---
id: 4566
title: "Deobfuscation: recovering an OLLVM-protected program"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/deobfuscation-recovering-an-ollvm-protected-program.html"
published_at: "2014-12-03T23:00:00Z"
tags: ["reverse-engineering", "obfuscation", "symbolic-execution", "deobfuscation", "ollvm", "miasm"]
phying_url: "https://phying.com/item/4566"
lang: en
---

# Deobfuscation: recovering an OLLVM-protected program

## Summary

Quarkslab breaks the protections of Obfuscator-LLVM (LLVM 3.5) on a sample function, stripping control-flow flattening and the other layers one by one with the Miasm reverse-engineering framework.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2014-12-03T23:00:00Z
- **Original:** https://blog.quarkslab.com/deobfuscation-recovering-an-ollvm-protected-program.html
- **Phying News:** https://phying.com/item/4566