/TicklingVMProtect

Assets for the "Tickling VMProtect with LLVM" blog post.

Primary LanguageLLVM

TicklingVMProtect

The code is meant to be used as a learning resource while following the Tickling VMProtect with LLVM 1 2 3 series.

  • The C++ helper code is a high-level representation of the structures mentioned in the posts and described by previous public research.
  • The LLVM passes are generic implementations of the passes described in the posts, except for the pass meant to simplify the VMProtect-specific jump trick, which seems to be deprecated since years.