// EXEStealth v2.7 OEP Finder v0.1 // by FEUERRADER [AHTeam] // http://ahteam.org var s var k eob Break mov s, esp sub s, 04 bphws s, "r" run Break: eob Break2 run Break2: eob B21 eoe expp sto run expp: esto B21: bphwc s eob B3 mov k, eax bp k run B3: bphwc k eob Br4 findop eip, #C1C7# bphws $RESULT, "x" run Br4: bphwc $RESULT sto sto eob Br5 mov k, edi bp k run Br5: bphwc k cmt eip, "OEP" ret