Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.
☆330Jul 29, 2024Updated last year
Alternatives and similar repositories for themida-unmutate
Users that are interested in themida-unmutate are comparing it to the libraries listed below
Sorting:
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆92Jul 28, 2024Updated last year
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆772Sep 29, 2025Updated 5 months ago
- A devirtualization engine for Themida.☆107Mar 2, 2024Updated 2 years ago
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆68Feb 7, 2024Updated 2 years ago
- Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.☆1,349Aug 19, 2023Updated 2 years ago
- Native code virtualizer for x64 binaries☆517Dec 20, 2024Updated last year
- A Binary Ninja plugin to deobfuscate Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆39Jul 28, 2024Updated last year
- Titan is a VMProtect devirtualizer☆119Mar 6, 2024Updated 2 years ago
- An x86-64 Code Virtualizer☆309Sep 26, 2024Updated last year
- Themida unpacker☆526Feb 10, 2026Updated 3 weeks ago
- Themida 3.x unpacking, unwrapping and devirtualization(future)☆200Mar 14, 2023Updated 2 years ago
- an ida plugin used to decompile vmp☆374Jul 2, 2024Updated last year
- Efficient general mixed boolean-arithmetic (MBA) simplifier☆124Updated this week
- Collection of hypervisor detections☆297Sep 25, 2024Updated last year
- Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!☆408Apr 19, 2025Updated 10 months ago
- ☆424Jan 1, 2025Updated last year
- Symbolic Execution based on lifting amd64 to z3☆32Jul 2, 2024Updated last year
- Ghetto user mode emulation of Windows kernel drivers.☆160Oct 20, 2024Updated last year
- PE (and elf now!) bin2bin obfuscator☆820Oct 11, 2025Updated 4 months ago
- Playing with the VMProtect software protection. Automatic deobfuscation of pure functions using symbolic execution and LLVM.☆1,391Jun 11, 2022Updated 3 years ago
- LLVM based static binary analysis framework☆303Apr 2, 2025Updated 11 months ago
- ☆34Jan 26, 2024Updated 2 years ago
- Python bindings for the Icicle emulator.☆41Nov 6, 2025Updated 4 months ago
- Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.☆657Jan 28, 2025Updated last year
- Nyxstone: assembly / disassembly library based on LLVM, implemented in C++ with Rust and Python bindings, maintained by emproof.com☆400Dec 4, 2024Updated last year
- A dynamic VMP dumper and import fixer, powered by VTIL.☆1,327Nov 4, 2020Updated 5 years ago
- Using Windows' own bootloader as a shim to bypass Secure Boot☆226Jul 17, 2024Updated last year
- A C++ tool to inspect and extract contents from PyInstaller archives☆19Oct 19, 2025Updated 4 months ago
- Code Deobfuscator x86_32/64☆52Aug 16, 2022Updated 3 years ago
- Kernel driver for detecting Intel VT-x hypervisors.☆197Jul 11, 2023Updated 2 years ago
- x86-64 code/pe virtualizer☆206Dec 2, 2024Updated last year
- VMProtect 2.x-3.x x64 Import Deobfuscator☆429Oct 22, 2025Updated 4 months ago
- Titan is a VMProtect devirtualizer☆63Nov 5, 2023Updated 2 years ago
- IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformati…☆1,748Feb 24, 2026Updated last week
- x64dbg plugin to bypass Themida 3.x Anti-Debugger / VM / Monitoring programs checks (x64)☆556May 7, 2021Updated 4 years ago
- Fix VMProtect 3.xx (tested 3.0.9 to 3.5.0)☆18Feb 1, 2022Updated 4 years ago
- A static devirtualizer for VMProtect x64 3.x. powered by VTIL.☆2,083Aug 8, 2021Updated 4 years ago
- Fix VMProtect3 IAT☆307Dec 5, 2023Updated 2 years ago
- x86-64 user mode emulation using Zydis☆73Sep 12, 2025Updated 5 months ago