Exetools - Quick look around VMP 3.x

Exetools (https://forum.exetools.com/index.php)

- General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)

- - Quick look around VMP 3.x - Part (1-3) (https://forum.exetools.com/showthread.php?t=20061)

sh3dow

01-21-2022 04:29

Quick look around VMP 3.x - Part (1-3)

Hello exetools community
Last time I posted a thread about VMProtect was "VMProtect 2 - Detailed Analysis of the Virtual Machine Architecture" which was fantastic Analysis of VMProtect 2 Virtual Machine Architecture. this time I found this series about VMProtect 3, hope you like it.

Quick look around VMP 3.x - Part 1 : Unpacking

PHP Code:


		
			
https://whereisr0da.github.io/blog/posts/2021-01-05-vmp-1/

Quick look around VMP 3.x - Part 2 : Code Mutation

PHP Code:


		
			
https://whereisr0da.github.io/blog/posts/2021-01-26-vmp-2/

Quick look around VMP 3.x - Part 3 : Virtualization

PHP Code:


		
			
https://whereisr0da.github.io/blog/posts/2021-02-16-vmp-3/

This guy blog is filled with juicy topics, make sure to take a look at them as well.

sh3dow

01-21-2022 04:34

Another blog from another guy but related to VMP Virtualization.

Tigress: Virtualization-Based Software Obfuscation Pt. 1

PHP Code:


		
			
https://www.mitchellzakocs.com/blog/tigress

VMProtect 3: Virtualization-Based Software Obfuscation Pt. 2

PHP Code:


		
			
https://www.mitchellzakocs.com/blog/vmprotect3

sh3dow

01-21-2022 04:49

No thread about Virtualization is complete without a blog or two from secret.club team. these guys are awesome,

Tickling VMProtect with LLVM: Part 1

PHP Code:


		
			
https://secret.club/2021/09/08/vmprotect-llvm-lifting-1.html

Tickling VMProtect with LLVM: Part 2

PHP Code:


		
			
https://secret.club/2021/09/08/vmprotect-llvm-lifting-2.html

Tickling VMProtect with LLVM: Part 3

PHP Code:


		
			
https://secret.club/2021/09/08/vmprotect-llvm-lifting-3.html

PHP Code:


		
			
https://github.com/LLVMParty/TicklingVMProtect

side note: one of them (edit: his name is "Can Bölük") had stream hours of contents on twitch where he reverse VMP (the title was: VMProtect to x86) but he toke it down, hope one of you have it.

All times are GMT +8. The time now is 15:05.