Manually De-virtualizing a VMP 3.9.4 cmp/jne Handler Sequence
Manually de-virtualizing a VMProtect 3.9.4 cmp-jne handler sequence, tracing the handlers to recover the original comparison logic, with a full walkthrough of the technique.
Tag: taint-analysis
Trace-Based Data-Flow Analysis: A Practical Walkthrough
A practical walkthrough of trace-based data-flow analysis, using execution traces to follow tainted values through heavily obfuscated native code, with the analysis method shown end to end.