NaC-L / Mergen
Deobfuscation via optimization with usage of LLVM IR and parsing assembly.
☆554Updated last week
Alternatives and similar repositories for Mergen:
Users that are interested in Mergen are comparing it to the libraries listed below
- Native code virtualizer for x64 binaries☆479Updated 3 months ago
- ☆404Updated 3 months ago
- Titan is a VMProtect devirtualizer☆23Updated last year
- Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆271Updated 8 months ago
- VMProtect 2.x-3.x x64 Import Deobfuscator☆292Updated last year
- Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.☆586Updated 2 months ago
- IDA Class Informer plugin for IDA 8.x and 9.x☆276Updated 2 weeks ago
- Emulate Drivers in RING3 with self context mapping or unicorn☆337Updated 2 years ago
- Debugger Anti-Detection Benchmark☆325Updated last year
- A VMP to VTIL lifter.☆435Updated 3 years ago
- X86 Mutation Engine with Portable Executable compatibility.☆482Updated 2 years ago
- an ida plugin used to decompile vmp☆320Updated 9 months ago
- protector & obfuscator & code virtualizer☆517Updated this week
- Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks☆351Updated 5 months ago
- obfuscated any constant encryption in compile time on any platform☆443Updated last year
- An AVX Lifter for the Hex-Rays Decompiler☆302Updated last year
- Universal x86/x64 VMProtect 2.0-3.X Import fixer☆5Updated 3 years ago
- Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.☆834Updated 11 months ago
- System call hook for Windows 10 20H1☆484Updated 3 years ago
- Single-header, minimalistic, cross-platform hook library written in pure C☆323Updated 6 months ago
- x64dbg plugin to bypass Themida 3.x Anti-Debugger / VM / Monitoring programs checks (x64)☆513Updated 3 years ago
- Themida 3.x unpacking, unwrapping and devirtualization(future)☆169Updated 2 years ago
- VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.☆393Updated 2 years ago
- IDA Pro plugin to manage classes☆318Updated 7 months ago
- An x86-64 Code Virtualizer☆250Updated 6 months ago
- Enhanced IDA Pro signature generator plugin.☆370Updated 3 months ago
- This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemo…☆596Updated 6 years ago
- ☆474Updated last year
- A x64 Windows Rootkit using SSDT or Hypervisor hook☆532Updated 3 months ago
- Simple x86/x86_64 instruction level obfuscator based on a basic SBI engine☆264Updated 2 years ago