Recently we have received many complaints from users about site-wide blocking of their own and blocking of their own activities please go to the settings off state, please visit： https://githubmemory.com/settings/account ，20 minutes to take effect。

0

Watch

0

Star

0

Fork

0

Issue

fix vmp3.x import function used unicorn-engine.

0

win18216001

win18216001 bin

pushedAt 1 year ago

win18216001/Vm2Import

Vm2Import

fix vmprotect import function used unicorn-engine.

it can repair functions such as call [module.function] or jmp [module.function] that are statically imported by the VM.

Use

copy to x64dbg


x64dbg\release\x32\plugins\unicorn.dll

x64dbg\release\x32\plugins\Vm2Import.dp32


x64dbg\release\x64\plugins\unicorn.dll

x64dbg\release\x64\plugins\Vm2Import.dp64

select "VM_Start" call vmp0.xxxxxxxx, right click menu "Vm2Import"->"Fix Import Call Address"

repair.

original sample:

ucloud ads