Determine whether to access OEP

Source: Internet
Author: User

Summary:

Microsoft Visual C ++ 6.0
 
00496EB8>/$55 push ebp; (initial cpu selection)
00496EB9 |. 8BEC mov ebp, ESP
00496EBB |. 6A ff push-1
00496EBD |. 68 40375600 PUSH Screensh.00563740
00496EC2 |. 68 8CC74900 PUSH Screensh.0049C78C; SE handler Installation
00496EC7 |. 64: A1 0000000> mov eax, dword ptr fs: [0]
00496mcm |. 50 PUSH EAX
00496ECE |. 64: 8925 00000> mov dword ptr fs: [0], ESP
00496ED5 |. 83EC 58 sub esp, 58
 

 
 
Microsoft Visual Basic 5.0/6.0
 
00401166-FF25 6C104000 jmp dword ptr ds: [<& MSVBVM60. #100>]; MSVBVM60.ThunRTMain
00401_c> 68 147C4000 PUSH PACKME.00407C14
00401171 E8 F0FFFFFF CALL <JMP. & MSVBVM60. #100>
00401176 0000 add byte ptr ds: [EAX], AL
00401178 0000 add byte ptr ds: [EAX], AL
0040117A 0000 add byte ptr ds: [EAX], AL
0040117C 3000 xor byte ptr ds: [EAX], AL
 
Or omit the JMP of the first line.
 
00401FBC> 68 D0D44000 push dumped _. 0040D4D0
00401FC1 E8 EEFFFFFF call <jmp. & msvbvm60.ThunRTMain>
00401FC6 0000 add byte ptr ds: [eax], al
00401FC8 0000 add byte ptr ds: [eax], al
00401FCA 0000 add byte ptr ds: [eax], al
00401FCC 3000 xor byte ptr ds: [eax], al
00401FCE 0000 add byte ptr ds: [eax], al
 
BC ++
 
0040163C> $/EB 10 jmp short BCLOCK.0040164E
0040163E | 66 DB 66; CHAR f
0040163F | 62 DB 62; CHAR B
00401640 | 3A DB 3A; CHAR:
00401641 | 43 DB 43; CHAR C
00401642 | 2B DB 2B; CHAR +
00401643 | 2B DB 2B; CHAR +
00401644 | 48 DB 48; CHAR H
00401645 | 4F DB 4F; CHAR O
00401646 | 4F DB 4F; CHAR O
00401647 | 4B DB 4B; CHAR K
00401648 | 90 NOP
00401649 | E9 DB E9
0040164A. | 98E04E00 dd offset bclock. ___ CPPdebugHook
0040164E> A1 8BE04E00 mov eax, dword ptr ds: [4EE08B]
00401653. C1E0 02 shl eax, 2
00401656. A3 8FE04E00 mov dword ptr ds: [4EE08F], EAX
0040165B. 52 PUSH EDX
0040165C. 6A 00 PUSH 0;/pModule = NULL
0040165E. E8 DFBC0E00 CALL <JMP. & KERNEL32.GetModuleHandleA>; GetModuleHandleA
00401663. 8BD0 mov edx, EAX
 
Borland Delphi 6.0-7.0
 
00509CB0> $55 PUSH EB

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.