Scribd Logo
Upload

Welcome to Scribd!

  • (Lamp-Ret - Club) - Bypass VMP 3.5 x64

    Uploaded by

    elvishernandez
    10 views1 page

    Original Title

    [Lamp-Ret.club]_Bypass VMP 3.5 x64

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    10 views1 page

    (Lamp-Ret - Club) - Bypass VMP 3.5 x64

    Uploaded by

    elvishernandez

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 1

    msg "VMP 3.

    5 x64 bypasser "

    find mem.base(cip), "0F0568"

    cmp $result, 0
    je error

    bp_loop:
    bp $result
    find $result + 1, "0F0568"
    cmp $result, 0
    jne bp_loop

    rax_loop:
    erun
    cmp RAX, 0xD
    jne rax_loop
    d
    msg "We find valid syscall"
    RDX = 0x9
    cmt cip, "ThreadHideFromDebugger"
    bpc
    run
    run
    run
    msg "Set breakpoint on OEP and run :)"
    ret

    error:
    msg "Couldn't find the pattern. Exactly VMP 3.5?"
    ret

    You might also like