求汇编大神帮忙分析代码

Question

@entrycall @1@1:pop bplea di,[bp+@3-@1]@2:XOR byte ptr cs:[di],0@key=$-1inc diloop @2@3:……;病毒的主要代码@4:这里假设es：di用于存储加密后代码的缓冲区mov cx,@end-@entrylea si,[bp+@entry-@1]push dspush cspush dsin al,41Hmov byte ptr[@key],al;rep movsblea si,[di+@3-entry]mov cx,@end-@entry@5 xor byte ptr es:[si],alinc siloop @5……@end

Answer 1

http://www.52pojie.cn/thread-465125-1-1.html