Quantcast
Channel: BOT24
Viewing all articles
Browse latest Browse all 8064

Deobfuscation: Test O-LLVM protected code with simplification passes.

$
0
0
Roughly 5 years ago during researches in Taganrog Federal University we opened a discussion, what is the easiest way to protect program against heuristic analysis? The answer was easy, compile it with O0, O1, O2 and O3, and play with Ob and so on.

The best way to do it - is to take existing compiler and modify it. Flexible and good structured LLVM already started to be de facto standard for developing multi-platform compiler with new optimization features. So in that moment we wanted to use LLVM byte code optimization modules for code replication.

more here...........http://antoxar.blogspot.com/2015/03/deobfuscation-test-o-llvm-protected.html?spref=tw

Viewing all articles
Browse latest Browse all 8064

Trending Articles