In Newer version of VMProtect, vmpsoft provide new protection called "Resource Protection" in Protector GUI.
via this protection, vmprotect split the resource from Resource Directory, and encrypt them and convert to its own format...
in runtime it will hook the Needed API...and Let Windows Find Them...
common method used for bypassing this protection is Use Allocated Memory in Runtime...and also restore the Hook before OEP in unpacked file...but i call this method UnClean Unpacking...
for example maybe you need edit a resource in EXE file. but you cant do it in this method of unpacking...
and now VMProtect Resource Fixer give you ability to Find,Dump,and fix the resource in protected vmp exe...
Just Give it a protected exe...it use AutoScan Method (Experimental Method) for lookup for Resource Table and Dump it...
anyway in some target...you need Give a DWORD to my tool for for find & dump resource (shown in Video 4).
Current Version: v0.18 Alpha
SnD组织成员写的VMProtect资源修复，转存工具！
发表于 2013-1-29 22:06
|
发表于 2013-2-3 23:11
发表于 2013-2-3 23:20
VMP，工具不错
