Login Register


vmprotect is dumb. everytime i see it, i shit myself lmao filter_list
Author
Message
vmprotect is dumb. everytime i see it, i shit myself lmao #1
why is it so ridiculously hard to reverse-engineer an app using vmp, i try like 50+ tools and deobfuscators but i just ended up with error messages and on a chinese website

vmp is good at what it is doing for sure, but everytime i have an app to crack and it uses vmp, i just uninstall the app and searches for a new app

does anyone have tools for reverse-engineering vmp?

- tried ollydbg, that chinese shit, hxd, universal extractor, MiTec EXE, CFF Explorer, ExeInfoPE (All Rippers)
(This post was last modified: 02-17-2020, 05:53 AM by miso.)
RIP the pizza king
[Image: 3.0]

all of my contact info is on my Github Profile

Reply

RE: vmprotect is dumb. everytime i see it, i shit myself lmao #2
REing VMProtect, can be an arduous task at the best of times.

Have you tried the OllyDbg plugin named "VMSweeper?".
[Image: AD83g1A.png]

Reply

RE: vmprotect is dumb. everytime i see it, i shit myself lmao #3
i've tried to get it but i cant find a download link that is still working

do you have a copy of the software or even a download link that works to get VMSweeper

thanks in advance ^D^
RIP the pizza king
[Image: 3.0]

all of my contact info is on my Github Profile

Reply

RE: vmprotect is dumb. everytime i see it, i shit myself lmao #4
VMProtect is a virtualization protector. It works by disassembling the bytecode of the target executable and compiling it into a proprietary, polymorphic bytecode which is executed in a custom interpreter at run-time. You need to work out the original bytecode from the vm bytecode table.

[+] 1 user Likes nihlix's post
Reply

RE: vmprotect is dumb. everytime i see it, i shit myself lmao #5
(03-28-2020, 12:58 AM)nihlix Wrote: VMProtect is a virtualization protector. It works by disassembling the bytecode of the target executable and compiling it into a proprietary, polymorphic bytecode which is executed in a custom interpreter at run-time. You need to work out the original bytecode from the vm bytecode table.
this is why i just stay with .NET-based apps lmao, but thanks for the clarification though ^^
RIP the pizza king
[Image: 3.0]

all of my contact info is on my Github Profile

Reply







Users browsing this thread: 1 Guest(s)