Recon 2024 - Erwan Grelet - Seeing Through Themida's Code Mutation скачать в хорошем качестве

Recon 2024 - Erwan Grelet - Seeing Through Themida's Code Mutation

In this talk we discuss x86-64 machine code obfuscation while studying Themida's code mutation feature in particular. We start by presenting Themida and the methodology used to study its code obfuscation implementation. We then dive into Themida's implementation of mutation-based code obfuscation and the resulting findings of the research. We finally leverage the acquired knowledge to implement an attack based on symbolic execution, which allows us to completely deobfuscate the protected machine code and regenerate working, simplified binaries. Erwan Grelet bio: Erwan Grelet is a security researcher currently working at Ubisoft in the Game Security team. He spent several years working as a low-level software engineer before that. He is particularly interested in software reverse engineering, vulnerability research and software obfuscation.