Thread: Simple VMProtect Loader (C++)
View Single Post
  #20  
Old 10-20-2014, 09:28
ZeNiX's Avatar
ZeNiX ZeNiX is offline
Administrator
  
Join Date: Feb 2009
Posts: 732
Rept. Given: 177
Rept. Rcvd 773 Times in 259 Posts
Thanks Given: 213
Thanks Rcvd at 886 Times in 243 Posts
ZeNiX Reputation: 700-899 ZeNiX Reputation: 700-899 ZeNiX Reputation: 700-899 ZeNiX Reputation: 700-899 ZeNiX Reputation: 700-899 ZeNiX Reputation: 700-899 ZeNiX Reputation: 700-899
For VMProtect and Themida/WinLicense,
Here is my method for loader.

1. Hook the API near OEP or near your patch point.
2. Check the return address from stack.

Then, you know when your target is unpacked.
Reply With Quote
The Following 3 Users Gave Reputation+1 to ZeNiX For This Useful Post:
0x22 (10-20-2014), b30wulf (10-20-2014), Newbie_Cracker (10-24-2014)
The Following User Says Thank You to ZeNiX For This Useful Post:
niculaita (08-30-2016)