saweol / vwaad

IDA script for vmprotect Windows Api address decoder
51 stars 16 forks source link

update it for 7.5 #2

Open gurachan opened 3 years ago

gurachan commented 3 years ago

sorry if I break the class part.. since I put in one by one to debug where the error came from. you dint fully change all the new ida functions so this version got no class. you can re-added if you want.. also only dump script I update

you just have to change the

_t = ".text"     //LINE 18 //targetSeg
_s = ".vmp0"     //LINE 19 //segment

and load the dump.. then load the script

image

honestly it looks like it doesnt work in this version image image

but i do get some output from the script

image image image image

the sample exe is the cpu-z app ahaha and i vmprotect it xD with default settings..