OEPFinder - Original Entry Point Finder 
Build: Quasar [Beta!]
Release Date: 14 April 2002.
Copyright 1999-2002 FoxThree

Web: http://foxthree.cjb.net
Email: foxthree@antionline.org

FREEWARE utility to find Original Entry Point of compressed/packed Win32 applications

Description:
~~~~~~~~~~~

OEPFinder has been designed to:

1. Locate the addresses where the packer *finally* returns control back to the original application.

2. It does not employ any kind of "tracer" to achieve this functionality [though it might do so in future]. It works on the concept of "signature" bytes: Opcodes that are unique for every packer. 

3. Features an easy-to-use GUI

Requirements:
~~~~~~~~~~~~
This software was tested on Windows 98 SE. However, it *should* work on Windows 2000 without any problems. (I haven't tested it yet on Win2K though). It *WILL NOT* work on Windows NT 4.0 currently. The decision to add support for Windows NT will be based *purely* on the basis of demand by users.

Packer List Supported:
~~~~~~~~~~~~~~~~~~~~~

Quasar Build [Beta!]:
  - ASProtect >= 1.2
  - PECompact 1.33
  - Petite 2.2

History:
~~~~~~~

Build: Quasar

  - First Public Release
  - Beta!

Known limitations/Bugs:
~~~~~~~~~~~~~~~~~~~~~~

None so far. If you are sure that you have a program packed by one of the packers supported by OEPFinder and still unable to find the OEP, drop me a line with the target URL. I'll take a look.

Also, I'm always looking for ways to enhance the program. If you find a new packer that you think can be supported by OEPFinder or *generally* have good ideas to expand the programs functionality, feel free to write to me.

Thanks and Greetz:
~~~~~~~~~~~~~~~~~

My sincere thanks goes to the various members of the Fravia MessageBoard (fraviamb.cjb.net) for their enthusiastic help in nurturing new ideas / directions. I'd like to thank +SplAj initiating me to his excellent "Signature Byte" trick for unpacking packers, Kayaker for helping me understand how WinHex and in general ReadProcessMemory works and binh81 for being there always ;). Thanks. 

My Greetz to all the FraviaMB for making it a great place to hangout.