# Direct oep

EN | ZH The so-called one-step OEP shelling method is based on the characteristics of the shelling, looking for the assembly instruction closest to OEP, then the int3 breakpoint, and the dump program when the program goes to OEP.

For example, some compression shells tend to be particularly close to OEP or large jmp. Therefore, using Ollydbg's search function, you can search the shell's feature assembly code to achieve the effect of one step breakpoint to OEP.

## 要点¶

Still use the original notepad.exe to illustrate, after opening with Ollydbg, we press ctrl+f to find the specified string, like popad is a typical feature, some shells are commonly used. Popadto restore state, so search forpopad as shown below.