VM decompiler tool (VMProtect, CodeVirtualizer)
1 Attachment(s)
Hi guys!
My friend released beta version of decompiler. Here is it. In your bug reports mention string with "#ERROR#" substring. |
Cong Bro :)
|
Can anyone upload in mediafire server???
|
http://www.d-jester.com/files/qCyiV1289315367.html
|
http://www.mediafire.com/?xe2audtv678ttjq
http://www.multiupload.com/7KR131VMWH |
It sounds promissing but could you post also some info how does it work and how to use it? ;)
-- Jump |
It's ollydbg 1.10 plug-in. It can't help you with anti-debug or crc checks. All what you need is to break at any address near OEP or after OEP. Then choose "Analyze for all VM references" and paste values for all .text/.code sections scope and for VM. It will show you all possible VM references. After that you can choose any address in this table (table of reference results) and press "[Ctrl]+[Crey *]" on it and then F1 for decompile.
|
Well it should be cool, but it kinda crashes at 13% with vmprotect will try some others. In oreans it doesn't recognize a deobfuscated VM it seems. Will test some more.
EDIT: Other VMprotect seems to crash as well.. Testing late VMprotect here, unpacked and antidump fixed. |
> "[Ctrl]+[Crey *]"
Sorry for mistake. I mean "New origin here" command. quosego Most programs have FPU handlers, so it one of the possible reasons of crashes. This tool is still beta and can't work with FPU handlers. But I can add support. What do you mean about "crashes"? There are many possible problems. Please specify. |
good tool~
|
:(the windows do not have a cancel button
|
Probably would be better if I did a little video with example of usage.
|
very Nice
Ooooo ..Ooooo . :eek:
progopis :cool: :cool: ........Great work bro :D . will be tested ... |
ahmadmansoor
My part of work on this project no more than 10% or maybe less. This project is started by Vamit. My part of this work was to study VMProtect and testing. Also, I fixed a few bugs and wrote some of the technical things in the architecture of the project. And I should make video for you now. |
no problem .... 10% is enough to be thanked ,
and big thanks for sharing it .... and 90% thanks for Vamit . video tut will be more useful to understand some points in this plugin . for me after analysising Olly hung .and I just use StrongOD and IDAFicator with this plugin . the target protected with Winlic and Vmprotect |
All times are GMT +8. The time now is 19:57. |
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX