9-13 12:01:10

原帖由 robin 于 2005-9-13 11:36 发表
IDA打开那段之后,直接按C转换,不用ALT+G改

现在的问题是我一开始就还是用Ｃ转换的，从来没有用过ＡＬＴ＋Ｇ改，就已经变成我上面写到的那个样子了。。。奇怪！！我用过两种方式都不行，一种仅仅将代码段选中用Ｃ转换，还有一种是将整个32Ｍ的全部Ｃ转换，但是结果都是一样。。。。愿闻其详。。。

robin · 发表于 2005-9-13 12:38:51

你前后是不是没用弄完整代码?我意思是,你可以复制多几个字节进去再转换,按ALT+G,数值填0,然后转试试?

帐号		自动登录	找回密码
密码			注册会员

[求助] 请问lisugar一些问题。。

马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。