├── .gitignore └── README.md /.gitignore: -------------------------------------------------------------------------------- 1 | oracle_constant.pickle 2 | oracle_symbolic.pickle 3 | __pycache__ 4 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # Improving MBA Deobfuscation using Equality Saturation 2 | 3 | This is the Python PoC for the blog post: [Improving MBA Deobfuscation using Equality Saturation](https://secret.club/2022/08/08/eqsat-oracle-synthesis.html). 4 | 5 | 1. It is a monolithic slow script that has just been used to experiment with the documented ideas and must be considered unstable; 6 | 2. It will be properly rewritten in a faster language in the upcoming months; 7 | 8 | Two example oracles (symbolic and constant) are temporarely available via MEGA/Drive but will be uploaded to a dedicated server: 9 | - MEGA: https://mega.nz/folder/AoMXGIwI#Qg-wosilnwRy8oroBSAPtA 10 | - Drive: https://drive.google.com/drive/folders/1xmShdocQvmCkewRwPmSagwa6ll2wm80S 11 | --------------------------------------------------------------------------------