
Anti-WriteProcessMemory hook plugin for Enigma Protector with Full Source and Binary
This plugin checks if the WriteProcessMemory Windows API is hooked by anyone. It will work in future versions! It simply checks if the fisrt byte of WriteProcessMemory is a jmp instruction. If WriteProcessMemory function is hooked then application is terminating without any messages.