Tai7sy / NoVmpLinks
A static devirtualizer for VMProtect x64 3.x. powered by VTIL.
☆22Updated 2 years ago
Alternatives and similar repositories for NoVmp
Users that are interested in NoVmp are comparing it to the libraries listed below
Sorting:
- ☆81Updated 4 years ago
- ollvm de-obfuscator☆59Updated 3 years ago
- ☆99Updated 3 years ago
- 跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化 支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…☆67Updated last year
- A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).☆73Updated 3 years ago
- a plugin for ida of version 7.2 to help know F5 window codes better☆54Updated 5 years ago
- ☆31Updated 4 years ago
- Intel Virtualization Technology demo☆66Updated 8 years ago
- 轻量级自动分析病毒程序调用上下文、游戏反调试实现技术平台☆98Updated 4 years ago
- An IDA pro plugin to display user-added comments in disassembly and pseudocode views.☆84Updated last year
- D-810 is an IDA Pro plugin which can be used to deobfuscate code at decompilation time by modifying IDA Pro microcode.☆51Updated 3 years ago
- A dynamic VMP dumper and import fixer, powered by VTIL.☆42Updated 4 years ago
- 使用 Intel 虚拟化特性实现应用层HOOK☆61Updated 3 months ago
- 鹅城的百姓不需要有青天大老爷,于是黄四郎就出手干掉了很多好县长。☆27Updated last year
- ☆80Updated 3 years ago
- ☆110Updated 5 years ago
- ☆45Updated 6 years ago
- Win7内核私有符号结构转储☆67Updated 3 years ago
- vmp2.x devirtualization☆74Updated 6 months ago
- VMProtect analysis script☆55Updated 5 years ago
- fix vmprotect import function used unicorn-engine.☆91Updated 2 years ago
- If you are cracking a mfc program, you may find this useful.☆70Updated 11 years ago
- FuckXC3☆90Updated 7 years ago
- ida pdb plugin with enhance and bugfix☆113Updated 2 months ago
- VMProtect OD Plugin☆95Updated 9 years ago
- PinVMP:虚拟化代码辅助分析工具☆151Updated 7 years ago
- use python script to fix vmp dump api in ida☆118Updated 4 years ago
- IDA Pro plugin AntiXorstr☆134Updated 3 months ago
- Vmp1.21加壳机分析笔记☆41Updated 4 years ago
- ScyllaHide for IDA7.5; ScyllaHide IDA7.5; It is a really niccccccce anti-anti-debug tool☆202Updated 4 years ago