VMP3.0.3 encrypt x64 application crash!!!

Issues related to VMProtect
Post Reply
syser
Posts: 1
Joined: Sun Sep 20, 2015 2:14 pm

VMP3.0.3 encrypt x64 application crash!!!

Post by syser »

First: if you use popad ,then you get an error from vmp3.0.3

second:


0000000180003AD2 43:FFA4C1 605D0000 jmp qword ptr [r9+r8*8+00005D60]

like this opcode in x64 app , use vmp3.0.3 encrypt app

then run app.vmp.exe crashed


0000000180003A90 41:56 push r14 ← CalculateDestinationAddress(void *,unsigned long)
0000000180003A92 41:57 push r15
0000000180003A94 48:83EC 28 sub rsp, 28
0000000180003A98 49:89CF mov r15, rcx
0000000180003A9B 45:33F6 xor r14d, r14d
0000000180003A9E 4D:85FF test r15, r15
0000000180003AA1 0F84 7F010000 jz 0000000180003C26 ↓
0000000180003AA7 85D2 test edx, edx
0000000180003AA9 74 05 jz 0000000180003AB0 ↓
0000000180003AAB 83FA 0F cmp edx, 0F
0000000180003AAE 76 0A jbe 0000000180003ABA ↓
0000000180003AB0 4C:89F9 mov rcx, r15
0000000180003AB3 E8 48DCFFFF call 0000000180001700 → SKDSizeOfCode(void *)
0000000180003AB8 89C2 mov edx, eax
0000000180003ABA 44:8D42 FE lea r8d, [rdx-02]
0000000180003ABE 41:83F8 05 cmp r8d, 05
0000000180003AC2 0F87 5E010000 jnbe 0000000180003C26 ↓
0000000180003AC8 4D:63C0 movsxd r8, r8d
0000000180003ACB 4C:8D0D 2EC5FFFF lea r9, [0000000180000000]
0000000180003AD2 43:FFA4C1 605D0000 jmp qword ptr [r9+r8*8+00005D60]
0000000180003C26 4C:89F0 mov rax, r14
0000000180003C29 48:83C4 28 add rsp, 28
0000000180003C2D 41:5F pop r15
0000000180003C2F 41:5E pop r14
0000000180003C31 C3 ret
0000000180006210 01080300 dd 00030801 Version: 01; Flags: 00; SizeOfProlog: 08; CountOfCodes: 03; FrameRegister: 00; FrameOffset: 00
0000000180006214 0842 dw 4208 UnwindCode
0000000180006216 04F0 dw F004 UnwindCode
0000000180006218 02E0 dw E002 UnwindCode
000000018000621A 0000 dw 0000 UnwindCode
0000000180008294 903A0000 dd 00003A90 Begin
0000000180008298 703C0000 dd 00003C70 End
000000018000829C 10620000 dd 00006210 UnwindData
Admin
Site Admin
Posts: 2584
Joined: Mon Aug 21, 2006 8:19 pm
Location: Russia, E-burg
Contact:

Re: VMP3.0.3 encrypt x64 application crash!!!

Post by Admin »

Could you send us a test example that shows the second problem?
Post Reply