【Android 逆向】ARM while 逆向

#include <stdio.h>

int dowhile(int n){

	int i = 1;

	int s = 0;

	do{

		s += i;

	}while(i++ < n);

	return s;

}

int whiledo(int n){

	int i = 1;

	int s = 0;

	while(i <= n){

		s += i++;

	}

	return s;

}

int main(int argc, char* argv[]){

	printf("dowhile:%d\n", dowhile(100));

	printf("while:%d\n", whiledo(100));

	return 0;

}



.text:00008570 ; =============== S U B R O U T I N E =======================================

.text:00008570

.text:00008570

.text:00008570 doWhile                                 ; CODE XREF: main+8↓p

.text:00008570 ; __unwind {

.text:00008570                 MOV     R2, #0

.text:00008574                 MOV     R3, #1          ; i = 1 s=0

.text:00008578

.text:00008578 loc_8578                                ; CODE XREF: doWhile+18↓j

.text:00008578                 ADD     R2, R2, R3      ; s = s + i

.text:0000857C                 ADD     R3, R3, #1      ; i++

.text:00008580                 SUB     R1, R3, #1      ; tmp = i -1

.text:00008584                 CMP     R0, R1

.text:00008588                 BGT     loc_8578        ; if arg0（n） > tmp  continue继续循环

.text:0000858C                 MOV     R0, R2          ; r0 为return值 r0 = s

.text:00008590                 BX      LR              ; 使用LR的值跳转出函数

.text:00008590 ; } // starts at 8570

.text:00008590 ; End of function doWhile

.text:00008590

.text:00008594

.text:00008594 ; =============== S U B R O U T I N E =======================================

.text:00008594

.text:00008594

.text:00008594 whileDo                                 ; CODE XREF: main+20↓p

.text:00008594 ; __unwind {

.text:00008594                 SUBS    R2, R0, #0

.text:00008598                 MOVLE   R0, #0

.text:0000859C                 BXLE    LR              ; if n <= 0 跳出函数

.text:000085A0                 MOV     R0, #0          ; s = 0

.text:000085A4                 MOV     R3, #1          ; i = 1

.text:000085A8

.text:000085A8 loc_85A8                                ; CODE XREF: whileDo+20↓j

.text:000085A8                 ADD     R0, R0, R3      ; s += i

.text:000085AC                 ADD     R3, R3, #1      ; i++

.text:000085B0                 CMP     R2, R3

.text:000085B4                 BGE     loc_85A8        ; if n >= i contiue

.text:000085B8                 BX      LR

.text:000085B8 ; } // starts at 8594

.text:000085B8 ; End of function whileDo

.text:000085B8

.text:000085BC

.text:000085BC ; =============== S U B R O U T I N E =======================================

.text:000085BC

.text:000085BC

.text:000085BC ;

.text:000085BC

.text:000085BC ; int __cdecl main(int argc, const char **argv, const char **envp)

.text:000085BC main                                    ; CODE XREF: j_main↑j

.text:000085BC ; __unwind {

.text:000085BC                 PUSH    {R4,LR}         ; 栈上保存R4 和 LR 的值

.text:000085C0                 MOV     R0, #0x64 ; 'd' ; 为RO 赋值100

.text:000085C4                 BL      doWhile         ; 跳转到doWhile。同时给LR赋值为0x85C8

.text:000085C8                 MOV     R1, R0

.text:000085CC                 LDR     R0, =(aDowhileD - 0x85D8) ; 获取字符串在GOT的偏移

.text:000085D0                 ADD     R0, PC, R0      ; 获取字符串实际首地址

.text:000085D4                 BL      printf

.text:000085D8                 MOV     R0, #0x64 ; 'd' ; 为R0 赋值100

.text:000085DC                 BL      whileDo         ; 跳转到doWhile。同时给LR赋值为0x85E0

.text:000085E0                 MOV     R1, R0

.text:000085E4                 LDR     R0, =(aWhileD - 0x85F0) ; "while:%d\n"

.text:000085E8                 ADD     R0, PC, R0      ; "while:%d\n"

.text:000085EC                 BL      printf

.text:000085F0                 MOV     R0, #0

.text:000085F4                 POP     {R4,PC}

.text:000085F4 ; End of function main

.text:000085F4

.text:000085F4 ; -----

巴特西

【Android 逆向】ARM while 逆向

最新文章

热门文章