Static Devirtualization of Themida

(back.engineering)

22 points | by homarp 4 days ago

2 comments

  • not_a9 1 hour ago
    They include a fun follow-up with a stronger obfuscator: https://www.youtube.com/watch?v=3LtwqJM3Qjg
  • homarp 4 days ago
    This article demonstrates devirtualization of CodeVirtualizer/Themida protected code, however the techniques described apply to pretty much every virtual machine based obfuscator.