ergrelet / themida-unmutateView external linksLinks
Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.
☆324Jul 29, 2024Updated last year
Alternatives and similar repositories for themida-unmutate
Users that are interested in themida-unmutate are comparing it to the libraries listed below
Sorting:
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆90Jul 28, 2024Updated last year
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆764Sep 29, 2025Updated 4 months ago
- A devirtualization engine for Themida.☆106Mar 2, 2024Updated last year
- Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.☆1,334Aug 19, 2023Updated 2 years ago
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆67Feb 7, 2024Updated 2 years ago
- Native code virtualizer for x64 binaries☆514Dec 20, 2024Updated last year
- A Binary Ninja plugin to deobfuscate Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆38Jul 28, 2024Updated last year
- Titan is a VMProtect devirtualizer☆117Mar 6, 2024Updated last year
- An x86-64 Code Virtualizer☆303Sep 26, 2024Updated last year
- Themida unpacker☆501Feb 4, 2026Updated last week
- Themida 3.x unpacking, unwrapping and devirtualization(future)☆197Mar 14, 2023Updated 2 years ago
- an ida plugin used to decompile vmp☆369Jul 2, 2024Updated last year
- Efficient general mixed boolean-arithmetic (MBA) simplifier☆121Updated this week
- Collection of hypervisor detections☆295Sep 25, 2024Updated last year
- Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!☆408Apr 19, 2025Updated 9 months ago
- Symbolic Execution based on lifting amd64 to z3☆31Jul 2, 2024Updated last year
- Ghetto user mode emulation of Windows kernel drivers.☆160Oct 20, 2024Updated last year
- ☆421Jan 1, 2025Updated last year
- ☆34Jan 26, 2024Updated 2 years ago
- LLVM based static binary analysis framework☆300Apr 2, 2025Updated 10 months ago
- Playing with the VMProtect software protection. Automatic deobfuscation of pure functions using symbolic execution and LLVM.☆1,384Jun 11, 2022Updated 3 years ago
- Python bindings for the Icicle emulator.☆41Nov 6, 2025Updated 3 months ago
- PE (and elf now!) bin2bin obfuscator☆810Oct 11, 2025Updated 4 months ago
- Nyxstone: assembly / disassembly library based on LLVM, implemented in C++ with Rust and Python bindings, maintained by emproof.com☆399Dec 4, 2024Updated last year
- Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.☆643Jan 28, 2025Updated last year
- Using Windows' own bootloader as a shim to bypass Secure Boot☆220Jul 17, 2024Updated last year
- A dynamic VMP dumper and import fixer, powered by VTIL.☆1,320Nov 4, 2020Updated 5 years ago
- Kernel driver for detecting Intel VT-x hypervisors.☆192Jul 11, 2023Updated 2 years ago
- Code Deobfuscator x86_32/64☆52Aug 16, 2022Updated 3 years ago
- x86-64 code/pe virtualizer☆206Dec 2, 2024Updated last year
- VMProtect 2.x-3.x x64 Import Deobfuscator☆420Oct 22, 2025Updated 3 months ago
- Titan is a VMProtect devirtualizer☆61Nov 5, 2023Updated 2 years ago
- IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformati…☆1,722Feb 6, 2026Updated last week
- Fix VMProtect 3.xx (tested 3.0.9 to 3.5.0)☆18Feb 1, 2022Updated 4 years ago
- A static devirtualizer for VMProtect x64 3.x. powered by VTIL.☆2,080Aug 8, 2021Updated 4 years ago
- Fix VMProtect3 IAT☆305Dec 5, 2023Updated 2 years ago
- x64dbg plugin to bypass Themida 3.x Anti-Debugger / VM / Monitoring programs checks (x64)☆552May 7, 2021Updated 4 years ago
- x86-64 user mode emulation using Zydis☆72Sep 12, 2025Updated 5 months ago
- protector & obfuscator & code virtualizer☆678Feb 8, 2026Updated last week