Post #2158446
2026-04-23 02:45 UTC
The variation is: first run Theseus on the packed executable, producing a program that unpacks and then jumps to a dynamic address (the address of the unpacked code, which Theseus didn't see to translate).
Then modify that program to implement that address, and implement it by a function that calls back into the Theseus compiler to generate source code directly.
No intermediate exe serialization needed! The unpacker has the unpacked data in memory, so I can codegen directly from there.
Replies (1)
-
@evmar@inuh.net 2026-04-23 02:46
Unfortunately, I was so focused on how nifty this was that I overlooked the other reason to care about unpacking, which is loading the program in a tool like Ghidra. And for that I really do need an exe file.