Exetools  

Go Back   Exetools > General > Source Code

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 05-12-2023, 21:56
Kurapica's Avatar
Kurapica Kurapica is offline
VIP
 
Join Date: Jun 2009
Location: Archives
Posts: 190
Rept. Given: 20
Rept. Rcvd 143 Times in 42 Posts
Thanks Given: 67
Thanks Rcvd at 404 Times in 87 Posts
Kurapica Reputation: 100-199 Kurapica Reputation: 100-199
Leaked VMProtect sources

Original topic by kao in tuts4you

https://mega.nz/file/h8BXXCxI#EgucjFszmaqzkBm1ZsarqsLKKqW4Av6gpZXhAlL5k68
Reply With Quote
The Following User Gave Reputation+1 to Kurapica For This Useful Post:
yoza (05-13-2023)
The Following 11 Users Say Thank You to Kurapica For This Useful Post:
argie (05-15-2023), besoeso (05-13-2023), CyberOdin49 (02-29-2024), darkBLACK (05-19-2023), Gladiyator (05-14-2023), nig (09-28-2023), nulli (05-14-2023), sh3dow (05-13-2023), tonyweb (05-13-2023), val2032 (05-16-2023), yoza (05-13-2023)
  #2  
Old 05-12-2023, 23:15
Aether Aether is offline
Guest
 
Join Date: May 2023
Posts: 2
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
Aether Reputation: 0
Hello first time posting, Here is a github link for the vmp source code as an alternative :
hXXps://github.com/Alukym/VMProtect-Source

If the above mega link is down posted by kurapica, i can always put a replacement with another mega link.

Last edited by Aether; 05-12-2023 at 23:17. Reason: If needs backup mega link
Reply With Quote
The Following User Says Thank You to Aether For This Useful Post:
sh3dow (05-13-2023)
  #3  
Old 05-13-2023, 03:50
FoxB FoxB is offline
VIP
 
Join Date: Jan 2002
Location: Earth...
Posts: 934
Rept. Given: 15
Rept. Rcvd 125 Times in 83 Posts
Thanks Given: 20
Thanks Rcvd at 675 Times in 278 Posts
FoxB Reputation: 100-199 FoxB Reputation: 100-199
src have not:
- ..\core\processors.cc
- ..\core\intel.cc
- Vmprotect.DDK part
Reply With Quote
The Following User Says Thank You to FoxB For This Useful Post:
niculaita (05-13-2023)
  #4  
Old 05-13-2023, 16:44
X0rby X0rby is offline
Friend
 
Join Date: May 2023
Location: https://forum.tuts4you.com/profile/133976-x0rby/
Posts: 4
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 10
Thanks Rcvd at 2 Times in 1 Post
X0rby Reputation: 0
anonfiles.com/d1D7M7q9z4/vmpsrc_zip
Reply With Quote
  #5  
Old 05-14-2023, 02:18
FoxB FoxB is offline
VIP
 
Join Date: Jan 2002
Location: Earth...
Posts: 934
Rept. Given: 15
Rept. Rcvd 125 Times in 83 Posts
Thanks Given: 20
Thanks Rcvd at 675 Times in 278 Posts
FoxB Reputation: 100-199 FoxB Reputation: 100-199
same as before. nothing new. also without cc-files
Reply With Quote
  #6  
Old 05-14-2023, 10:19
sh3dow sh3dow is offline
Family
 
Join Date: Oct 2014
Posts: 158
Rept. Given: 113
Rept. Rcvd 79 Times in 24 Posts
Thanks Given: 458
Thanks Rcvd at 202 Times in 75 Posts
sh3dow Reputation: 79
Cross-reference of every [#include] with every file in that git repo,
and these are the files that are missing from the leak after removing open source Libraries that were missing as well.

intel.cc
arm.cc
arm.h
processors.cc
gcc-demangle.cc
gcc-demangle.h
msvc-demangle.cc
msvc-demangle.h
dprint.c
dprint.h
def.h

The open source Libraries were
- pugixml C++ XML processing library
- PCRE (Perl-compatible regular expression) C library

Last edited by sh3dow; 05-14-2023 at 10:58. Reason: updated the list
Reply With Quote
The Following 4 Users Say Thank You to sh3dow For This Useful Post:
computerline (05-25-2023), MarcElBichon (05-14-2023), niculaita (05-14-2023), tonyweb (05-14-2023)
  #7  
Old 05-14-2023, 14:02
user1 user1 is offline
Family
 
Join Date: Sep 2012
Location: OUT
Posts: 1,041
Rept. Given: 547
Rept. Rcvd 120 Times in 67 Posts
Thanks Given: 695
Thanks Rcvd at 566 Times in 337 Posts
user1 Reputation: 41
original plain file is 200kb packed with vmprotect ultimate using SDK markers for virtualization makes file bigger 5x to 200x times depending complexity and used options.
no one can crack that, no human. I never seen any soft properly packed and SDK protected vmprotect cracked, there is not possible millions of virtual lines to debug I do not know any individual that fanatic.
Reply With Quote
The Following User Says Thank You to user1 For This Useful Post:
niculaita (05-14-2023)
  #8  
Old 05-14-2023, 22:09
Conquest Conquest is offline
Friend
 
Join Date: Jan 2013
Location: 0x484F4D45
Posts: 125
Rept. Given: 46
Rept. Rcvd 29 Times in 17 Posts
Thanks Given: 31
Thanks Rcvd at 60 Times in 29 Posts
Conquest Reputation: 29
Devirtualizing is Not a NP problem. Not all permutations yield executable code. So stop saying its impossible. Its just time consuming getting the patterns ( Check Code unvirtualizer). Problem with x86 is that the x86 instruction set have redundant instructions which makes it impossible to always restore the exact operand it might have used. Fortunately the il compiler leaves traces of original operands in virtualized code base.
Reply With Quote
The Following 2 Users Say Thank You to Conquest For This Useful Post:
b30wulf (05-15-2023), niculaita (05-15-2023)
  #9  
Old 05-14-2023, 23:28
bolo2002 bolo2002 is offline
VIP
 
Join Date: Apr 2002
Posts: 614
Rept. Given: 111
Rept. Rcvd 14 Times in 13 Posts
Thanks Given: 217
Thanks Rcvd at 238 Times in 152 Posts
bolo2002 Reputation: 14
Off topic:same with MSI leak keys,valid ones are not shared.
__________________
I like this forum!
Reply With Quote
  #10  
Old 05-15-2023, 00:19
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 1,066
Rept. Given: 332
Rept. Rcvd 223 Times in 115 Posts
Thanks Given: 234
Thanks Rcvd at 512 Times in 288 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Quote:
Originally Posted by user1 View Post
original plain file is 200kb packed with vmprotect ultimate using SDK markers for virtualization makes file bigger 5x to 200x times depending complexity and used options.
no one can crack that, no human. I never seen any soft properly packed and SDK protected vmprotect cracked, there is not possible millions of virtual lines to debug I do not know any individual that fanatic.
there was one guy very skilled and he spent lots of years to VMP R.E.
He was known as Vamit at wasm forum
Reply With Quote
The Following User Says Thank You to sendersu For This Useful Post:
niculaita (05-15-2023)
  #11  
Old 05-15-2023, 04:27
h4sh3m h4sh3m is offline
Friend
 
Join Date: Aug 2016
Location: RCE
Posts: 56
Rept. Given: 1
Rept. Rcvd 4 Times in 2 Posts
Thanks Given: 49
Thanks Rcvd at 81 Times in 35 Posts
h4sh3m Reputation: 4
Quote:
Originally Posted by user1 View Post
original plain file is 200kb packed with vmprotect ultimate using SDK markers for virtualization makes file bigger 5x to 200x times depending complexity and used options.
no one can crack that, no human. I never seen any soft properly packed and SDK protected vmprotect cracked, there is not possible millions of virtual lines to debug I do not know any individual that fanatic.
Do you mean something like "Denuvo" ?!
Reply With Quote
  #12  
Old 05-16-2023, 15:31
user1 user1 is offline
Family
 
Join Date: Sep 2012
Location: OUT
Posts: 1,041
Rept. Given: 547
Rept. Rcvd 120 Times in 67 Posts
Thanks Given: 695
Thanks Rcvd at 566 Times in 337 Posts
user1 Reputation: 41
size of packed amount of work huge task for a human I don't say impossible just close to it because of amount of work needed to be done.... just that. of course what a man made another one can break.
Reply With Quote
  #13  
Old 05-18-2023, 01:13
WhoCares's Avatar
WhoCares WhoCares is offline
who cares
 
Join Date: Jan 2002
Location: Here
Posts: 409
Rept. Given: 10
Rept. Rcvd 16 Times in 14 Posts
Thanks Given: 41
Thanks Rcvd at 155 Times in 61 Posts
WhoCares Reputation: 17
The guy who leaked it just wants to show that he has the sources? so he removed some files from it?
__________________
AKA Solomon/blowfish.
Reply With Quote
  #14  
Old 05-18-2023, 01:37
user1 user1 is offline
Family
 
Join Date: Sep 2012
Location: OUT
Posts: 1,041
Rept. Given: 547
Rept. Rcvd 120 Times in 67 Posts
Thanks Given: 695
Thanks Rcvd at 566 Times in 337 Posts
user1 Reputation: 41
did not had, incomplete. reasons unknown, but if parts missing show up then I m wrong.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On



All times are GMT +8. The time now is 12:54.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )