Virbox Protector Unpack Exclusive -
In many instances, the packer starts by saving registers. Set a hardware breakpoint on the stack right after the initial PUSHAD . When the POPAD occurs at the end of the unpacking routine, you are usually seconds away from the OEP.
Once you are at the OEP and the code is decrypted in memory: virbox protector unpack exclusive