求助大佬帮忙翻译一段C伪代码为易代码

519948746 · 发表于 2024-1-16 16:44:10

这是一段IDA分析出来的伪代码想请大佬帮忙翻译成易代码

[C++] 纯文本查看 复制代码

int __fastcall Decode(int a1, unsigned int a2, int a3)
{
  _BYTE *v5; // $v0
  int i; // $t8
  _BYTE *v8; // $a0
  int v9; // $s0
  unsigned int v10; // $t8
  unsigned int v11; // $a3
  int v12; // $v1
  int v13; // $a1
  unsigned int v14; // $a0
  char *v15; // $a2
  unsigned int v16; // $a1
  bool v17; // dc
  char v18; // $a0
  __int16 v19; // $a2
  __int16 v20; // $t8
  __int16 v21; // $t2
  int v22; // $a2
  __int16 v23; // $t2
  int v24; // $t8
  char v25; // $a0

  v5 = malloc(0x1011u);
  dword_487260 = (int)v5;
  if ( v5 )
  {
    for ( i = 0; i != 4078; ++i )
    {
      v8 = &v5;
      *v8 = 32;
    }
    v9 = 0;
    v10 = 0;
    v11 = 0;
    v12 = 4078;
    while ( 1 )
    {
      v11 >>= 1;
      v13 = v11 & 1;
      if ( (v11 & 0x100) == 0 )
      {
        v11 = *(unsigned __int8 *)(a1 + v10) | 0xFF00;
        if ( a2 < v10 + 1 )
          goto LABEL_17;
        ++v10;
        v13 = v11 & 1;
      }
      v14 = v10 + 1;
      v15 = (char *)(a1 + v10);
      if ( v13 )
      {
        v16 = v10 + 1;
        v17 = a2 < v14;
        v18 = *v15;
        if ( v17 )
          goto LABEL_17;
        *(_BYTE *)(a3 + v9) = v18;
        v5[v12] = v18;
        v12 = (v12 + 1) & 0xFFF;
        ++v9;
      }
      else
      {
        v19 = (unsigned __int8)*v15;
        if ( a2 < v14 || (v16 = v10 + 2, v20 = *(unsigned __int8 *)(a1 + v14), a2 < v16) )
        {
LABEL_17:
          free(v5);
          return v9;
        }
        v21 = (16 * (v20 & 0xFFF0)) | v19;
        v22 = (v20 & 0xF) + 2;
        v23 = v21 - v9;
        v24 = v9;
        do
        {
          v25 = v5[(v23 + (_WORD)v24++) & 0xFFF];
          *(_BYTE *)(a3 + v24 - 1) = v25;
          v5[v12] = v25;
          v12 = (v12 + 1) & 0xFFF;
        }
        while ( v22 >= v24 - v9 );
        v9 = v24;
      }
      v10 = v16;
    }
  }
  return 0;
}

w80561307 · 发表于 2024-1-16 16:50:57

直接定制区去，直接伸手不合适

萌萌嗒的小白 · 发表于 2024-1-16 17:15:05

我觉得你可以用那些chatgpt啥的翻译成JavaScript代码或者其它的那种看着简单的你就会改了

剑轶 · 发表于 2024-1-16 18:49:00

直接定制区吧.这个挺麻烦的

zainex · 发表于 2024-1-16 20:13:29

你可以用置入代码的方式，把上面代码添加到易语言中，比如：

子程序名	返回值类型	公开	备注
Decode	整数型
参数名	类型	参考	可空	数组	备注
a1	整数型
a2	整数型
a3	整数型

置入代码 ({ 184, 48, 16, 0, 0, 137, 229, 87, 86, 83, 185, 238, 15, 0, 0, 41, 196, 141, 149, 227, 239, 255, 255, 176, 32, 199, 133, 208, 239, 255, 255, 238, 15, 0, 0, 199, 133, 204, 239, 255, 255, 0, 0, 0, 0, 137, 215, 49, 210, 243, 170, 49, 192, 209, 173, 204, 239, 255, 255, 15, 186, 165, 204, 239, 255, 255, 8, 115, 13, 139, 181, 204, 239, 255, 255, 137, 209, 131, 230, 1, 235, 35, 139, 125, 8, 141, 74, 1, 15, 182, 28, 58, 137, 218, 128, 207, 255, 137, 157, 204, 239, 255, 255, 57, 77, 12, 15, 130, 209, 0, 0, 0, 137, 214, 131, 230, 1, 139, 125, 8, 141, 89, 1, 138, 20, 57, 133, 246, 116, 49, 57, 93, 12, 15, 130, 182, 0, 0, 0, 139, 125, 16, 64, 136, 84, 56, 255, 139, 189, 208, 239, 255, 255, 136, 148, 61, 227, 239, 255, 255, 141, 87, 1, 129, 226, 255, 15, 0, 0, 137, 149, 208, 239, 255, 255, 137, 218, 235, 130, 15, 182, 250, 57, 93, 12, 15, 130, 130, 0, 0, 0, 141, 81, 2, 139, 77, 8, 138, 12, 11, 57, 85, 12, 114, 116, 137, 203, 102, 129, 225, 240, 0, 193, 225, 4, 131, 227, 15, 9, 207, 131, 195, 2, 49, 201, 137, 157, 200, 239, 255, 255, 102, 137, 189, 198, 239, 255, 255, 102, 139, 181, 198, 239, 255, 255, 139, 125, 16, 1, 206, 129, 230, 255, 15, 0, 0, 138, 156, 53, 227, 239, 255, 255, 141, 52, 1, 65, 136, 28, 62, 139, 181, 208, 239, 255, 255, 136, 156, 53, 227, 239, 255, 255, 141, 118, 1, 129, 230, 255, 15, 0, 0, 137, 181, 208, 239, 255, 255, 57, 141, 200, 239, 255, 255, 125, 188, 139, 189, 200, 239, 255, 255, 141, 68, 7, 1, 233, 244, 254, 255, 255, 129, 196, 48, 16, 0, 0, 91, 94, 95, 93, 194, 12, 0 })
' mov eax, 4144
' mov ebp, esp
' push edi
' push esi
' push ebx
' mov ecx, 4078
' sub esp, eax
' lea edx, [ebp-4125]
' mov al, 32
' mov DWORD PTR [ebp-4144], 4078
' mov DWORD PTR [ebp-4148], 0
' mov edi, edx
' xor edx, edx
' rep stosb
' xor eax, eax
' L2:
' shr DWORD PTR [ebp-4148], 1
' bt DWORD PTR [ebp-4148], 8
' jnc L3
' mov esi, DWORD PTR [ebp-4148]
' mov ecx, edx
' and esi, 1
' jmp L4
' L3:
' mov edi, DWORD PTR [ebp+8]
' lea ecx, [edx+1]
' movzx ebx, BYTE PTR [edx+edi]
' mov edx, ebx
' or bh, -1
' mov DWORD PTR [ebp-4148], ebx
' cmp DWORD PTR [ebp+12], ecx
' jb L1
' mov esi, edx
' and esi, 1
' L4:
' mov edi, DWORD PTR [ebp+8]
' lea ebx, [ecx+1]
' mov dl, BYTE PTR [ecx+edi]
' test esi, esi
' je L6
' cmp DWORD PTR [ebp+12], ebx
' jb L1
' mov edi, DWORD PTR [ebp+16]
' inc eax
' mov BYTE PTR [eax-1+edi], dl
' mov edi, DWORD PTR [ebp-4144]
' mov BYTE PTR [ebp-4125+edi], dl
' lea edx, [edi+1]
' and edx, 4095
' mov DWORD PTR [ebp-4144], edx
' mov edx, ebx
' jmp L2
' L6:
' movzx edi, dl
' cmp DWORD PTR [ebp+12], ebx
' jb L1
' lea edx, [ecx+2]
' mov ecx, DWORD PTR [ebp+8]
' mov cl, BYTE PTR [ebx+ecx]
' cmp DWORD PTR [ebp+12], edx
' jb L1
' L5:
' mov ebx, ecx
' and cx, 240
' sal ecx, 4
' and ebx, 15
' or edi, ecx
' add ebx, 2
' xor ecx, ecx
' mov DWORD PTR [ebp-4152], ebx
' mov WORD PTR [ebp-4154], di
' L9:
' mov si, WORD PTR [ebp-4154]
' mov edi, DWORD PTR [ebp+16]
' add esi, ecx
' and esi, 4095
' mov bl, BYTE PTR [ebp-4125+esi]
' lea esi, [ecx+eax]
' inc ecx
' mov BYTE PTR [esi+edi], bl
' mov esi, DWORD PTR [ebp-4144]
' mov BYTE PTR [ebp-4125+esi], bl
' lea esi, [esi+1]
' and esi, 4095
' mov DWORD PTR [ebp-4144], esi
' cmp DWORD PTR [ebp-4152], ecx
' jge L9
' mov edi, DWORD PTR [ebp-4152]
' lea eax, [edi+1+eax]
' jmp L2
' L1:
' add esp, 4144
' pop ebx
' pop esi
' pop edi
' pop ebp
' ret 12
返回 (0)

子程序名	返回值类型	公开	备注
__启动窗口_创建完毕

变量名	类型	静态	数组	备注
a1	字节集
a3	字节集

a1 ＝到字节集 (“9527”)
a3 ＝到字节集 (“4513”)
调试输出 (a1, a3)
Decode (取变量数据地址 (a1), 取字节集长度 (a1), 取变量数据地址 (a3))
调试输出 (a1, a3)

i支持库列表	支持库注释
spec	特殊功能支持库

.版本 2<br />
.支持库 spec<br />
<br />
.子程序 Decode, 整数型<br />
.参数 a1, 整数型<br />
.参数 a2, 整数型<br />
.参数 a3, 整数型<br />
<br />
置入代码 ({ 184, 48, 16, 0, 0, 137, 229, 87, 86, 83, 185, 238, 15, 0, 0, 41, 196, 141, 149, 227, 239, 255, 255, 176, 32, 199, 133, 208, 239, 255, 255, 238, 15, 0, 0, 199, 133, 204, 239, 255, 255, 0, 0, 0, 0, 137, 215, 49, 210, 243, 170, 49, 192, 209, 173, 204, 239, 255, 255, 15, 186, 165, 204, 239, 255, 255, 8, 115, 13, 139, 181, 204, 239, 255, 255, 137, 209, 131, 230, 1, 235, 35, 139, 125, 8, 141, 74, 1, 15, 182, 28, 58, 137, 218, 128, 207, 255, 137, 157, 204, 239, 255, 255, 57, 77, 12, 15, 130, 209, 0, 0, 0, 137, 214, 131, 230, 1, 139, 125, 8, 141, 89, 1, 138, 20, 57, 133, 246, 116, 49, 57, 93, 12, 15, 130, 182, 0, 0, 0, 139, 125, 16, 64, 136, 84, 56, 255, 139, 189, 208, 239, 255, 255, 136, 148, 61, 227, 239, 255, 255, 141, 87, 1, 129, 226, 255, 15, 0, 0, 137, 149, 208, 239, 255, 255, 137, 218, 235, 130, 15, 182, 250, 57, 93, 12, 15, 130, 130, 0, 0, 0, 141, 81, 2, 139, 77, 8, 138, 12, 11, 57, 85, 12, 114, 116, 137, 203, 102, 129, 225, 240, 0, 193, 225, 4, 131, 227, 15, 9, 207, 131, 195, 2, 49, 201, 137, 157, 200, 239, 255, 255, 102, 137, 189, 198, 239, 255, 255, 102, 139, 181, 198, 239, 255, 255, 139, 125, 16, 1, 206, 129, 230, 255, 15, 0, 0, 138, 156, 53, 227, 239, 255, 255, 141, 52, 1, 65, 136, 28, 62, 139, 181, 208, 239, 255, 255, 136, 156, 53, 227, 239, 255, 255, 141, 118, 1, 129, 230, 255, 15, 0, 0, 137, 181, 208, 239, 255, 255, 57, 141, 200, 239, 255, 255, 125, 188, 139, 189, 200, 239, 255, 255, 141, 68, 7, 1, 233, 244, 254, 255, 255, 129, 196, 48, 16, 0, 0, 91, 94, 95, 93, 194, 12, 0 })<br />
' mov eax, 4144<br />
' mov ebp, esp<br />
' push edi<br />
' push esi<br />
' push ebx<br />
' mov ecx, 4078<br />
' sub esp, eax<br />
' lea edx, [ebp-4125]<br />
' mov al, 32<br />
' mov DWORD PTR [ebp-4144], 4078<br />
' mov DWORD PTR [ebp-4148], 0<br />
' mov edi, edx<br />
' xor edx, edx<br />
' rep stosb<br />
' xor eax, eax<br />
' L2:<br />
' shr DWORD PTR [ebp-4148], 1<br />
' bt DWORD PTR [ebp-4148], 8<br />
' jnc L3<br />
' mov esi, DWORD PTR [ebp-4148]<br />
' mov ecx, edx<br />
' and esi, 1<br />
' jmp L4<br />
' L3:<br />
' mov edi, DWORD PTR [ebp+8]<br />
' lea ecx, [edx+1]<br />
' movzx ebx, BYTE PTR [edx+edi]<br />
' mov edx, ebx<br />
' or bh, -1<br />
' mov DWORD PTR [ebp-4148], ebx<br />
' cmp DWORD PTR [ebp+12], ecx<br />
' jb L1<br />
' mov esi, edx<br />
' and esi, 1<br />
' L4:<br />
' mov edi, DWORD PTR [ebp+8]<br />
' lea ebx, [ecx+1]<br />
' mov dl, BYTE PTR [ecx+edi]<br />
' test esi, esi<br />
' je L6<br />
' cmp DWORD PTR [ebp+12], ebx<br />
' jb L1<br />
' mov edi, DWORD PTR [ebp+16]<br />
' inc eax<br />
' mov BYTE PTR [eax-1+edi], dl<br />
' mov edi, DWORD PTR [ebp-4144]<br />
' mov BYTE PTR [ebp-4125+edi], dl<br />
' lea edx, [edi+1]<br />
' and edx, 4095<br />
' mov DWORD PTR [ebp-4144], edx<br />
' mov edx, ebx<br />
' jmp L2<br />
' L6:<br />
' movzx edi, dl<br />
' cmp DWORD PTR [ebp+12], ebx<br />
' jb L1<br />
' lea edx, [ecx+2]<br />
' mov ecx, DWORD PTR [ebp+8]<br />
' mov cl, BYTE PTR [ebx+ecx]<br />
' cmp DWORD PTR [ebp+12], edx<br />
' jb L1<br />
' L5:<br />
' mov ebx, ecx<br />
' and cx, 240<br />
' sal ecx, 4<br />
' and ebx, 15<br />
' or edi, ecx<br />
' add ebx, 2<br />
' xor ecx, ecx<br />
' mov DWORD PTR [ebp-4152], ebx<br />
' mov WORD PTR [ebp-4154], di<br />
' L9:<br />
' mov si, WORD PTR [ebp-4154]<br />
' mov edi, DWORD PTR [ebp+16]<br />
' add esi, ecx<br />
' and esi, 4095<br />
' mov bl, BYTE PTR [ebp-4125+esi]<br />
' lea esi, [ecx+eax]<br />
' inc ecx<br />
' mov BYTE PTR [esi+edi], bl<br />
' mov esi, DWORD PTR [ebp-4144]<br />
' mov BYTE PTR [ebp-4125+esi], bl<br />
' lea esi, [esi+1]<br />
' and esi, 4095<br />
' mov DWORD PTR [ebp-4144], esi<br />
' cmp DWORD PTR [ebp-4152], ecx<br />
' jge L9<br />
' mov edi, DWORD PTR [ebp-4152]<br />
' lea eax, [edi+1+eax]<br />
' jmp L2<br />
' L1:<br />
' add esp, 4144<br />
' pop ebx<br />
' pop esi<br />
' pop edi<br />
' pop ebp<br />
' ret 12<br />
返回 (0)<br />
<br />
<br />
.子程序 __启动窗口_创建完毕<br />
.局部变量 a1, 字节集<br />
.局部变量 a3, 字节集<br />
<br />
a1 ＝ 到字节集 (“9527”)<br />
a3 ＝ 到字节集 (“4513”)<br />
调试输出 (a1, a3)<br />
Decode (取变量数据地址 (a1), 取字节集长度 (a1), 取变量数据地址 (a3))<br />
调试输出 (a1, a3)

这样做的好处是简单省力，你不需要分析理解代码，只要它是能编译运行的，一般都能直接添加进来。

		自动登录	找回密码
密码			注册

[求助] 求助大佬帮忙翻译一段C伪代码为易代码