Reversing OLLVM Control-Flow Flattening with IDA Hex-Rays Microcode
Reversing OLLVM control-flow flattening with IDA Hex-Rays microcode, using the decompiler's IR to reconstruct the flattened logic, for anyone reversing similar targets.
Tag: idapython
Analyzing and Recovering a Major Company's VM Protection
Recovering a VM-protection bytecode-to-native compiler, mapping virtual instructions back to real ones to de-virtualize the protected code, including the pitfalls and the fix.
An OLLVM Survival Guide: Building, Understanding, and Defeating Control-Flow Obfuscation
An OLLVM survival guide, collecting practical techniques for navigating flattened control flow, bogus blocks, and instruction substitution, and the bypass logic broken down.
Reversing OLLVM's Control-Flow Flattening With IDA Python
Reversing OLLVM control-flow flattening, reconstructing the original control flow from the dispatcher loop, state variable, and jump tables, and the code traced down to the core.