Results 1 to 6 of 6

Thread: strange code

  1. Aug 2nd, 2005, 08:31 PM #1
    ayman_rapper
    ayman_rapper is offline

    Thread Starter
    Lively Member
    Join Date
    Jan 2005
    Posts
    72

    strange code

    how i can convert this code to assci

    VB Code:
    1. '00401E70      55                      PUSH EBP

    2.     '00401E71      8BEC                    MOV EBP, ESP

    3.     '00401E73      83EC0C                  SUB ESP, 0C

    4.     '00401E76      68C6104000              PUSH 004010C6

    5.     '00401E7B      64                      FS: 

    6.     '00401E7C      A100000000              MOV EAX, DWORD PTR [00000000]

    7.     '00401E81      50                      PUSH EAX

    8.     '00401E82      64                      FS: 

    9.     '00401E83      892500000000            MOV DWORD PTR [00000000], ESP

    10.     '00401E89      83EC3C                  SUB ESP, 3C

    11.     '00401E8C      53                      PUSH EBX

    12.     '00401E8D      56                      PUSH ESI

    13.     '00401E8E      57                      PUSH EDI

    14.     '00401E8F      8965F4                  MOV DWORD PTR [EBP-0C], ESP

    15.     '00401E92      C745F898104000          MOV DWORD PTR [EBP-08], 00401098

    16.     '00401E99      8B7508                  MOV ESI, DWORD PTR [EBP+08]

    17.     '00401E9C      8BC6                    MOV EAX, ESI

    18.     '00401E9E      83E001                  AND EAX, 01

    19.     '00401EA1      8945FC                  MOV DWORD PTR [EBP-04], EAX

    20.     '00401EA4      83E6FE                  AND ESI, FE

    21.     '00401EA7      56                      PUSH ESI

    22.     '00401EA8      897508                  MOV DWORD PTR [EBP+08], ESI

    23.     '00401EAB      8B0E                    MOV ECX, DWORD PTR [ESI]

    24.     '00401EAD      FF5104                  CALL DWORD PTR [ECX+04]

    25.     '00401EB0      8B16                    MOV EDX, DWORD PTR [ESI]

    26.     '00401EB2      33FF                    XOR EDI, EDI

    27.     '00401EB4      56                      PUSH ESI

    28.     '00401EB5      897DE8                  MOV DWORD PTR [EBP-18], EDI

    29.     '00401EB8      897DE4                  MOV DWORD PTR [EBP-1C], EDI

    30.     '00401EBB      897DD4                  MOV DWORD PTR [EBP-2C], EDI

    31.     '00401EBE      897DC4                  MOV DWORD PTR [EBP-3C], EDI

    32.     '00401EC1      FF9200030000            CALL DWORD PTR [EDX+00000300]

    33.     '00401EC7      50                      PUSH EAX

    34.     '00401EC8      8D45E4                  LEA EAX, DWORD PTR [EBP-1C]

    35.     '00401ECB      50                      PUSH EAX

    36.     '00401ECC      FF1520104000            CALL DWORD PTR [00401020]      *** Référence to '__vbaObjSet'***

    37.     '00401ED2      8BF0                    MOV ESI, EAX

    38.     '00401ED4      8D55E8                  LEA EDX, DWORD PTR [EBP-18]

    39.     '00401ED7      52                      PUSH EDX

    40.     '00401ED8      56                      PUSH ESI

    41.     '00401ED9      8B0E                    MOV ECX, DWORD PTR [ESI]

    42.     '00401EDB      FF91A0000000            CALL DWORD PTR [ECX+000000A0]

    43.     '00401EE1      3BC7                    CMP EAX, EDI

    44.     '00401EE3      DBE2                    FNCLEX 

    45.     '00401EE5      7D12                    JGE 401EF9

    46.     '00401EE7      68A0000000              PUSH 000000A0

    47.     '00401EEC      68F81B4000              PUSH 00401BF8

    48.     '00401EF1      56                      PUSH ESI

    49.     '00401EF2      50                      PUSH EAX

    50.     '00401EF3      FF1514104000            CALL DWORD PTR [00401014]      *** Référence to '__vbaHresultCheckObj'***

    51.     '00401EF9      8B45E8                  MOV EAX, DWORD PTR [EBP-18]

    52.     '00401EFC      50                      PUSH EAX

    53.     '00401EFD      680C1C4000              PUSH 00401C0C

    54.     '00401F02      FF1538104000            CALL DWORD PTR [00401038]      *** Référence to '__vbaStrCmp'***

    55.     '00401F08      8BF0                    MOV ESI, EAX

    56.     '00401F0A      8D4DE8                  LEA ECX, DWORD PTR [EBP-18]

    57.     '00401F0D      F7DE                    NEG ESI

    58.     '00401F0F      1BF6                    SBB ESI, ESI

    59.     '00401F11      46                      INC ESI

    60.     '00401F12      F7DE                    NEG ESI

    61.     '00401F14      FF158C104000            CALL DWORD PTR [0040108C]      *** Référence to '__vbaFreeStr'***

    62.     '00401F1A      8D4DE4                  LEA ECX, DWORD PTR [EBP-1C]

    63.     '00401F1D      FF1590104000            CALL DWORD PTR [00401090]      *** Référence to '__vbaFreeObj'***

    64.     '00401F23      66                      Opsize: 

    65.     '00401F24      3BF7                    CMP ESI, EDI

    66.     '00401F26      747F                    JE 401FA7

    67.     '00401F28      393D24304000            CMP DWORD PTR [00403024], EDI

    68.     '00401F2E      7510                    JNE 401F40

    69.     '00401F30      6824304000              PUSH 00403024

    70.     '00401F35      6814144000              PUSH 00401414

    71.     '00401F3A      FF1560104000            CALL DWORD PTR [00401060]      *** Référence to '__vbaNew2'***

    72.     '00401F40      83EC10                  SUB ESP, 10

    73.     '00401F43      B90A000000              MOV ECX, 0000000A

    74.     '00401F48      8BDC                    MOV EBX, ESP

    75.     '00401F4A      894DD4                  MOV DWORD PTR [EBP-2C], ECX

    76.     '00401F4D      B804000280              MOV EAX, 80020004

    77.     '00401F52      83EC10                  SUB ESP, 10

    78.     '00401F55      890B                    MOV DWORD PTR [EBX], ECX

    79.     '00401F57      8B4DC8                  MOV ECX, DWORD PTR [EBP-38]

    80.     '00401F5A      8BD0                    MOV EDX, EAX

    81.     '00401F5C      8B3524304000            MOV ESI, DWORD PTR [00403024]

    82.     '00401F62      894B04                  MOV DWORD PTR [EBX+04], ECX

    83.     '00401F65      8BCC                    MOV ECX, ESP

    84.     '00401F67      8B3E                    MOV EDI, DWORD PTR [ESI]

    85.     '00401F69      56                      PUSH ESI

    86.     '00401F6A      894308                  MOV DWORD PTR [EBX+08], EAX

    87.     '00401F6D      8B45D0                  MOV EAX, DWORD PTR [EBP-30]

    88.     '00401F70      89430C                  MOV DWORD PTR [EBX+0C], EAX

    89.     '00401F73      8B45D4                  MOV EAX, DWORD PTR [EBP-2C]

    90.     '00401F76      8901                    MOV DWORD PTR [ECX], EAX

    91.     '00401F78      8B45D8                  MOV EAX, DWORD PTR [EBP-28]

    92.     '00401F7B      894104                  MOV DWORD PTR [ECX+04], EAX

    93.     '00401F7E      895108                  MOV DWORD PTR [ECX+08], EDX

    94.     '00401F81      8B55E0                  MOV EDX, DWORD PTR [EBP-20]

    95.     '00401F84      89510C                  MOV DWORD PTR [ECX+0C], EDX

    96.     '00401F87      FF97B0020000            CALL DWORD PTR [EDI+000002B0]

    97.     '00401F8D      33FF                    XOR EDI, EDI

    98.     '00401F8F      3BC7                    CMP EAX, EDI

    99.     '00401F91      DBE2                    FNCLEX 

    100.     '00401F93      7D12                    JGE 401FA7

    101.     '00401F95      68B0020000              PUSH 000002B0

    102.     '00401F9A      68141C4000              PUSH 00401C14

    103.     '00401F9F      56                      PUSH ESI

    104.     '00401FA0      50                      PUSH EAX

    105.     '00401FA1      FF1514104000            CALL DWORD PTR [00401014]      *** Référence to '__vbaHresultCheckObj'***

    106.     '00401FA7      897DFC                  MOV DWORD PTR [EBP-04], EDI

    107.     '00401FAA      68C51F4000              PUSH 00401FC5

    108.     '00401FAF      EB13                    JMP 401FC4

    109.     '00401FB1      8D4DE8                  LEA ECX, DWORD PTR [EBP-18]

    110.     '00401FB4      FF158C104000            CALL DWORD PTR [0040108C]      *** Référence to '__vbaFreeStr'***

    111.     '00401FBA      8D4DE4                  LEA ECX, DWORD PTR [EBP-1C]

    112.     '00401FBD      FF1590104000            CALL DWORD PTR [00401090]      *** Référence to '__vbaFreeObj'***

    113.     '00401FC3      C3                      RET
    Reply With Quote Reply With Quote
  2. Aug 2nd, 2005, 08:37 PM #2
    dglienna
    dglienna is offline
    Banned dglienna's Avatar
    Join Date
    Jun 2004
    Location
    Center of it all
    Posts
    17,901

    Re: strange code

    Looks like text to me. What are you trying to do?
    Reply With Quote Reply With Quote
  3. Aug 2nd, 2005, 08:42 PM #3
    manavo11
    manavo11 is offline
    Super Moderator manavo11's Avatar
    Join Date
    Nov 2002
    Location
    Around the corner from si_the_geek
    Posts
    7,171

    Re: strange code

    Kinda looks like assembly to me...


    Has someone helped you? Then you can Rate their helpful post.
    Reply With Quote Reply With Quote
  4. Aug 2nd, 2005, 08:45 PM #4
    Jacob Roman
    Jacob Roman is offline
    Elite Hacker Jacob Roman's Avatar
    Join Date
    Aug 2004
    Location
    Miami Beach, FL
    Posts
    5,349

    Re: strange code

    He's decompiling an EXE made in VB it seems. Take a look at the comments.
    Useful Forum Tips:

    - If you found any post that was useful, please consider rating their post
    - Give sensible thread titles, please!
    - Be sure to use [HIGHLIGHT=VB][/HIGHLIGHT] tags when posting code written in VB.
    - Write posts like a conversation, not like an email. That way you can avoid saying "Dear so and so" in every post.
    - When your problem is solved, go up to Thread Tools and click on Mark Thread Resolved

    My Contributions: Massive DirectX 2D Tutorials For VB5/VB6/VB.NET || 3D Engine In Pure VB || Friction Force ||DJ Turntable Simulation || Scratching Wavs || Time Based Movement || Newton Physics Simulation || Managed Game Loop || Rigid Body Collision Detection || World of Warcraft RGB Battle System || Bosskillers (World of Warcraft 2D Clone) || Street Fighter Controls (Flawless Simulation) || A* Pathfinding (VB6 & VB.NET) *UPDATED || *NEW* Nintendo Entertainment System Emulator (VB6) || *NEW* Video Game Making Tips (VB6 & VB.Net) || World of Warcraft Spell Cooldown Effect (VB.Net 2008, 2010 & VB6) || *NEW* Flappy Bird (VB.Net)

    Lets make a Sega Genesis Emulator! (VB6 & VB.Net) Expert. Ask me anything NES!
    My Smilies:

    Reply With Quote Reply With Quote
  6. Aug 3rd, 2005, 02:25 AM #5
    randem
    randem is offline
    Banned randem's Avatar
    Join Date
    Oct 2002
    Location
    Maui, Hawaii
    Posts
    11,385

    Re: strange code

    ayman_rapper,

    It's ASCII... and just what do you mean?
    Reply With Quote Reply With Quote
  7. Aug 3rd, 2005, 03:34 AM #6
    mowafy
    mowafy is offline
    Lively Member mowafy's Avatar
    Join Date
    Jul 2005
    Posts
    116

    Re: strange code

    yes this result from a program to hacke any exe
    i have that one
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules


Click Here to Expand Forum to Full Width