Leaked VMProtect sources

[alorent]

Holly cow, "intel.cc" is already encrypted! What a spaghetti code! 😅

[jackyjask]

are we still missing arm.cc ?...

Edited December 8, 2023 by jackyjask

[BlackHat]

20 hours ago, kao said:

@RADIOX: I don't have access to Baidu, so I can't check that. Based on the timing, I guess it might be the same.

I can access baidu...

downloaded from baidu and uploaded -- aHR0cHM6Ly93b3JrdXBsb2FkLmNvbS9maWxlLzJhQlFxbmtITW5j
 

[kao]

1 hour ago, jackyjask said:

are we still missing arm.cc ?...

I don't think so. "arm.cc" is only referenced by a project "test1.vcxproj" which seems to be a simple unit test. 

 

2 minutes ago, BlackHat said:

downloaded from baidu and uploaded

Yes, that archive contains the same files as the github repo.

Edited December 8, 2023 by kao

[jackyjask]

Good catch

it means VMP is not capable (yet?) of protecting ARM?

[boot]

Some files are still missing, but these do not affect compilation...

Missing: arm.cc, arm.h, gcc-demangle.cc, gcc-demangle.h, msvc-demangle.cc, msvc-demangle.h, dprint.c, dprint.h, def.h

[Sean Park - Lovejoy]

19 minutes ago, boot said:

Some files are still missing, but these do not affect compilation...

Missing: arm.cc, arm.h, gcc-demangle.cc, gcc-demangle.h, msvc-demangle.cc, msvc-demangle.h, dprint.c, dprint.h, def.h

@boot why is the vmprotect's version that you built  of being "VMProtect Ultimate v 1.0.0" ?

[boot]

54 minutes ago, windowbase said:

why is the vmprotect's version that you built  of being "VMProtect Ultimate v 1.0.0" ?

These seem to be related to some *.h files generated after running "res. bat" and "version. bat" scripts...
The actual version should be [3.5.x~3.6.x).

[Sean Park - Lovejoy]

25 minutes ago, boot said:

These seem to be related to some *.h files generated after running "res. bat" and "version. bat" scripts...
The actual version should be [3.5.x~3.6.x).

Quote

These seem to be related to some *.h files generated after running "res. bat" and "version. bat" scripts...
The actual version should be [3.5.x~3.6.x).

Thanks for the comment.

Regards.

sean.

[Sean Park - Lovejoy]

On 12/14/2023 at 4:07 AM, boot said:

Some files are still missing, but these do not affect compilation...

Missing: arm.cc, arm.h, gcc-demangle.cc, gcc-demangle.h, msvc-demangle.cc, msvc-demangle.h, dprint.c, dprint.h, def.h

@boot Hey, @boot. I cannot compile this. any suggestions?

 

Regards.

sean.

Edited October 16 by The Binary Expert

[jackyjask]

the answer is in the error text itself

 

[Sean Park - Lovejoy]

2 minutes ago, jackyjask said:

the answer is in the error text itself

 

@jackyjask How should I set to refer to .Net v4.8 in the VS 2022?

The property window shows me that it has .net v4.8.

 

Regards.

sean.

[jackyjask]

looks good,

do yo have have those as well?

[Sean Park - Lovejoy]

18 minutes ago, jackyjask said:

looks good,

do yo have have those as well?

@jackyjask Yes.

 

Regards.

sean.

[jackyjask]

OK, maybe this is some tricky issue by MS VS..

here are some advanced tips

[Sean Park - Lovejoy]

1 hour ago, jackyjask said:

OK, maybe this is some tricky issue by MS VS..

here are some advanced tips

@jackyjask Your tip solved my issue. Many thanks.

Regards.

sean.

[jackyjask]

@The Binary Expert have you seen that this .net project has lots of FIXME and TODOs?

also lots of .net code is marked by comments like

// Token: 0x06000309 RID: 777 RVA: 0x00014920 File Offset: 0x00012B20

 

I guess it is not stolen code, but somehow was decompiled from binaries. I"ve have seen these types of comments in .net decompilers before

what do you think?

 

[Sean Park - Lovejoy]

2 hours ago, jackyjask said:

@The Binary Expert have you seen that this .net project has lots of FIXME and TODOs?

also lots of .net code is marked by comments like

// Token: 0x06000309 RID: 777 RVA: 0x00014920 File Offset: 0x00012B20

 

I guess it is not stolen code, but somehow was decompiled from binaries. I"ve have seen these types of comments in .net decompilers before

what do you think?

 

@jackyjask Which source code repository do I have to use to build the binaries?

I have not yet got them. any help is welcome.

Regards.

sean.

[jackyjask]

tell me what repo have you used, also in this thread some info was published

I presume you are done with C# projects in the VMP VS Solution, right?

what is the next issue you are hitting in

[Sean Park - Lovejoy]

39 minutes ago, jackyjask said:

tell me what repo have you used, also in this thread some info was published

I presume you are done with C# projects in the VMP VS Solution, right?

what is the next issue you are hitting in

@jackyjask I used this repository.

And this.

https://t.me/reverse_engineerosis1/101

I had the problem in the custom build process of the core project. I did not get the core.lib.

and yet had the .net v4.8 reference issues.

Regards.

sean.

[jackyjask]

14 hours ago, The Binary Expert said:

I had the problem in the custom build process of the core project. I did not get the core.lib.

details?

14 hours ago, The Binary Expert said:

and yet had the .net v4.8 reference issues.

why is that? you said you managed to fix it already?...

[Sean Park - Lovejoy]

2 minutes ago, jackyjask said:

details?

why is that? you said you managed to fix it already?...

@jackyjask At the first hand, what repository should I use to build them successfully?

Regards.

sean.

[jackyjask]

as for my knowledge, there is no such

you have to do it by hands for your env (VS/etc)