p-code

A VBA p-code disassembler

IDA plugin that displays the P-code for the current function

A step towards automating the creation of Ghidra processor modules

An FFI for Ghidra's Sleigh also providing SMT modeling and analysis

A tool for synthesizing code-reuse attacks (aka ROP) from a reference program, powered by logical modeling of Ghidra's `p-code` IL.

PUSHAN-style static devirtualizer for Tigress-like VM obfuscation, using VPC-sensitive CFG recovery over Ghidra SLEIGH p-code.

Pectus is a process control system for Unit Operations such as filtration, chromatography, precipitation, solubilization and refolding. Pectus implements a language called P-code which is used to write methods and control components on the Unit Operation.

Rust-first reverse-engineering and decompilation workspace featuring Ghidra SLEIGH lifting, NIR/HIR structuring, and AI-assisted terminal/desktop UIs.

Exemplificação de funcionamento de uma P-Code Machine em C.

Hobby Bytecode Interpreter written on C++

Run multiple Open Pectus engines in a convenient user interface.

Remove ("decompile") P-code from Excel workbooks (.XLSM or .XLSB) that contain VBA

Ghidra plugin for automatic struct definition extraction from executables.

Wizardry IV: The Return of Werdna (Apple II, 1987), six disk sides: a 1 MB directory spread over five floppies by SYSTEM.RELOC (239 of 239 shared blocks identical), the Huffman text decoded to 424 messages, 15 level maps and D-I-N-K, the Mordorcharge table, three interpreter builds, and a sixth side called BLANK.

Binary Ninja plugin for VB6 P-Code executable analysis — structure annotation and symbol discovery, via a custom VB6-PCode architecture.

A C++ compiler (Flex & Bison) that translates a Pascal-like language into P-machine code — nested procedures, recursion, arrays, records & pointers

Sound static lifting and simplification of obfuscated Ghidra High P-code bitvector expressions

Seven files and 329,541 bytes: a self-booting UCSD p-System disk that never calls DOS. Its volume header declares 1,272 blocks and the file holds 640, and the 212 blocks it calls ZOT contain none of it. Four bytes of a 1987 interpreter say Take.