风吹屁屁凉 发表于 2024-10-8 11:26

de4vmp - VMProtect .NET unvirtualizer

Description
===========

a fully static devirtualizer for vmp, works for versions 3.4, and early 3.5

Usage
===========

1. if target has anti-tamper, dump it via ks-dumper (https://github.com/EquiFox/KsDumper)
2. demutate with demutation (https://github.com/xlfj5211/DeMutation)
3. drag n drop into devirtualizer
4. clean junk code with de4dot

Common errors
===========

* if demutatiton fails, anti-tamper is propably still present
* if devirtualizer fails, its either new version or the file is corrupted

Disclaimer
===========

* I made it a long time ago, left no comments so don't ask me how it works, neither do I know
* thanks to washi and rtn community

https://github.com/chickenienRE/de4vmp

de4vmp-master_Original src:
https://workupload.com/file/UXaYrZA7ZUN
Compiled exe: x86/x64:
https://workupload.com/file/FN5xS5aF638

Required:
https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.8/7.0.8.md

ly871108 发表于 2024-10-8 11:30

感谢分享……

lyliucn 发表于 2024-10-8 16:29

感谢分享!!!

sony197901 发表于 2024-10-9 09:35

谢谢分享!

hbfp 发表于 2024-10-9 20:01

收藏,谢谢

cenfeng83 发表于 2024-10-10 23:50

de4vmp - VMProtect .NET unvirtualizer

Nianx 发表于 2024-10-11 09:01

感谢大佬,这个也收藏掉了,谢谢分享{:1_899:}

liuyilin999 发表于 2024-10-11 12:47

这个区虚拟化不会用,生不成文件,老大能否指点一下。谢谢

wdb364778978 发表于 2024-10-12 11:57

感谢分享!!!!!

HAINING 发表于 2024-10-12 22:07

看看这个咋样,谢谢
页: [1] 2
查看完整版本: de4vmp - VMProtect .NET unvirtualizer