Questions tagged [anti-dumping]
The anti-dumping tag has no usage guidance.
5 questions
2
votes
2
answers
4k
views
How to debug / analyze a Themida protected binary
Background: I have an application that has worked fine up until Windows 10 build 1511 but broke as of build 1607. It produces an access violation:
STACK_TEXT:
03799f54 00f91cfa 24d1ae78 0000000f ...
0
votes
1
answer
2k
views
How to bypass anti-debugging C++
So I have a crackme my friend sent to try and crack it but the problem that I cannot bypass the anti-debugging or even patching it.
I even tried using ScyllaHide at max settings but still it detects ...
4
votes
4
answers
21k
views
Finding OEP in a VMProtect v3.0 protected malware
I've been trying to reverse engineer a malware that has been packed with VMProtect v3.0. My first instinct was to google an automated way for this and I found a script. Unfortunately the script to ...
3
votes
0
answers
499
views
Anti-Anti-Dump Approaches
tl;dr: What would be alternative approaches for attacking an anti-dump design that allocates encrypted blocks of code on the heap and uses a vm to resolve addresses and decrypt before execution?
I'm ...
2
votes
0
answers
795
views
Anti-dumping techniques [duplicate]
After handing on some crackmes using packed codes, I am now curious about anti-dumping techniques. For the crackmes I have encoutered, my method is as follows: after the program unpacks itself, I take ...