Restore Themida/Winlicense VM codes to original x86
restorevm (restorevm) <restorevmhotmailcom> Thursday, September 2 2010 20:36.20 CDT


Hi, all
After a long time to reverse oreans vm codes, Now we can restore the oreans VM codes to original x86.
You just need send us the dump file or the original file protected by code virtualizer which comes from oreans VM product. And tell us the address that you want to get the real x86 codes. We can provide you the original x86 codes' hex data and asm info in a few hours.
You can paste the hex data into OllyDBG in oreder to debug it. Also can use IDA pro to analyze it. Analyze VM codes become the same to original x86 instrs.

If you have any question or need help just connect with us.
MsnID: [email protected]
Email: [email protected]
blog 1:http://forum.tuts4you.com/index.php?app=blog&module=display&section=blog&blogid=41&showentry=67
blog 2: http://restorevm.blogspot.com

And Now we support the test to get your trust.
You can complier a vc programm in console module. And must print out "restorevm test" together with other codes that you want to test.
VM the original x86 codes with CV. Send us the VM file, And we will send you the original x86 asm data.

If you have any question pls connect with us  
Thanks All.


Comments
frozenrain Posted: Thursday, September 2 2010 23:33.59 CDT
http://hi.baidu.com/restorevm/blog is your blog

UnpackMe Posted: Tuesday, September 13 2011 21:06.55 CDT
fellow citizen��