Jump to content
Tuts 4 You

Leaked VMProtect sources


kao

Recommended Posts

Posted

Holly cow, "intel.cc" is already encrypted! What a spaghetti code! ðŸ˜…

Posted (edited)

are we still missing arm.cc ?...

Edited by jackyjask
Posted
  On 12/7/2023 at 8:09 PM, kao said:

@RADIOX: I don't have access to Baidu, so I can't check that. Based on the timing, I guess it might be the same.

Expand  

I can access baidu...

downloaded from baidu and uploaded -- aHR0cHM6Ly93b3JrdXBsb2FkLmNvbS9maWxlLzJhQlFxbmtITW5j
 

  • Thanks 1
Posted (edited)
  On 12/8/2023 at 2:58 PM, jackyjask said:

are we still missing arm.cc ?...

Expand  

I don't think so. "arm.cc" is only referenced by a project "test1.vcxproj" which seems to be a simple unit test. 

 

  On 12/8/2023 at 4:43 PM, BlackHat said:

downloaded from baidu and uploaded

Expand  

Yes, that archive contains the same files as the github repo.

Edited by kao
Posted

Good catch

it means VMP is not capable (yet?) of protecting ARM?

Posted

Some files are still missing, but these do not affect compilation...

Missing: arm.cc, arm.h, gcc-demangle.cc, gcc-demangle.h, msvc-demangle.cc, msvc-demangle.h, dprint.c, dprint.h, def.h

2023-12-14_030653.jpg.c32bbaf2ea0810c8b9007da32ae8704a.jpg

  • Like 1
Posted
  On 12/13/2023 at 7:07 PM, boot said:

Some files are still missing, but these do not affect compilation...

Missing: arm.cc, arm.h, gcc-demangle.cc, gcc-demangle.h, msvc-demangle.cc, msvc-demangle.h, dprint.c, dprint.h, def.h

2023-12-14_030653.jpg.c32bbaf2ea0810c8b9007da32ae8704a.jpg

Expand  

@boot why is the vmprotect's version that you built  of being "VMProtect Ultimate v 1.0.0" ?

  • Like 1
Posted
  On 12/13/2023 at 7:29 PM, windowbase said:

why is the vmprotect's version that you built  of being "VMProtect Ultimate v 1.0.0" ?

Expand  

These seem to be related to some *.h files generated after running "res. bat" and "version. bat" scripts...
The actual version should be [3.5.x~3.6.x).

2023-12-14_042153.jpg.b83498c0443de79a09299244734953e4.jpg

  • Like 1
Posted
  On 12/13/2023 at 8:25 PM, boot said:

These seem to be related to some *.h files generated after running "res. bat" and "version. bat" scripts...
The actual version should be [3.5.x~3.6.x).

2023-12-14_042153.jpg.b83498c0443de79a09299244734953e4.jpg

Expand  
  Quote

These seem to be related to some *.h files generated after running "res. bat" and "version. bat" scripts...
The actual version should be [3.5.x~3.6.x).

Expand  

Thanks for the comment.

Regards.

sean.

  • Like 2
  • 10 months later...
Posted (edited)
  On 12/13/2023 at 7:07 PM, boot said:

Some files are still missing, but these do not affect compilation...

Missing: arm.cc, arm.h, gcc-demangle.cc, gcc-demangle.h, msvc-demangle.cc, msvc-demangle.h, dprint.c, dprint.h, def.h

2023-12-14_030653.jpg.c32bbaf2ea0810c8b9007da32ae8704a.jpg

Expand  

@boot Hey, @boot. I cannot compile this. any suggestions?

 

screenshot-8.png

Regards.

sean.

Edited by The Binary Expert
  • Like 1
Posted

the answer is in the error text itself

 

image.png.7aad0ae7256e3810241bd61b26f1e8e2.png

  • Confused 1
Posted
  On 10/16/2024 at 11:32 AM, jackyjask said:

the answer is in the error text itself

 

image.png.7aad0ae7256e3810241bd61b26f1e8e2.png

Expand  

@jackyjask How should I set to refer to .Net v4.8 in the VS 2022?

The property window shows me that it has .net v4.8.

 

screenshot-8.png

Regards.

sean.

  • Like 1
Posted

looks good,

do yo have have those as well?

image.png.95a11fcdc6d0480a58d81848b779c08e.png

  • Sad 1
Posted
  On 10/16/2024 at 12:04 PM, jackyjask said:

looks good,

do yo have have those as well?

image.png.95a11fcdc6d0480a58d81848b779c08e.png

Expand  

@jackyjask Yes.

 

screenshot-10.png

Regards.

sean.

  • Like 1
Posted

OK, maybe this is some tricky issue by MS VS..

here are some advanced tips

  • Thanks 1
Posted
  On 10/16/2024 at 1:07 PM, jackyjask said:

OK, maybe this is some tricky issue by MS VS..

here are some advanced tips

Expand  

@jackyjask Your tip solved my issue. Many thanks.

Regards.

sean.

  • Like 2
Posted

@The Binary Expert have you seen that this .net project has lots of FIXME and TODOs?

also lots of .net code is marked by comments like

// Token: 0x06000309 RID: 777 RVA: 0x00014920 File Offset: 0x00012B20

 

I guess it is not stolen code, but somehow was decompiled from binaries. I"ve have seen these types of comments in .net decompilers before

what do you think?

 

  • Like 1
Posted
  On 10/16/2024 at 4:04 PM, jackyjask said:

@The Binary Expert have you seen that this .net project has lots of FIXME and TODOs?

also lots of .net code is marked by comments like

// Token: 0x06000309 RID: 777 RVA: 0x00014920 File Offset: 0x00012B20

 

I guess it is not stolen code, but somehow was decompiled from binaries. I"ve have seen these types of comments in .net decompilers before

what do you think?

 

Expand  

@jackyjask Which source code repository do I have to use to build the binaries?

I have not yet got them. any help is welcome.

Regards.

sean.

  • Like 1
Posted

tell me what repo have you used, also in this thread some info was published

I presume you are done with C# projects in the VMP VS Solution, right?

what is the next issue you are hitting in

  • Like 1
Posted
  On 10/16/2024 at 7:45 PM, jackyjask said:

tell me what repo have you used, also in this thread some info was published

I presume you are done with C# projects in the VMP VS Solution, right?

what is the next issue you are hitting in

Expand  

@jackyjask I used this repository.

And this.

https://t.me/reverse_engineerosis1/101

I had the problem in the custom build process of the core project. I did not get the core.lib.

and yet had the .net v4.8 reference issues.

Regards.

sean.

  • Like 1
Posted
  On 10/16/2024 at 8:31 PM, The Binary Expert said:

I had the problem in the custom build process of the core project. I did not get the core.lib.

Expand  

details?

  On 10/16/2024 at 8:31 PM, The Binary Expert said:

and yet had the .net v4.8 reference issues.

Expand  

why is that? you said you managed to fix it already?...

  • Like 1
Posted
  On 10/17/2024 at 10:58 AM, jackyjask said:

details?

why is that? you said you managed to fix it already?...

Expand  

@jackyjask At the first hand, what repository should I use to build them successfully?

Regards.

sean.

  • Like 1
Posted

as for my knowledge, there is no such

you have to do it by hands for your env (VS/etc)

  • Like 1

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...