Jump to content
Tuts 4 You

[unpackme] VMProtect 2.09 UnpackMe


smallyou93

Recommended Posts

forward from http://www.52pojie.c...102581-1-1.html which is protected by ximo

Options:

- Memory Protection

- Import Protection

- Resource Protection

- Anti Debugger

- OEP Mutation + Virtualization

- Using Vmprotect SDK

"Resource Protection" is a new protection option which is start appearing on the version 2.08, It is really difficult to unpack because of this protection.

UnPackMe.rar

Edited by smallyou93
Link to comment
Share on other sites

Teddy Rogers

Is this a genuine unpackme? Also your link does not work and you have not using the correct title format...

Ted.

Link to comment
Share on other sites

Teddy Rogers

The [unpackme] tag has been added to your topic title.

Please remember to follow and adhere to the topic title format - thankyou!

[This is an automated reply]

  • Like 1
Link to comment
Share on other sites

The [unpackme] tag has been added to your topic title.

Please remember to follow and adhere to the topic title format - thankyou!

[This is an automated reply]

I will follow it on next time, Thanks.

Is this a genuine unpackme? Also your link does not work and you have not using the correct title format...

Ted.

It is a genuine unpackme

Moreover, i am so sorry that I have forgotten to attach the UnPackMe file.

Best Regards.

Edited by smallyou93
Link to comment
Share on other sites

What is "genuine unpackme"?

For me, protected with "licensed" packer/protector and coded unpackme for it.

Edited by PeP
  • Like 1
Link to comment
Share on other sites

I cannot run it on my OS unless it is debugged by OllyDBG(1.10).

By the way, great try, and I look forward the tutorial which about your method!

Edited by smallyou93
Link to comment
Share on other sites

in my pc run in olly 1.1 with strong od, ollyscript and starting in system entrypoint...as lcf was shared in old time

smile.png im was dumped, rebuilded iat by the calc , but not know the integration of resource-.and not know if are good the oep by "00401C40"

well is a good challenge by the vmprotect unpackers.. smile.png

iat is almost done..but strange..the theme of resources not use hook , but not listed in resources..

2 hooks in ntdll... well,..historys

BR, Apuromafo

Edited by Apuromafo
Link to comment
Share on other sites

  • 4 months later...
  • 2 weeks later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...