transformation, additional work required #10

Closed
opened 3 years ago by root · 0 comments
root commented 3 years ago
Owner

my understanding of the transformation is incorrect, there can be more than 5...

image

As you can see here bswap rax needs to be executed before the 5 transforms... This binary seems to only use BSWAP.. but i have a strong feeling that xor, add, sub, etc can probably be used prior to these 5 transforms...

VMProtect devs like: rand() < 0.5 >:) only producing something 0.0001% of the time...

my understanding of the transformation is incorrect, there can be more than 5... ![image](/uploads/8d03bedbd0d2409ae3b7f9cf3471ded2/image.png) As you can see here bswap rax needs to be executed before the 5 transforms... This binary seems to only use BSWAP.. but i have a strong feeling that xor, add, sub, etc can probably be used prior to these 5 transforms... VMProtect devs like: `rand() < 0.5` >:) only producing something 0.0001% of the time...
root closed this issue 3 years ago
Sign in to join this conversation.
No Label
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date

No due date set.

Dependencies

No dependencies set.

Reference: vmp2/vmprofiler#10
Loading…
There is no content yet.