Vitor Sousa Posted January 15, 2020 Share Posted January 15, 2020 Hi guys, Sorry to disturb you, but I´m trying to analyze a sample that is protected with vmprotect. I tried most of the tutorials, but no good. I reach the API Virtual Protect, and the change of the section vmp0 to writable/executable, but then i can´t figure out what to do next...! He stands only in the section vmp0 and do not advance to other. Can you please help me? data.docx Link to comment Share on other sites More sharing options...
Vitor Sousa Posted January 15, 2020 Author Share Posted January 15, 2020 I figure out..! bypass API GetSystemFirmwareTable function 🙂 Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now