What's new
RevTeam.Re - Reverse Engineering Team

Welcome Guest! Register a free account today to become a member! Once signed in, you'll be able to participate on this site by adding your own topics and posts, as well as connect with other members through your own private inbox! Register and wait for our approve!

Devirtualizing Agile.NET VM Protection

dawwinci

New member
Joined
Jun 22, 2026
Messages
2
Reaction score
7
Hey everyone,

I’ve just open-sourced a devirtualizer for
Please, Log in to view URLs content!
’s VM-based method protection.

The tool analyzes the AgileDotNet.VMRuntime.dll shipped alongside a protected assembly, reconstructs the opcode mapping and handler semantics directly from the runtime, and then converts virtualized methods back into real, executable CIL.

There are no hardcoded opcode tables or version-specific mappings — the devirtualizer derives the required information from the VM runtime itself.

I’ve tested it against multiple
Please, Log in to view URLs content!
builds and VM layouts, with the reconstructed methods validated using PEVerify and runtime comparison against known-source outputs.

GitHub:
Please, Log in to view URLs content!


Feedback, contributions, and testing against other
Please, Log in to view URLs content!
versions/builds are very welcome.
 
Top