OpenEuphoria

Re: Detecting a C translated bound program

• Posted by Pete Lomax <petelomax at bl?eyonder.co.uk> Oct 26, 2007
• 582 views

OtterDad wrote:
> > Pete Lomax wrote:
> > > The above is completely untested, btw.
On closer inspection it has a UPX0 section in there which changes size and entry
point every time, didn't realise that. On an equally unsure footing, you may be
able to check for the UPX0 section as an indicator, if eu2c applies upx then I'm
out of ideas. Anyway, fingers crossed:
> }}}
<eucode>
>-- 	void = seek(fn,#A8)
>       void = seek(fn,#178)
>-- 	if equal(ep,{#10,#0F,#03,#00}) then
> 	if equal(ep,"UPX0") then
> </eucode>
{{{

Seems to identify bound eu programs for me anyway.

Regards,
Pete