Post
Topic
Board Mining (Altcoins)
Re: Claymore's Ethereum Mining NoDevFee v8.0 🔥
by
demion90
on 29/10/2017, 06:03:33 UTC
You can try look at loaded DLLs and used APIs using API Monitor (x64) - http://www.rohitab.com/apimonitor
Dont use Static Import Attach though, seems like VMProtect doesnt like it.

You can try just in case NetRipper DLL that hooks some SSL encryption APIs - https://github.com/NytroRST/NetRipper
It use exactly same hook as mine.

Also you can try look for Advapi32.dll -> CryptEncrypt (using API Monitor) - https://msdn.microsoft.com/en-us/library/windows/desktop/aa379924(v=vs.85).aspx

Also, as dd2017 said, you can try look all APIs in API Monitor from advapi32.dll, wintrust.dll, crypt32.dll.
You can get all function names from those DLL using DLL Export Viewer - http://www.nirsoft.net/utils/dll_export_viewer.html