Awesome

TicklingVMProtect

The code is meant to be used as a learning resource while following the Tickling VMProtect with LLVM 1 2 3 series.

• The C++ helper code is a high-level representation of the structures mentioned in the posts and described by previous public research.
• The LLVM passes are generic implementations of the passes described in the posts, except for the pass meant to simplify the VMProtect-specific jump trick, which seems to be deprecated since years.