//
// PECompact 2.79 OEP finder
// Let me know if there are any problems or suggestions.
// jms@bughunter.ca
//

gpa "VirtualFree", "kernel32.dll"
bp $RESULT
run
run

rtr
sti
rtr
sti
sto
sto
sto
sto
sto
sto
sto
sto
sto
sto
sto
sto
sti

findop eip, "#E8#"
cmt $RESULT, "OEP is here."
cmt eip, "OEP is near here, look for CALL, this will be exact OEP"