protect your software
We can’t stop reverse engineering. We can make it hurt. Walburn turns your critical x64 code into a private virtual instruction set.
users running protected software
transformation mechanisms
instructions virtualized
We virtualize the instructions others skip.
Most protectors cover the easy 80% and bail on the rest, exactly where a reverse engineer starts looking. Walburn lifts the full x64 surface, including instructions you didn’t know you shipped.
SSE and AVX
SIMD vector paths, not just scalar integer ops
Exotic addressing and prefixes
segment overrides, LOCK, REP, the ugly encodings
Self-referencing and generated code
the constructs static tools give up on
One exe. Many machines. One build per user.
Walburn doesn’t ship a single VM to find and unwind. It packs many virtual machines into one binary, and virtualization is fast enough to run in your CI, so every customer can get a build no other copy understands.
many VMs
inside one binary, no single dispatcher to attack
new ISA
every build speaks an instruction set of its own
per user
a unique build minted in CI, one crack helps no one
Designed against the attacks that break everyone else.
Automated deobfuscation is a public research field with public tooling. We read it, reproduce it, and harden against it, so the papers that break other protectors are our test suite, not our obituary.
- MBA & symbolic simplification
Loki: Hardening Code Obfuscation Against Automated Attacks
USENIX Security 2022
- program synthesis on VM handlers
Syntia: Synthesizing the Semantics of Obfuscated Code
USENIX Security 2017
- dynamic taint & symbolic execution
A Generic Approach to Automatic Deobfuscation of Executable Code
IEEE S&P 2015
- bytecode extraction from VMs
VMHunt: Detecting and Extracting Virtualized Code
ACM CCS 2018
Strong where it matters. Native everywhere else.
Virtualization is expensive by design, and that is what makes it hard to reverse. Walburn keeps the cost surgical: only the functions you mark pay it.
- ~0%
- overhead outside protected functions
- 0
- runtime dependencies added
- 100%
- of transforms applied at build time
Make them start over.
Every build is a new instruction set. Every crack starts from zero.