3.06_to_3.91.txt

// Author: Thomas Thelen
// Contact: https://github.com/ThomasThelen
// Comment: Takes you to the OEP of files packed with UPX from versions 3.06 to 3.09
// Date: 8/12/2015
// Instructions: Open the file in x64dbg and run the script.

//Begin Script
run
bc
bphwc

//Find the OEP
find CIP, E9BA31FFFF// Signature of OEP jump
cmp $result, 0	// Check for success
je error	// Error otherwise
bp $result	// Set a breakpoint on the jump
run	
st
sti	// Take jump to OEP
bc	// Clear Breakpoints
ret

error:
msg "Could not find the OEP."
ret