![]() |
|
#4
|
|||
|
|||
|
OK,let me clarify what I mean.Maybe I misused the word OEP.
A normal app has its entrypoint,I just want to move this entrypiont to the middle of its code,then jmp back to the original place where follow this EP.For example. 1 push ebp 2 mov ebp,esp 3 PUSH -1 4 PUSH 0 5 PUSH 0 6 0000 7 0000 8 0000 9 0000 10 MOV EAX,DWORD PTR FS:[0] 11 PUSH EAX 12 MOV DWORD PTR FS:[0],ESP 13 SUB ESP,68 0000 means null code. Can I put the first line (push ebp) into line 6,then jmp back to line 2 in line 7? 6 push ebp 7 jmp 2 In this example it's absolutely infinite loop,right ? Because everytime it runs into line7 it will jump back. I am not sure if PE file running as I think maybe it's a stupid question. diablo2oo2,yes it's easy to change the entrypoint but where you put the changed EP ? In the first section ? In the middle ? Or in the end? That's what I want to know. Thanks. |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| entry point to function in comobj/activex dlls | Mitchjs | General Discussion | 5 | 12-15-2005 05:45 |
| how to get the address of the entry point in an API | Warren | General Discussion | 6 | 08-30-2005 16:18 |
| Is it possable breakpoint on entry point of DLL | jadesk99 | General Discussion | 17 | 01-18-2004 12:08 |
| How to make sure this is really the Entry Point | merursinecury | General Discussion | 7 | 04-13-2003 08:20 |