Exetools  

Go Back   Exetools > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 12-16-2010, 00:19
BoRoV's Avatar
BoRoV BoRoV is offline
Lo*eXeTools*rd
 
Join Date: Aug 2009
Posts: 56
Rept. Given: 3
Rept. Rcvd 91 Times in 24 Posts
Thanks Given: 0
Thanks Rcvd at 0 Times in 0 Posts
BoRoV Reputation: 91
VMSweeper 1.4 beta 1 (with surprise)
http://rghost.net/3619113
Reply With Quote
The Following 2 Users Gave Reputation+1 to BoRoV For This Useful Post:
ahmadmansoor (12-16-2010), besoeso (12-16-2010)
  #2  
Old 12-17-2010, 05:36
LCF-AT LCF-AT is offline
Lo*eXeTools*rd
 
Join Date: Aug 2008
Location: Château-Saint-Martin
Posts: 33
Rept. Given: 4
Rept. Rcvd 15 Times in 6 Posts
Thanks Given: 0
Thanks Rcvd at 2 Times in 1 Post
LCF-AT Reputation: 15
Hello,

@ BoRoV

Cool a new version but this time your plugin crashes always. Any Olly.I try to Analyse all VM references and then it crashes or closed Olly.The other version are working till now.
So I have test also diffrent dbghelp.dll versions but I get the same bad result.
Code:
VM Sweeper.dll 


2. Break on this call - then step in.

1003FD07   CALL 10005BC0   // BP

10005BC0   PUSH -1

EAX 00000000
ECX 0012D3C0
EDX 0000001C
EBX 00000010
ESP 0012D334
EBP 0012DD90
ESI 00000000
EDI 00461A48 OLLYDBG._Findmemory
EIP 10005BC0


0012D334   1003FD0C  RETURN to 1003FD0C from 10005BC0
0012D338   0000001C
0012D33C   63BE9E82
0012D340   0012F50C
0012D344   00000000


10005C03   LEA EBX,DWORD PTR DS:[EAX+1]

Address=0000001D
EBX=00000010

10005C06   MOV CL,BYTE PTR DS:[EAX]

DS:[0000001C]=???
CL=C0
-----------------------
I hope you can fix this problem soon.

greetz
Reply With Quote
Reply

Tags
codevirualizer, decompiler, vmprotect, vmsweeper


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Is there linux vm tool like vmprotect? swlepus General Discussion 4 12-23-2011 10:07


All times are GMT +8. The time now is 05:58.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )