wallds / novmpy Goto Github PK

View Code? Open in Web Editor NEW

369.0 14.0 67.0 4.91 MB

License: BSD 3-Clause "New" or "Revised" License

Python 100.00%

vmprotect devirtualization vtil python plugin

novmpy's People

Contributors

Stargazers

Watchers

Forkers

hzqst arryboom llkbkh kaganisildak phuong39 1amfine2333 y11en jgoga qazxsw1597532018 d34d633f iomeone crackercat idapluginproject kingking888 kungia09 losenineai alehacksp airahc crewcutbro htnhan cornercry1998 zhuhuibeishadiao wdnmd-rushb notify-bibi 365drm laicuacie yinzi71415 j0hnblk jdzjames gmh5225 acc0unt389 clayne mydvdf hackflame darkersquirrel xbl2022 phatdatpq ondreji hxzzy60 ckwindowsproject fiappy fengjixuchui ly937149473 elijahahianyo neusoftbaby wuyadie coders-vechai 5l1v3r1 lizhuowu easy-forks sionthanatos mymoses i1tao zackymony hiro420 mxtilx hkill sh4m2hwz tanglch lkheh mskky xucn heropanda zhiyu-zeng kakaok goblinbear1

novmpy's Issues

[hook_mem_unmapped]: 21 0xffa6971d 1 0
[hook_code] address: 0xFFA6971D size: 0xF1F1F1F1 what?
Traceback (most recent call last):
File "D:\tool/ida/plugins\novmpy\ui.py", line 17, in activate
vtil_graph.show_graph(ea)
File "D:\tool/ida/plugins\novmpy\views\vtil_graph.py", line 462, in show_graph
lifter.lift_il(None, VMState(current_handler=ea))
File "D:\tool/ida/plugins\novmpy\vm_lifter.py", line 92, in lift_il
assert parse_result
AssertionError

vtil.pyd&pyvtil.pyd

https://share.weiyun.com/OUr2efBz

Unable to cast Python instance to C++ type

Try to analyze dumped kernel driver, protected VMP.
Command "Search" works, and correctly detects vmp-routines.
But command "LetsGo" failed, and write this:

How to compile VTIL back to x86?

should I use VTIL-Compiler lib functions?

编译VITL-Python出现错误

环境: Python3.10.7 VS2022

D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(115,1): error C2678: 二进制“-”:
没有找到接受“const L”类型的左操作数的运算符(或没有可接受的转换) [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
          with
          [
              L=L_type
          ]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(115,1): message : 可能是“pybind1
1::detail::op_<pybind11::detail::op_sub,pybind11::detail::op_l,pybind11::detail::self_t,pybind11::detail::self_t> pybin
d11::detail::operator -(const pybind11::detail::self_t &,const pybind11::detail::self_t &)” [D:\CTF\Tools\Binary\IDAPlu
gins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(115,1): message : 尝试匹配参数列表“(c
onst L, const R)”时 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
          with
          [
              L=L_type
          ]
          and
          [
              R=R_type
          ]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(47): message : 查看对正在编译 的 类 模板
实例化“pybind11::detail::op_impl<pybind11::detail::op_sub,pybind11::detail::op_l,Base,L_type,R_type>”的引用 [D:\CTF\Tools\Bin
ary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1517): message : 查看对正在编译的函数 模板
 实例化“void pybind11::detail::op_<pybind11::detail::op_sub,pybind11::detail::op_l,pybind11::detail::self_t,pybind11::deta
il::self_t>::execute<pybind11::class_<vtil::symbolic::directive::instance>,>(Class &) const”的引用 [D:\CTF\Tools\Binary\ID
APlugins\VTIL-Python\build\VTIL-Python.vcxproj]
          with
          [
              Class=pybind11::class_<vtil::symbolic::directive::instance>
          ]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1518): message : 查看对正在编译的函数 模板
 实例化“void pybind11::detail::op_<pybind11::detail::op_sub,pybind11::detail::op_l,pybind11::detail::self_t,pybind11::deta
il::self_t>::execute<pybind11::class_<vtil::symbolic::directive::instance>,>(Class &) const”的引用 [D:\CTF\Tools\Binary\ID
APlugins\VTIL-Python\build\VTIL-Python.vcxproj]
          with
          [
              Class=pybind11::class_<vtil::symbolic::directive::instance>
          ]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\src\symex/directive.hpp(65): message : 查看对正在编译的函数 模板 实例化“pybind11::class_<vt
il::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def<pybind11::detail::op_sub
,pybind11::detail::op_l,pybind11::detail::self_t,pybind11::detail::self_t,>(const pybind11::detail::op_<pybind11::detai
l::op_sub,pybind11::detail::op_l,pybind11::detail::self_t,pybind11::detail::self_t> &)”的引用 [D:\CTF\Tools\Binary\IDAPlug
ins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\src\symex/directive.hpp(70): message : 查看对正在编译的函数 模板 实例化“pybind11::class_<vt
il::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def<pybind11::detail::op_sub
,pybind11::detail::op_l,pybind11::detail::self_t,pybind11::detail::self_t,>(const pybind11::detail::op_<pybind11::detai
l::op_sub,pybind11::detail::op_l,pybind11::detail::self_t,pybind11::detail::self_t> &)”的引用 [D:\CTF\Tools\Binary\IDAPlug
ins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(52,11): error C2672: “pybind1
1::class_<vtil::symbolic::directive::instance>::def”: 未找到匹配的重载函数 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL
-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1549,13): message : 可能是“pybind
11::class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(pybind11::d
etail::initimpl::pickle_factory<Args...> &&,const Extra &...)” [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-P
ython.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(52,11): message : "pybind11::
class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(pybind11::detai
l::initimpl::pickle_factory<Args...> &&,const Extra &...)": 无法从 "const char *" 推导出 "pybind11::detail::initimpl::pickle_
factory<Args...> &&" 的 模板 参数 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1549): message : 参见“pybind11::
class_<vtil::symbolic::directive::instance>::def”的声明 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxp
roj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(52,11): message : "pybind11::
class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(pybind11::detai
l::initimpl::pickle_factory<Args...> &&,const Extra &...)": 无法从 "const char *" 推导出 "pybind11::detail::initimpl::pickle_
factory<Args...> &&" 的 模板 参数 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1549): message : 参见“pybind11::
class_<vtil::symbolic::directive::instance>::def”的声明 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxp
roj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1543,13): message : 或    “pybi
nd11::class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(pybind11:
:detail::initimpl::factory<Args...> &&,const Extra &...)” [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python
.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(52,11): message : "pybind11::
class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(pybind11::detai
l::initimpl::factory<Args...> &&,const Extra &...)": 无法从 "const char *" 推导出 "pybind11::detail::initimpl::factory<Args..
.> &&" 的 模板 参数 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1543): message : 参见“pybind11::
class_<vtil::symbolic::directive::instance>::def”的声明 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxp
roj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(52,11): message : "pybind11::
class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(pybind11::detai
l::initimpl::factory<Args...> &&,const Extra &...)": 无法从 "const char *" 推导出 "pybind11::detail::initimpl::factory<Args..
.> &&" 的 模板 参数 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1543): message : 参见“pybind11::
class_<vtil::symbolic::directive::instance>::def”的声明 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxp
roj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1536,13): message : 或    “pybi
nd11::class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(const pyb
ind11::detail::initimpl::alias_constructor<Args...> &,const Extra &...)” [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\bu
ild\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(52,11): message : "pybind11::
class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(const pybind11:
:detail::initimpl::alias_constructor<Args...> &,const Extra &...)": 无法从 "const char *" 推导出 "const pybind11::detail::ini
timpl::alias_constructor<Args...> &" 的 模板 参数 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1536): message : 参见“pybind11::
class_<vtil::symbolic::directive::instance>::def”的声明 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxp
roj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(52,11): message : "pybind11::
class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(const pybind11:
:detail::initimpl::alias_constructor<Args...> &,const Extra &...)": 无法从 "const char *" 推导出 "const pybind11::detail::ini
timpl::alias_constructor<Args...> &" 的 模板 参数 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1536): message : 参见“pybind11::
class_<vtil::symbolic::directive::instance>::def”的声明 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxp
roj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1529,13): message : 或    “pybi
nd11::class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(const pyb
ind11::detail::initimpl::constructor<Args...> &,const Extra &...)” [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VT
IL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(52,11): message : "pybind11::
class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(const pybind11:
:detail::initimpl::constructor<Args...> &,const Extra &...)": 无法从 "const char *" 推导出 "const pybind11::detail::initimpl:
:constructor<Args...> &" 的 模板 参数 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1529): message : 参见“pybind11::
class_<vtil::symbolic::directive::instance>::def”的声明 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxp
roj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(52,11): message : "pybind11::
class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(const pybind11:
:detail::initimpl::constructor<Args...> &,const Extra &...)": 无法从 "const char *" 推导出 "const pybind11::detail::initimpl:
:constructor<Args...> &" 的 模板 参数 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1529): message : 参见“pybind11::
class_<vtil::symbolic::directive::instance>::def”的声明 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxp
roj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1517,13): message : 或    “pybi
nd11::class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(const pyb
ind11::detail::op_<id,ot,L,R> &,const Extra &...)” [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxpro
j]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(52,11): message : "pybind11::
class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(const pybind11:
:detail::op_<id,ot,L,R> &,const Extra &...)": 无法从 "const char *" 推导出 "const pybind11::detail::op_<id,ot,L,R> &" 的 模板 参数
 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1517): message : 参见“pybind11::
class_<vtil::symbolic::directive::instance>::def”的声明 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxp
roj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(52,11): message : "pybind11::
class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(const pybind11:
:detail::op_<id,ot,L,R> &,const Extra &...)": 无法从 "const char *" 推导出 "const pybind11::detail::op_<id,ot,L,R> &" 的 模板 参数
 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1517): message : 参见“pybind11::
class_<vtil::symbolic::directive::instance>::def”的声明 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxp
roj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1499,13): message : 或    “pybi
nd11::class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(const cha
r *,Func &&,const Extra &...)” [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(52,11): message : 未能使函数模板“pyb
ind11::class_<vtil::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def(const ch
ar *,Func &&,const Extra &...)”专用化 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1499): message : 参见“pybind11::
class_<vtil::symbolic::directive::instance>::def”的声明 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxp
roj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(47,31): message : 用下列模板参数: [D
:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(47,31): message : “Func=unkno
wn-type (__cdecl *)(const L &,const R &)” [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(47,31): message : “Extra={pyb
ind11::is_operator}” [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(117,1): error C2678: 二进制“*”:
没有找到接受“const L”类型的左操作数的运算符(或没有可接受的转换) [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
          with
          [
              L=L_type
          ]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(117,1): message : 可能是“pybind1
1::detail::op_<pybind11::detail::op_mul,pybind11::detail::op_l,pybind11::detail::self_t,pybind11::detail::self_t> pybin
d11::detail::operator *(const pybind11::detail::self_t &,const pybind11::detail::self_t &)” [D:\CTF\Tools\Binary\IDAPlu
gins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(117,1): message : 尝试匹配参数列表“(c
onst L, const R)”时 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
          with
          [
              L=L_type
          ]
          and
          [
              R=R_type
          ]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(47): message : 查看对正在编译 的 类 模板
实例化“pybind11::detail::op_impl<pybind11::detail::op_mul,pybind11::detail::op_l,Base,L_type,R_type>”的引用 [D:\CTF\Tools\Bin
ary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1517): message : 查看对正在编译的函数 模板
 实例化“void pybind11::detail::op_<pybind11::detail::op_mul,pybind11::detail::op_l,pybind11::detail::self_t,pybind11::deta
il::self_t>::execute<pybind11::class_<vtil::symbolic::directive::instance>,>(Class &) const”的引用 [D:\CTF\Tools\Binary\ID
APlugins\VTIL-Python\build\VTIL-Python.vcxproj]
          with
          [
              Class=pybind11::class_<vtil::symbolic::directive::instance>
          ]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/pybind11.h(1518): message : 查看对正在编译的函数 模板
 实例化“void pybind11::detail::op_<pybind11::detail::op_mul,pybind11::detail::op_l,pybind11::detail::self_t,pybind11::deta
il::self_t>::execute<pybind11::class_<vtil::symbolic::directive::instance>,>(Class &) const”的引用 [D:\CTF\Tools\Binary\ID
APlugins\VTIL-Python\build\VTIL-Python.vcxproj]
          with
          [
              Class=pybind11::class_<vtil::symbolic::directive::instance>
          ]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\src\symex/directive.hpp(69): message : 查看对正在编译的函数 模板 实例化“pybind11::class_<vt
il::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def<pybind11::detail::op_mul
,pybind11::detail::op_l,pybind11::detail::self_t,pybind11::detail::self_t,>(const pybind11::detail::op_<pybind11::detai
l::op_mul,pybind11::detail::op_l,pybind11::detail::self_t,pybind11::detail::self_t> &)”的引用 [D:\CTF\Tools\Binary\IDAPlug
ins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\src\symex/directive.hpp(70): message : 查看对正在编译的函数 模板 实例化“pybind11::class_<vt
il::symbolic::directive::instance> &pybind11::class_<vtil::symbolic::directive::instance>::def<pybind11::detail::op_mul
,pybind11::detail::op_l,pybind11::detail::self_t,pybind11::detail::self_t,>(const pybind11::detail::op_<pybind11::detai
l::op_mul,pybind11::detail::op_l,pybind11::detail::self_t,pybind11::detail::self_t> &)”的引用 [D:\CTF\Tools\Binary\IDAPlug
ins\VTIL-Python\build\VTIL-Python.vcxproj]
D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\external\pybind11\include\pybind11/operators.h(117,1): error C2088: “*”: 对于

struct 非法 [D:\CTF\Tools\Binary\IDAPlugins\VTIL-Python\build\VTIL-Python.vcxproj]
error: command 'D:\\Program Files\\Microsoft Visual Studio\\2022\\Community\\Common7\\IDE\\CommonExtensions\\Microsoft\\CMake\\CMake\\bin\\cmake.exe' failed with exit code 1

vtil generation error

When I use lets go for a vm entry, the generated vtil has error.

In the image above, the target address of the jmpq instruction is wrong.

I use vmattack to analyze this vm entry can get the correct result 0x141aaeffb instead of 0x41aaeffb00000000, this looks like some shift problem, I just touch these things, I don't know where the problem is.

By the way, I am Chinese, if possible can we use Chinese to communicate?

target bin: target.zip
vm entry: 0x1401EC7AC

AssertionError when clicking LetsGo

Whenever I click the LetsGo button, this error pops up:

Traceback (most recent call last):
  File "J:/DA Pro 7.6/ida76sp1/ida76sp1/plugins\novmpy\ui.py", line 17, in activate
    vtil_graph.show_graph(ea)
  File "J:IDA Pro 7.6/ida76sp1/ida76sp1/plugins\novmpy\views\vtil_graph.py", line 369, in show_graph
    lifter.lift_il(None, VMState(current_handler=ea))
  File "J:IDA Pro 7.6/ida76sp1/ida76sp1/plugins\novmpy\vm_lifter.py", line 93, in lift_il
    assert(vmstate != None)
AssertionError

Is there any way that this can be fixed? I don't know why this error is happening.

Compile Error

I have error while compiling: VTIL-Python/external/pybind11/include\pybind11/operators.h(154,1): error C2678
Can you upload compiled files on release section?

Error unknown 80 on Devirtualizing x64

Hello dear,

I compile and install to IDA7.6 and test on vmprotect v3.5 sample, this is log in IDA
ea: 0x1401a39cf
vmstate.ip: 140099645
0 140099645| pop_reg8 vm_r19q
......
-8 1400992D0| jmp
CC null
VJMP [(0x14009762b+qword[$sp#0x1400993b1?]#0x1400993b1?)]
0 14009762C| unknown 80
Traceback (most recent call last):
File "G:\Softwares/CrackTools/!Disassembler/IDA Pro 7.6/plugins\novmpy\ui.py", line 17, in activate
vtil_graph.show_graph(ea)
File "G:\Softwares/CrackTools/!Disassembler/IDA Pro 7.6/plugins\novmpy\views\vtil_graph.py", line 462, in show_graph
lifter.lift_il(None, VMState(current_handler=ea))
File "G:\Softwares/CrackTools/!Disassembler/IDA Pro 7.6/plugins\novmpy\vm_lifter.py", line 213, in lift_il
self.lift_il(block.fork(target), tmp_state2)
File "G:\Softwares/CrackTools/!Disassembler/IDA Pro 7.6/plugins\novmpy\vm_lifter.py", line 213, in lift_il
self.lift_il(block.fork(target), tmp_state2)
File "G:\Softwares/CrackTools/!Disassembler/IDA Pro 7.6/plugins\novmpy\vm_lifter.py", line 149, in lift_il
h.generator(i, block)
File "G:\Softwares/CrackTools/!Disassembler/IDA Pro 7.6/plugins\novmpy\handler.py", line 161, in generator
raise NotImplementedError(str(ins))
NotImplementedError: 14009762C| unknown 80

myEXE:
https://github.com/smrbi/vb6Proj/blob/main/testx64.vmp.7z

IDA LOG:
https://github.com/smrbi/vb6Proj/blob/main/IDALog.7z

Devirtualizeing question

Hi dear,

Please see this picture

what is mean or problem? "?UD"

IDA Crash when applying apply_all_profiled

IDA crashes when applying apply_all_profiled
Error: c0000005 in vtil.pyd

Seems error is around
( map.max_load_factor() * map.bucket_count() ) >= ( map.size() + 1 ) at VTIL-Python-dev-1\\external\\core\\VTIL-SymEx\\simplifier\\simplifier.cpp:351"

Error on x86 Compile

I try all ways i know to compile x86 version
even i install python 3.8 x32 with adding "'-A', 'Win32'" to cmake command in setup.py

in this case i have this errors:

VTIL-Python/external/pybind11/include\pybind11/operators.h(94,11): error C2672: 'pybind11::class_<vtil::symbolic::directive::instance>::def': no matching ove
rloaded function found

/VTIL-Python/external/pybind11/include\pybind11/operators.h(154,1): error C2678: binary '-': no operator found which takes a left-hand operand of type 'const
L' (or there is no acceptable conversion)

VTIL-Python/external/pybind11/include\pybind11/operators.h(156,1): error C2678: binary '*': no operator found which takes a left-hand operand of type 'const
L' (or there is no acceptable conversion)

Please help me to compiling for 32bit target.
thank you.

是否可以添加重编译

希望添加NoVMP的重编译功能编译回机器码

更新VTIL-Python的pybind11以支持Python3.11

pybind/pybind11#3694

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.