Vmprotect Reverse Engineering

PUSH -1 ; Exception handler PUSH ... ; Handle MOV ... ; Bytecode pointer CALL VM_Start

Unlike standard packers that just compress or encrypt code, VMProtect uses Code Virtualization Virtual Machine (VM): vmprotect reverse engineering