Thread: Simple VMProtect Loader (C++)
View Single Post
  #20  
Old 10-20-2014, 09:28
ZeNiX's Avatar
ZeNiX ZeNiX is offline
Administrator
  
Join Date: Feb 2009
Posts: 735
Rept. Given: 177
Rept. Rcvd 772 Times in 259 Posts
Thanks Given: 226
Thanks Rcvd at 910 Times in 247 Posts
ZeNiX Reputation: 700-899 ZeNiX Reputation: 700-899 ZeNiX Reputation: 700-899 ZeNiX Reputation: 700-899 ZeNiX Reputation: 700-899 ZeNiX Reputation: 700-899 ZeNiX Reputation: 700-899
For VMProtect and Themida/WinLicense,
Here is my method for loader.

1. Hook the API near OEP or near your patch point.
2. Check the return address from stack.

Then, you know when your target is unpacked.
Reply With Quote
The Following 3 Users Gave Reputation+1 to ZeNiX For This Useful Post:
0x22 (10-20-2014), b30wulf (10-20-2014), Newbie_Cracker (10-24-2014)
The Following User Says Thank You to ZeNiX For This Useful Post:
niculaita (08-30-2016)