Hi tr1stan!
THanks for the info. Maybe my mistake was trying to crack it with SoftICE (disabling antiSICE detections). I finished in Ring 3 with exception in the following instruction (mov dr7, eax). So, I guess the use also debug register to work (a pain for us
)
Which code is mangled with VM? Is it like armadillo replacing the "JMP xxx" to its own code? or maybe it transforms original x86 code into VM code? or is part of the API wrapping?
Regards