monocul.us/de4dot-cex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add some comments

Browse Source
This commit is contained in:
de4dot 2012-08-05 02:37:31 +02:00
parent a3dbf5273d
commit f65715cac8
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
de4dot.code/deobfuscators/Confuser/x86Emulator.cs
View File

@ -24,12 +24,15 @@ using de4dot.PE;
namespace de4dot.code.deobfuscators.Confuser {
class x86Emulator {
// Confuser 1.7 r73740 - r73822
static readonly byte[] prolog1 = new byte[] {
0x8B, 0x44, 0x24, 0x04, 0x53, 0x50,
};
static readonly byte[] epilog1 = new byte[] {
0x5B, 0xC3,
};
// Confuser 1.7 r74021+
static readonly byte[] prolog2 = new byte[] {
0x89, 0xE0, 0x53, 0x57, 0x56, 0x29, 0xE0, 0x83,
0xF8, 0x18, 0x74, 0x07, 0x8B, 0x44, 0x24, 0x10,