الفريق العربي للهندسة العكسية

Hi dear all

i see some new custom protection used PE section encryption

i see most of them used WinVerifyTrust function and when i put breakpoints, software crashed

 some source say me that with CFF explorer i can defeat its PE section encryption

?have you any tutorial or help me for defeat of this type of protection using by CFF Explorer

It would be very helpful to us if you can upload your target (if it's not against the rules) so we can help you out