Research notes from Devirt (devirt.re), a binary devirtualization and reverse engineering service for security researchers and malware analysts. Each issue looks at one part of protected binary analysis: how VM-based protectors such as VMProtect and Themida hide code, how recovered functions are checked against the original, and how to read a coverage ledger.
