Naci's blog

Reverse engineering, LLVM, and binary lifting. Sometimes slides.

Posts

6 entries

12 Oct2026

Lifting Lua to LLVM IR, why dynamic table operations survive optimization, and recovering Luraph-protected scripts with AI-assisted tooling.

09 May2026

Cross-post: devirtualizing CodeVirtualizer/Themida with guided symbolic evaluation, co-authored with IDontCode at Aftermath Labs.

14 Oct2025

A closer look at VMDragonSlayer, its symbolic execution, and its approach to lifting control flow.

18 Aug2025

Slides on devirtualizing VMProtect with Mergen and using LLVM for deobfuscation.

23 Jun2025

Finding errors in binaries without source code through lifting, recompilation, and runtime sanitizers.

25 Jan2025

Using LLVM and compiler techniques to lift binaries and untangle VMProtect and Themida.