Does anybody know what this C++ inline assembly does? -
i've seen following code in open source windows tool called dm2.
#define oep_asm __asm jmp oep \ __asm _emit 0x5b __asm _emit 0x66 __asm _emit 0x6c \ __asm _emit 0x79 __asm _emit 0x66 __asm _emit 0x61 \ __asm _emit 0x6e __asm _emit 0x63 __asm _emit 0x79 \ __asm _emit 0x26 __asm _emit 0x57 __asm _emit 0x65 \ __asm _emit 0x69 __asm _emit 0x72 __asm _emit 0x64 \ __asm _emit 0x5d __asm _emit 0x00 __asm oep:
there no comments , searching internet sill haven't understood does?! msdn tells me inserts bytes code. understand don't understand these bytes do, doesn't instructions.
can explain, or @ least point me in right direction inserting bytes does?
indeed not code, it's string. emitted obfuscation purposes.
$ echo $'\x5b\x66\x6c\x79\x66\x61\x6e\x63\x79\x26\x57\x65\x69\x72\x64\x5d' [flyfancy&weird]
or maybe has embedded code section , inline asm doesn't provide way otherwise. notice first instruction jumps on entire string.
Comments
Post a Comment