This is a helper for CFF(Control flow flattening). It can help you to deflat the OLLVM CFF obfuscated code.
Use binaryninja workflow to deflat the CFF obfuscated code.
Move the folder MikuCffHelper
to the plugins
folder of BinaryNinja.
Open the CFF obfuscated file with MikuCffHelper_workflow.
-
right click the function you want to deflat, and select
Plugins/miku/suggest_stateVar
. -
right click the function you want to deflat, and select
Function Analysis/MikuCffHelper
.
this is a beta version, and i'm still working on it.
(来自2025届本科生正在开发的毕设项目,嘻嘻,这已经是第三版实现了,前两版都没开源,这次趁着重构的机会开源一下 不会有人抄我的吧,嘻嘻)