<p>turns out that when your shitty antivirus spends 10 hours analyzing yet another chromium embedded framework statically linked into an electron app, it&#39;s (sometimes) lifting it back to llvm ir using symbolic execution</p><p>machine code lowered and lifted here ˙ ͜ʟ˙</p><p><a href="https://github.com/avast/retdec" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="">github.com/avast/retdec</span><span class="invisible"></span></a></p>
Reply