Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Byte 72 at offset 11C260 not recognized as a valid opcode. #26

Open
ghost opened this issue Feb 11, 2020 · 2 comments
Open

Byte 72 at offset 11C260 not recognized as a valid opcode. #26

ghost opened this issue Feb 11, 2020 · 2 comments
Labels
bug Something isn't working

Comments

@ghost
Copy link

ghost commented Feb 11, 2020

Describe the bug
The bug happens when I try to simply drag the file into OldRod.exe. Screenshot is below.

To Reproduce
To reproduce I used the ConfuserEx-Mod-By-Bed-1.4.1. The bin file can be created using his tool from here: https://github.com/BedTheGod/ConfuserEx-Mod-By-Bed/releases using these settings: http://prntscr.com/r0t907

Screenshots
http://prntscr.com/r0t46s

Additional context
I've tried myself to modify the code from OldRod but with no success...
Ok i found something on KoiVM.dll from ConfuserEx-Mod-By-Bed-1.4.1. He used 4 new opcodes and the opcode with 0x72 byte is actually this "public const ILOpCode __ENDCALL = 72;".
The new 4 op codes are:
__ENTRY,
__EXIT,
__BEGINCALL,
__ENDCALL

Program exe protected with Beds Protector 1.4.1.zip

@ghost ghost added the bug Something isn't working label Feb 11, 2020
@Washi1337
Copy link
Owner

The new opcodes you are found are not new, but are pseudo opcodes that also exist in the original distribution of KoiVM, and are eliminated during the compilation process.

Regardless, can you provide me with a repro binary? I cannot seem to reproduce your issue.

@ghost
Copy link
Author

ghost commented Feb 11, 2020

File Uploaded.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant