Skip to content

chickenienRE/de4vmp

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Description

a fully static devirtualizer for vmp, works for versions 3.4, and early 3.5

Usage

  1. if target has anti-tamper, dump it via ks-dumper (https://github.com/EquiFox/KsDumper)
  2. demutate with demutation (https://github.com/xlfj5211/DeMutation)
  3. drag n drop into devirtualizer
  4. clean junk code with de4dot

Common errors

  • if demutatiton fails, anti-tamper is propably still present
  • if devirtualizer fails, its either new version or the file is corrupted

Disclaimer

  • I made it a long time ago, left no comments so don't ask me how it works, neither do I know
  • thanks to washi and rtn community