The RUNE team announced a special version of Assassin's Creed Mirage, stating that Denuvo and VMProtect have been completely removed from the game's executable file, rather than just bypassing the two protection systems. The team defined this version as a proof of concept to demonstrate the feasibility of such technical modifications.
According to RUNE's published explanation, this process removed 34 VMProtect-virtualized blocks and approximately 200 Denuvo-related blocks. The team also stated that they restored 261 obfuscated code sections.
The work also included reconstructing approximately 25,000 so-called "stolen function bodies." These function code snippets are transferred or modified during the operation of the protection mechanism, and RUNE claims to have restored the relevant content.
Additionally, the team stated that they have restored the PE directories required by the executable file, including export tables, import tables, exception handling, and thread-local storage. RUNE believes that these operations restored the file structure to a state where it can launch without protection components.
RUNE also thanked an unnamed technician. According to the team's statement, this person played a key role in the work. Currently, the aforementioned technical achievements and related data all come from RUNE's published explanation.