---
title: "Dynamic Binary Instrumentation Techniques to Address Native Code Obfuscation"
description: "Android applications are becoming more and more obfuscated to prevent reverse engineering. While obfuscation can be applied on both, the Dalvik bytecode and the native code, the …"
canonical_url: "https://www.romainthomas.fr/publication/20-bh-asia-dbi/"
authors: ["Romain Thomas"]
date_published: "2020-10-01T00:00:00Z"
date_modified: "2026-08-04T19:53:38+02:00"
language: "en-US"
section: "publication"
venue: "BlackHat Asia"
tags: []
categories: []
---

# Dynamic Binary Instrumentation Techniques to Address Native Code Obfuscation

> Android applications are becoming more and more obfuscated to prevent reverse engineering. While obfuscation can be applied on both, the Dalvik bytecode and the native code, the …

##  Slides

[PDF document](asia-20-Thomas-Dynamic-Binary-Instrumentation-Techniques-to-Address-Native-Code-Obfuscation.pdf)

##  Whitepaper

[PDF document](asia-20-Thomas-Dynamic-Binary-Instrumentation-Techniques-to-Address-Native-Code-Obfuscation-wp.pdf)

##  Talk

[YouTube video](https://www.youtube.com/watch?v=MRku-2fW42w)

<div id="demo1"></div>

##  Demo #1: Snapchat

[Video](snapchat_demo.mp4)


<div id="demo2"></div>

##  Demo #2: Legu Packer

[Video](qbdi-tencent-packer.mp4)

*Note: The videos are intentionally quick. Do not hesitate to pause them.*

## Resources

- Presented at: BlackHat Asia
- [Paper (PDF)](https://www.romainthomas.fr/publication/20-bh-asia-dbi/asia-20-Thomas-Dynamic-Binary-Instrumentation-Techniques-to-Address-Native-Code-Obfuscation-wp.pdf)
- [External page](https://www.blackhat.com/asia-20/briefings/schedule/#dynamic-binary-instrumentation-techniques-to-address-native-code-obfuscation-18309)