![]() |
|
#2
|
|||
|
|||
|
The idea is not new. In fact it is already used in nearly every protector having some kind of VM features.
But I think the best part is the following: Code:
[...]
3. Principle of work
[...]
C. Running the real code in stack
Push encrypted instruction code to stack, decrypt it,call it!
[...]
![]() Edit: I just checked the sample application. It's full of code like this one: Code:
xor d,[esp][06],023436576 mov eax,esp call eax
Last edited by MarkusO; 12-06-2006 at 00:07. |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| .net modification of a method (without decompilation) | Shub-Nigurrath | General Discussion | 8 | 10-15-2013 21:04 |
| search method passwords | goku | General Discussion | 7 | 07-14-2010 02:15 |
| Protection against point-h method? | TheDutchJewel | General Discussion | 7 | 05-06-2004 01:32 |
| What method to use? | bartster | General Discussion | 11 | 02-08-2004 23:19 |