Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

X86 support #5

Closed
dpvdberg opened this issue Sep 7, 2020 · 1 comment
Closed

X86 support #5

dpvdberg opened this issue Sep 7, 2020 · 1 comment

Comments

@dpvdberg
Copy link

dpvdberg commented Sep 7, 2020

What changes would have to be made in order to devirtualize X86 executables?

@0xnobody
Copy link
Owner

0xnobody commented Sep 7, 2020

Hello.
This project was not made for devirtualization. For that, you can refer to my other project, VMPAttack, which attempts to lift virtualized VMP methods to VTIL and optimize them, producing devirtualized results.
If you indeed mean extending VMPDump's functionality to x86, I had decided not to support it as it is a rather archaic architecture, which is rarely supported nowadays. However, from my basic analysis of x86 VMP executables, the logic flow is exactly the same and just involves x86 registers and processor features instead of x64 ones, so porting should be relatively easy.

@0xnobody 0xnobody closed this as completed Sep 7, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants