NOTE: Instructions for running the code will be released after the paper get published.

analysis: contains the code related to detecting self-protection methods, detecting anti-analysis mechanisms, and diagnosing memory corruption bugs.
ds5: contains the code related to tracing instructions.
ebpf: contains the code related to collecting memory data.
etm: contrains the code related to recovering run-time function calls.