search

ergrelet / themida-spotter-bn

A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.
GNU General Public License v3.0
61 stars 2 forks source link

Allow users to specify SecureEngine's sections #2

Open ergrelet opened 2 months ago

ergrelet commented 2 months ago

Currently, the plugin looks for hard-coded section names to figure out which sections are the SecureEngine's sections. This might not work for executable which have customized section names or where the last section is reused (Code Virtualizer style).