mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
519 B
519 B
4D 5A 90 ?? ?? 00 00 00 04 00 00 00 FF FF 00 00 B8 00 00 00
4D 5A 90 .. .. 00 00 00 04 00 00 00 FF FF 00 00 B8 00 00 00
'MZ'90....00000004000000FFFF0000B8000000
Normal Signatures. '?' or '.' - wildcards
83CDFFEB$$8B1E83EEFC11DB72$$8A0646
"Jump" signatures. , , $$$$ jump distance
"Address" signatures. ####, ######## address for next instructions
**CDFFEB
** not null
!!CDFFEB
!! not ANSI
__CDFFEB
__ not ANSI and not null
CD+EB
"Delta signatures"