VMProtect 3.8.1 Obfuscation Strategies Explained
VMProtect 3.8.1 obfuscation strategies, cataloging the transformation techniques it applies to protected code and how each complicates analysis, and the gotchas flagged along the way.
Tag: virtualization
Building an Open-Source ARM64 VMP from Scratch: Virtualizing All 121 A64 Base Instructions
Building an open-source ARM64 VMP from scratch, virtualizing all 121 A64 base instructions to create a custom VM-based protector, so you can reproduce it yourself.
Reversing ARM64 VMP: Virtual Instructions, Virtual Registers, and De-virtualization
Reversing an ARM64 VMP: virtual instructions, virtual registers, and de-virtualization, mapping the custom ISA back to real ARM64, with every step broken down clearly.
VMProtect 1.81 Under the Hood: VM Structure and De-virtualization
VMProtect 1.81 under the hood: dissecting its VM structure and de-virtualization, mapping the handlers to reconstruct the original native code, and the mechanism explained clearly.
Abyss: Intercepting SVC Syscalls on Android with BPF and Seccomp
Abyss: intercepting svc syscalls on Android with BPF and seccomp, a kernel-level approach to syscall hooking that leaves no userspace trace behind, and the code traced down to the core.