structure of an OEP

[chmbw]

Hi,

i'm relative new to reversing and have question about OEPs:

in VB e.g. an OEP always pushes a string like "VB5!" an then always calls ThunRTMain.

Are there similar structures in other languages like c/c++, delphi etc.?

greetings!

[kao]

Yes, there are. Some generic unpackers uses them to guess where OEP is. You can check databases of PEiD and similar tools, most of them have detections for compilers as well.