Tai7sy / NoVmp
A static devirtualizer for VMProtect x64 3.x. powered by VTIL.
☆21Updated 2 years ago
Alternatives and similar repositories for NoVmp:
Users that are interested in NoVmp are comparing it to the libraries listed below
- ☆82Updated 4 years ago
- ☆96Updated 2 years ago
- 跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨 平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…☆65Updated last year
- ollvm de-obfuscator☆59Updated 3 years ago
- A dynamic VMP dumper and import fixer, powered by VTIL.☆41Updated 4 years ago
- ☆31Updated 3 years ago
- A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).☆71Updated 3 years ago
- Intel Virtualization Technology demo☆65Updated 8 years ago
- VMProtectTest☆37Updated 2 years ago
- ☆80Updated 2 years ago
- 轻量级自动分析病毒程序调用上下文、游戏反调试实现技术平台☆99Updated 4 years ago
- a plugin for ida of version 7.2 to help know F5 window codes better☆54Updated 5 years ago
- Automatically exported from code.google.com/p/wskudp☆43Updated 9 years ago
- ☆45Updated 6 years ago
- 使用vt进行无痕hook,支持r3☆53Updated 6 years ago
- Win7内核私有符号结构转储☆67Updated 3 years ago
- FuckXC3☆89Updated 6 years ago
- fix vmprotect import function used unicorn-engine.☆92Updated last year
- ☆110Updated 5 years ago
- ☆94Updated 7 years ago
- VMProtect analysis script☆52Updated 4 years ago
- vmp2.x devirtualization☆68Updated 3 months ago
- the basic version of the ring0 physical memory read/write tool☆89Updated 5 years ago
- 可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。☆107Updated 2 years ago
- An Ark tool project,run on Win7 x86/x64☆113Updated 7 years ago
- IDA Pro plugin AntiXorstr☆109Updated last week
- a frame of amd-v svm nest☆53Updated 4 years ago
- Quick check of NT kernel exported&unexported functions/global variable offset NT内核导出以及未导出函数+全局变量偏移速查☆93Updated last year
- ☆123Updated 4 years ago
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆75Updated 3 years ago