Code Virtualizer vs Obfuscator-LLVM

Code Virtualizer is a code-protection tool for developers seeking to make selected application, library, or driver code harder to reverse engineer. It transforms x86, x64, or ARM64 instructions into virtual opcodes interpreted by an internal virtual machine; each protected application receives its own opcodes and machine. It supports native PE, ELF, and Mach-O files, including executables, services, DLLs, shared objects, and device drivers. Developers mark protected sections with macros from VirtualizerSDK.h. Listed capabilities include multiple virtual machines, code relocation, an advanced mutation engine, and command-line protection. The maker says the product works with any compressor or protector. It runs on Windows, macOS, and Linux. A demo is available but cannot be registered; it offers light virtualization, omits string encryption, mutate macros, and compressed virtual machines, and adds a demo splash screen. The Developer License (x86/x64) costs €199 as a one-time purchase, and other licenses are listed for different developer counts and ARM64 use. Purchases include one year of updates and email support.

Obfuscator-LLVM is a free, open-source LLVM fork for Linux that applies obfuscation while software is compiled. It is intended to make programs harder to reverse engineer or modify. Listed passes include instruction substitution, bogus control flow, and control-flow flattening, with function annotations also available. Its intermediate-representation approach covers languages supported by LLVM, including C, C++, Objective-C, Ada, and Fortran. Listed targets include x86, x86-64, PowerPC, ARM, Thumb, SPARC, Alpha, CellSPU, MIPS, MSP430, SystemZ, and XCore. Installation involves cloning the source repository, then building with CMake and make; binaries are placed in build/bin. The guide describes compiler use through Clang, autotools, and a custom Xcode plugin. The latest official non-development branch is llvm-4.0, based on LLVM 4.0.1. The project says obfuscated code can be slower and larger, and describes itself as an advanced prototype needing more testing before production use.