VMProtect Software » Forum

Code: Select all

			for i = 1, exports:count() do
				if exports:item(i):address() == fn:address() then
					bprint("And removing from exports")
					exports:delete(i)
					break
				end
			end

Code: Select all

#include <string.h>
#include <stdio.h>
#include <dlfcn.h>
#include <stdlib.h>
#include <stdint.h>

int main(int argc, char* argv[]) {
	char* libname = argc >= 2 ? argv[1] : "repro.so";
	char* action = argc >= 3 ? argv[2] : "";
	printf("Loading library %s\n", libname);
	void* lib = dlopen(libname, RTLD_NOW);
	if (!lib) {
		printf("Failed to load lib: %s\n", dlerror());
		return 1;
	}
	printf("Getting export\n");
	void* (*do_the_thing)(char*) = dlsym(lib, "do_the_thing");
	if (!do_the_thing) {
		printf("Failed to find symbol: %s\n", dlerror());
		return 1;
	}
	if (strcmp(action, "activate") == 0) {
		if (argc < 4) {
			printf("Usage: [lib] activate [code]");
			return 1;
		}
		char* code = argv[3];
		char* req = malloc(1 + strlen(code) + 1);
		req[0] = 4;
		strcpy(req + 1, code);
		printf("Activating with code \"%s\"\n", code);
		uint16_t* status = do_the_thing(req);
		if (status == NULL || *status != 0) {
			printf("Activation failed with status %x\n", *status);
			return 1;
		}
	} else if (strcmp(action, "call_locked") == 0) {
		char req[1];
		req[0] = 13;
		printf("Calling locked function\n");
		uint16_t* status = do_the_thing(req);
	} else {
		printf("Unknown action\n");
		return 1;
	}
	printf("Success\n");
	return 0;
}

Code: Select all

			bprint("And queuing for export removal")
			
			local export = file:exports():itemByAddress(fn:address())
			if (export) then
				bprint("Deleting export " .. export:name() .. " (" .. address:tostring() .. ")")
				export:destroy()
			end
			
			deent()

Code: Select all

	for i = exports:count(), 1, -1 do
		local export = exports:item(i)
		local address = export:address();
		
		if tableHas(toDelete, address) then
			bprint("Deleting export " .. export:name() .. " (" .. address:tostring() .. ")")
			exports:delete(i)
		end
	end

Code: Select all

	for _, address in ipairs(toDelete) do
		local export = exports:itemByAddress(address)
		if export then
			bprint("Deleting export " .. export:name() .. " (" .. address:tostring() .. ")")
			export:destroy()
		end
	end

Code: Select all

К сожалению в реальном коде это работает несколько иначе

Code: Select all

Он у вас просто неправильно работал и все.

Code: Select all

	for i = 1, exports:count() do
		local export = exports:item(i)
		local address = export:address();
		
		if tableHas(toDelete, address) then
			bprint("Deleting export " .. export:name() .. " (" .. address:tostring() .. ")")
			exports:delete(i)
		end
	end

Code: Select all

.text:000000000007DDC0                 public do_the_thing
.text:000000000007DDC0 do_the_thing    proc near               ; DATA XREF: LOAD:00000000000007F8↑o
.text:000000000007DDC0 ; __unwind {
.text:000000000007DDC0                 jmp     cs:vmprotect_ultra_do_the_thing_inner_186237384678405675810701436432396487933_ptr
.text:000000000007DDC0 ; } // starts at 7DDC0
.text:000000000007DDC0 do_the_thing    endp

Code: Select all

local rustc_demangle_lib = vmprotect.openLib("/path/to/librustc_demangle.so")
if not rustc_demangle_lib then
	error("failed to open librustc_demangle")
end
local rustc_demangle = rustc_demangle_lib:getFunction("rustc_demangle", "int", "string", "pointer", "size_t")

local c_lib = vmprotect.openLib("/path/to/libc.so.6")
if not c_lib then
	error("failed to open libc")
end
local malloc = c_lib:getFunction("malloc", "pointer", "size_t")
local free = c_lib:getFunction("malloc", "void", "pointer")
local strdup = c_lib:getFunction("strdup", "string", "pointer")

function demangle(identifier)
	local demangle_buf = malloc(4096)
	local res_code = rustc_demangle(identifier, demangle_buf, 4096)
	local res = nil
	if res_code == 0 then
		-- Buffer is too small, or the string is not a valid rust identifier
		goto free
	end
	-- I think memory leak occurs here?.. Haven't found a good way to convert pointer to string in vmprotect lua api, any identity function would work
	res = strdup(demangle_buf)
	
	::free::
	free(demangle_buf)
	return res
end

if demangle("_RNvCskwGfYPst2Cb_3foo16example_function") ~= "foo::example_function" then
	error("demangler is not working properly")
end

Code: Select all

У вас сейчас там вообще нет никаких символов кроме экспорта.

Code: Select all

#[protect(ultra)]
fn add(a: u32, b: u32) -> u32 {
    a + b
}

Code: Select all

#[inline(always)]
fn add(a: u32, b: u32) -> u32 {
    #[inline(never)]
    #[no_mangle]
    fn vmprotect_ultra_add_0123456789(a: u32, b: u32) {
        a + b
    }
    vmprotect_ultra_add_0123456789(a, b)
}

Code: Select all

#[no_mangle]

Code: Select all

#[no_mangle]

Code: Select all

        local name, protinfo = name:match("^(.+)::vmprotect_(.+)::h" .. string.rep("[0-9]", 16) .. "$")