#1
|
|||
|
|||
VM decompiler tool (VMProtect, CodeVirtualizer)
Hi guys!
My friend released beta version of decompiler. Here is it. In your bug reports mention string with "#ERROR#" substring. Last edited by progopis; 09-08-2018 at 02:27. |
The Following 21 Users Gave Reputation+1 to progopis For This Useful Post: | ||
1ST (11-16-2010), ahmadmansoor (11-10-2010), Apuromafo (11-25-2010), besoeso (11-09-2010), BoB (11-10-2010), D-Jester (11-09-2010), Fyyre (11-19-2010), henry_y (11-09-2010), jump (11-10-2010), KuNgBiM (11-10-2010), Loki (11-11-2010), NoneForce (11-21-2010), oVERfLOW (11-10-2010), yogi_saw (11-10-2010), ZeNiX (11-10-2010), _ruzmaz_ (11-10-2010) |
The Following 2 Users Say Thank You to progopis For This Useful Post: | ||
AhrimanSefid (07-02-2017), Apuromafo (07-14-2015) |
#2
|
|||
|
|||
Cong Bro
|
#3
|
||||
|
||||
Can anyone upload in mediafire server???
|
#4
|
||||
|
||||
http://www.d-jester.com/files/qCyiV1289315367.html
__________________
Even as darkness envelops and consumes us, wrapping around our personal worlds like the hand that grips around our necks and suffocates us, we must realize that life really is beautiful and the shadows of despair will scurry away like the fleeting roaches before the light. |
The Following User Gave Reputation+1 to D-Jester For This Useful Post: | ||
besoeso (11-10-2010) |
#5
|
|||
|
|||
http://www.mediafire.com/?xe2audtv678ttjq
http://www.multiupload.com/7KR131VMWH |
The Following User Says Thank You to progopis For This Useful Post: | ||
bsskkd (05-04-2016) |
#6
|
|||
|
|||
It sounds promissing but could you post also some info how does it work and how to use it?
-- Jump |
#7
|
|||
|
|||
It's ollydbg 1.10 plug-in. It can't help you with anti-debug or crc checks. All what you need is to break at any address near OEP or after OEP. Then choose "Analyze for all VM references" and paste values for all .text/.code sections scope and for VM. It will show you all possible VM references. After that you can choose any address in this table (table of reference results) and press "[Ctrl]+[Crey *]" on it and then F1 for decompile.
|
The Following User Gave Reputation+1 to progopis For This Useful Post: | ||
besoeso (11-10-2010) |
#8
|
|||
|
|||
Well it should be cool, but it kinda crashes at 13% with vmprotect will try some others. In oreans it doesn't recognize a deobfuscated VM it seems. Will test some more.
EDIT: Other VMprotect seems to crash as well.. Testing late VMprotect here, unpacked and antidump fixed. Last edited by quosego; 11-10-2010 at 04:15. |
#9
|
|||
|
|||
> "[Ctrl]+[Crey *]"
Sorry for mistake. I mean "New origin here" command. quosego Most programs have FPU handlers, so it one of the possible reasons of crashes. This tool is still beta and can't work with FPU handlers. But I can add support. What do you mean about "crashes"? There are many possible problems. Please specify. |
#10
|
||||
|
||||
good tool~
__________________
LCG https://www.52pojie.cn |
#11
|
|||
|
|||
the windows do not have a cancel button
|
#12
|
|||
|
|||
Probably would be better if I did a little video with example of usage.
|
#13
|
||||
|
||||
very Nice
Ooooo ..Ooooo .
progopis ........Great work bro . will be tested ...
__________________
Ur Best Friend Ahmadmansoor Always My Best Friend: Aaron & JMI & ZeNiX |
#14
|
|||
|
|||
ahmadmansoor
My part of work on this project no more than 10% or maybe less. This project is started by Vamit. My part of this work was to study VMProtect and testing. Also, I fixed a few bugs and wrote some of the technical things in the architecture of the project. And I should make video for you now. |
#15
|
||||
|
||||
no problem .... 10% is enough to be thanked ,
and big thanks for sharing it .... and 90% thanks for Vamit . video tut will be more useful to understand some points in this plugin . for me after analysising Olly hung .and I just use StrongOD and IDAFicator with this plugin . the target protected with Winlic and Vmprotect
__________________
Ur Best Friend Ahmadmansoor Always My Best Friend: Aaron & JMI & ZeNiX |
Tags |
codevirualizer, decompiler, vmprotect, vmsweeper |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
Is there linux vm tool like vmprotect? | swlepus | General Discussion | 4 | 12-23-2011 10:07 |