|
|
|
|
#1
11-10-2010, 00:05
|
|||
|
|||
|
It's ollydbg 1.10 plug-in. It can't help you with anti-debug or crc checks. All what you need is to break at any address near OEP or after OEP. Then choose "Analyze for all VM references" and paste values for all .text/.code sections scope and for VM. It will show you all possible VM references. After that you can choose any address in this table (table of reference results) and press "[Ctrl]+[Crey *]" on it and then F1 for decompile.
|
| The Following User Gave Reputation+1 to progopis For This Useful Post: | ||
besoeso (11-10-2010) | ||
|
#2
11-10-2010, 04:08
|
|||
|
|||
|
Well it should be cool, but it kinda crashes at 13% with vmprotect will try some others. In oreans it doesn't recognize a deobfuscated VM it seems. Will test some more.
EDIT: Other VMprotect seems to crash as well.. Testing late VMprotect here, unpacked and antidump fixed. Last edited by quosego; 11-10-2010 at 04:15.
|
 |
| Tags |
| codevirualizer, decompiler, vmprotect, vmsweeper |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Is there linux vm tool like vmprotect? | swlepus | General Discussion | 4 | 12-23-2011 10:07 |
Hybrid Mode
