/*
//////////////////////////////////////////////////
UltraProtect 1.x/ACprotect 1.22 OEP Finder(Default mode,not for Delphi)
Author: loveboom
Email : bmd2chen@tom.com
OS : Win2kADV sp2,OllyDbg 1.1b,OllyScript v0.62
Date : 2004-3-28
Config: Hide ollydbg(IsDebuggerPresent),Exceptions:uncheck "INT3 breaks".
Note : If you have one or more question, email me please,thank you!
//////////////////////////////////////////////////
*/
var bpaddr //Break Point Address
start:
run
lbl1:
findop eip,#C3#
eob lbl2
bp $RESULT
esto
lbl2:
bc $RESULT
sto
mov bpaddr,esp
eob lbl3
bphws bpaddr,"r"
run
lbl3:
bphwc bpaddr
sto
sto
end:
cmt eip,"OEP found!please dumped it!"
msg "Script by loveboom[DFCG],Thank you for using my script!"
ret