icarusdc Posted March 17, 2017 Share Posted March 17, 2017 how about other unpackme from Apuromafo (medium unpackme 5.6)? it has virtualized OEP by old Enigma VM and SHADOW_UA new script can't reach OEP. or maybe I use the script wrong. other way to reach OEP is using VirtualQuery and ResumeThread. this way can reach non-virtualized OEP and virtualized OEP by RISC VM, but can't reach by old VM. the virtualized OEP by old VM command is like JMP <Enigma VM section> or PUSH value JMP <Enigma VM section> if I remember it right. Salam. Link to comment Share on other sites More sharing options...
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!Register a new account
Already have an account? Sign in here.Sign In Now