Ollydbg

OllyScript Example

UPX

var hwdBP                   // Local variable to store hardware breakpoint
var softBP                  // Local variable to strore software breakpoint

sti                         // Step into F7 command
findop eip, #61#            // find next POPAD
mov hwdBP, $RESULT          // Store $RESULT to hardware breakpoint local variable
bphws hwdBP, "x"            // Set hardware breakpoint (execute) on the next POPAD
run // Run F9 command
findop eip, #E9????????#    // Find the next JMP
mov softBP, $RESULT         // Store $RESULT to software breakpoint local variable
bp softBP
run                         // Run to JMP instruction
sti                         // Step into the OEP

cmt eip, "<-- OEP"
msg "OEP found"
ret

ASpack

var hwBP                    // Local variable for hardware breakpoint

mov hwBP, esp               // Using esp trick
bphws hwBP, "r"             // Set hardware breakpoint on read
run                         // Run
rtr                         // Execute till return
sto                         // F8

msg "OEP found"
cmt eip, "<-- OEP"
ret