themida-devirt

Themida/CodeVirtualizer Devirtualizer Example This project demonstrates the effect of devirtualizing code protected by Themida or CodeVirtualizer. Below, you can see a simple example showing the code before virtualization and the code after devirtualization side by side. Before Virtualization|...

Mergen

Project Overview: Mergen is a tool engineered to convert Assembly code into LLVM Intermediate Representation IR. This tool is designed for: The deobfuscation or devirtualization of obfuscated binary code The enhancement of the reverse engineering process, making it more efficient and effective,...

VMProtect-devirtualization

VMProtect Devirtualization An experimental dynamic approach to devirtualize pure functions protected by VMProtect 3.x TL;DR Introduction The approach Example 1: A simple bitwise operation protected Example 2: A MBA operation protected Example 3: More than one basic block Conclusion and limitation...

vmp2

简介 本仓库是一个用于处理 VMProtect 2 保护二进制文件的旧版工具集合。 这些工具能够对受 VMProtect 2 保护的软件进行脱壳、分析和实验性 反虚拟化 。本集合的核心是 vmprofiler ，一个为所有其他工具提供基础逻辑的实用程序库。它负责识别关键的 VMProtect 2 组件，例如 VM 处理程序 、处理程序表 、转换器 等。 警告 这个拥有 4 年以上历史的项目所获得的经验教训，应当传递给那些对反虚拟化感兴趣的人。 该项目试图识别单个 VM...