4 ms·

There is the demovfuscator, which de-obfuscates movfuscated programs reasonably well. This work was actually done by friends of mine; see their talk here: https

There is the demovfuscator, which de-obfuscates movfuscated programs reasonably well. This work was actually done by friends of mine; see their talk here: https://recon.cx/2016/talks/"Movfuscator-Be-Gone.html https://recon.cx/2016/talks/"Movfuscator-Be-Gone.html

MaxBarraclough 9y ago
Interesting, thanks for the link! Was just about to ask if such a project exists. I wonder if there are other OISC architectures that are harder to 'decompile'.