+- Sinisterly (https://sinister.ly)
+-- Forum: Computers (https://sinister.ly/Forum-Computers)
+--- Forum: Software & Programs (https://sinister.ly/Forum-Software-Programs)
+--- Thread: vmprotect is dumb. everytime i see it, i shit myself lmao (/Thread-vmprotect-is-dumb-everytime-i-see-it-i-shit-myself-lmao)
vmprotect is dumb. everytime i see it, i shit myself lmao - miso - 02-17-2020
why is it so ridiculously hard to reverse-engineer an app using vmp, i try like 50+ tools and deobfuscators but i just ended up with error messages and on a chinese website
vmp is good at what it is doing for sure, but everytime i have an app to crack and it uses vmp, i just uninstall the app and searches for a new app
does anyone have tools for reverse-engineering vmp?
- tried ollydbg, that chinese shit, hxd, universal extractor, MiTec EXE, CFF Explorer, ExeInfoPE (All Rippers)
RE: vmprotect is dumb. everytime i see it, i shit myself lmao - mothered - 02-17-2020
REing VMProtect, can be an arduous task at the best of times.
Have you tried the OllyDbg plugin named "VMSweeper?".
RE: vmprotect is dumb. everytime i see it, i shit myself lmao - miso - 02-17-2020
i've tried to get it but i cant find a download link that is still working
do you have a copy of the software or even a download link that works to get VMSweeper
thanks in advance ^D^
RE: vmprotect is dumb. everytime i see it, i shit myself lmao - nihlix - 03-28-2020
VMProtect is a virtualization protector. It works by disassembling the bytecode of the target executable and compiling it into a proprietary, polymorphic bytecode which is executed in a custom interpreter at run-time. You need to work out the original bytecode from the vm bytecode table.
RE: vmprotect is dumb. everytime i see it, i shit myself lmao - miso - 03-28-2020
(03-28-2020, 12:58 AM)nihlix Wrote: VMProtect is a virtualization protector. It works by disassembling the bytecode of the target executable and compiling it into a proprietary, polymorphic bytecode which is executed in a custom interpreter at run-time. You need to work out the original bytecode from the vm bytecode table.this is why i just stay with .NET-based apps lmao, but thanks for the clarification though ^^