طريقة تساعد في تغلب على vm packing type

[samoray]

هناك عدة مبرمجين استغلو LLVM  Framework و طورو decompilers  لغرض ترجمة الكود الى بيتكود ومن ثم الى سورس كود
كما ذكر الأخ zixcool عن scsema فيوجد decompiler أخر و غني عنه -لكن كل واحد واختياره-RetDec - A Retargetable Machine-Code Decompiler

[align=left][b][size=large]Features:[/size][/b][/align]
[list]
[*]Static Analysis of executable files with detailed information.
[*]Compiler and packer detection.
[*]Loading and instruction decoding.
[*]Signature-based removal of statically linked library code.
[*]Extraction and utilization of Debugging information (DWARF, PDB).
[*]Reconstruction of instruction idioms.
[*]Detection and reconstruction of C++ class hierarchies (RTTI, vtables).
[*]Demangling of symbols from C++ binaries (GCC, MSVC, Borland).
[*]Reconstruction of functions, types, and high-level constructs.
[*]Integrated disassembler.
[*]Output in two high-level languages: C and a Python-like language.
[*]Generation of call graphs, control-flow graphs, and various statistics.
[/list]
[align=left] [/align]

Plain text

تحديد الكل

[Cyperior]

RetDec يمكن استخدامه مع Radare2