Static Devirtualization of Themida

(back.engineering)

20 points by homarp4 days ago

2 comments

  • not_a950 minutes ago
    They include a fun follow-up with a stronger obfuscator: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=3LtwqJM3Qjg" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=3LtwqJM3Qjg</a>
  • homarp4 days ago
    This article demonstrates devirtualization of CodeVirtualizer&#x2F;Themida protected code, however the techniques described apply to pretty much every virtual machine based obfuscator.