{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,10]],"date-time":"2026-02-10T10:49:35Z","timestamp":1770720575758,"version":"3.49.0"},"reference-count":36,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100003725","name":"National Research Foundation of Korea","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100003725","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003725","name":"Korean Government","doi-asserted-by":"publisher","award":["2020R1F1A1048443"],"award-info":[{"award-number":["2020R1F1A1048443"]}],"id":[{"id":"10.13039\/501100003725","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2020]]},"DOI":"10.1109\/access.2020.3008900","type":"journal-article","created":{"date-parts":[[2020,7,13]],"date-time":"2020-07-13T21:54:01Z","timestamp":1594677241000},"page":"127939-127953","source":"Crossref","is-referenced-by-count":11,"title":["x64Unpack: Hybrid Emulation Unpacker for 64-bit Windows Environments and Detailed Analysis Results on VMProtect 3.4"],"prefix":"10.1109","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5658-6050","authenticated-orcid":false,"given":"Seokwoo","family":"Choi","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2516-3853","authenticated-orcid":false,"given":"Taejoo","family":"Chang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7181-136X","authenticated-orcid":false,"given":"Changhyun","family":"Kim","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7354-4434","authenticated-orcid":false,"given":"Yongsu","family":"Park","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-99073-6_18"},{"key":"ref32","first-page":"14","article-title":"Detours: Binary interception of Win32 functions","author":"hunt","year":"1999","journal-title":"Proc 3rd Usenix Windows NT Symp"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/1250734.1250746"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/s11227-020-03270-6"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1002\/spe.2622"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3098954.3098995"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-60876-1_4"},{"key":"ref10","first-page":"7","article-title":"Bochs: A portable PC emulator for unix\/X","volume":"1996","author":"lawton","year":"1996","journal-title":"Linux J"},{"key":"ref11","article-title":"API deobfuscator: Resolving obfuscated API functions in modern packers","author":"choi","year":"0"},{"key":"ref12","first-page":"887","article-title":"Efficient automatic original entry point detection","volume":"35","author":"kim","year":"2019","journal-title":"J Inf Sci Eng"},{"key":"ref13","year":"2020","journal-title":"UPX Unpacker Plug-In Automatic UPX Unpacking"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/1314389.1314399"},{"key":"ref15","year":"2020","journal-title":"Qt Cross-Platform Software Development Framework for Native Embedded Desktop and Mobile Applications"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3019612.3019791"},{"key":"ref17","year":"2020","journal-title":"An Open-Source X64\/X32 Debugger for Windows"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2946392"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2892500"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/945461.945462"},{"key":"ref4","author":"berinato","year":"2007","journal-title":"The Rise of Anti-Forensics CSO from IDG"},{"key":"ref27","first-page":"1","author":"mishchenko","year":"2011","journal-title":"VMware ESXi Planning Implementation Security Course Technology"},{"key":"ref3","year":"2020","journal-title":"Safengine Protector"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-33630-5_22"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2017.06.007"},{"key":"ref5","author":"ferrie","year":"2011","journal-title":"The Ultimate Anti-debugging Reference"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065034"},{"key":"ref7","year":"2020","journal-title":"OllyDbg V1 10 32-Bit Assembler Level Analyzing Debugger for Microsoft Windows"},{"key":"ref2","year":"2020","journal-title":"VMProtect Software VMProtect Virtualizes Code"},{"key":"ref9","article-title":"Dynamic optimization of IA-32 application under DynamoRIO","author":"garnett","year":"2003"},{"key":"ref1","year":"2020","journal-title":"Themida Advanced Windows Software Protection System"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2927220"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2906934"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2916886"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.36"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2908033"},{"key":"ref26","first-page":"41","article-title":"QEMU, a fast and portable dynamic translator","author":"bellard","year":"2005","journal-title":"Proc USENIX Annu Tech Conf"},{"key":"ref25","first-page":"643","article-title":"Syntia: Synthesizing the semantics of obfuscated code","author":"blazytko","year":"2017","journal-title":"Proc Usenix Secur Symp"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8948470\/09139515.pdf?arnumber=9139515","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T01:09:38Z","timestamp":1641949778000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9139515\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"references-count":36,"URL":"https:\/\/doi.org\/10.1109\/access.2020.3008900","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]}}}