How to find YP's OEP

[suddenLy]

To find OEP u'd better check the value of stack at BP on gettickcount, when debugger stop second time (with gettickcount BP).

Suddenly, thanks for your answer.... I tried your solution but I cannot find the OEP using it.. Maybe you could describe your method in more detail ? You're sure it works for the latest yoda's protector ?

[suddenLy]

OEP is stored to [esp+10] after return of second time of gettickcount.

The OEP is usually stored with "ror oep, 7"

so u can get real oep with "rol [esp+10], 7"

of course the value, 7 is dependent on u.

when u try some other number, u maybe find oep easily.

if u have a problem, feel free to know me that.

regards