Skip to main content

Questions tagged [anti-dumping]

Filter by
Sorted by
Tagged with
2 votes
2 answers
4k views

How to debug / analyze a Themida protected binary

Background: I have an application that has worked fine up until Windows 10 build 1511 but broke as of build 1607. It produces an access violation: STACK_TEXT: 03799f54 00f91cfa 24d1ae78 0000000f ...
Remko's user avatar
  • 3,283
0 votes
1 answer
2k views

How to bypass anti-debugging C++

So I have a crackme my friend sent to try and crack it but the problem that I cannot bypass the anti-debugging or even patching it. I even tried using ScyllaHide at max settings but still it detects ...
Ahmed minegames's user avatar
4 votes
4 answers
21k views

Finding OEP in a VMProtect v3.0 protected malware

I've been trying to reverse engineer a malware that has been packed with VMProtect v3.0. My first instinct was to google an automated way for this and I found a script. Unfortunately the script to ...
rustam Shirinov's user avatar
3 votes
0 answers
499 views

Anti-Anti-Dump Approaches

tl;dr: What would be alternative approaches for attacking an anti-dump design that allocates encrypted blocks of code on the heap and uses a vm to resolve addresses and decrypt before execution? I'm ...
MADDJAKKAL's user avatar
2 votes
0 answers
795 views

Anti-dumping techniques [duplicate]

After handing on some crackmes using packed codes, I am now curious about anti-dumping techniques. For the crackmes I have encoutered, my method is as follows: after the program unpacks itself, I take ...
Ta Thanh Dinh's user avatar