an ida plugin used to decompile vmp
☆376Jul 2, 2024Updated last year
Alternatives and similar repositories for VmpHelper
Users that are interested in VmpHelper are comparing it to the libraries listed below
Sorting:
- Fix VMProtect3 IAT☆309Dec 5, 2023Updated 2 years ago
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆779Mar 8, 2026Updated 2 weeks ago
- VMProtect 2.x-3.x x64 Import Deobfuscator☆437Oct 22, 2025Updated 5 months ago
- Titan is a VMProtect devirtualizer☆121Mar 6, 2024Updated 2 years ago
- ☆645May 30, 2023Updated 2 years ago
- ☆426Jan 1, 2025Updated last year
- Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.☆917Dec 29, 2025Updated 2 months ago
- Playing with the VMProtect software protection. Automatic deobfuscation of pure functions using symbolic execution and LLVM.☆1,399Jun 11, 2022Updated 3 years ago
- Hypervisor based anti anti debug plugin for x64dbg☆1,570Jul 8, 2024Updated last year
- 用来辅助分析易语言程序的IDA插件☆521Mar 19, 2024Updated 2 years ago
- a monitoring windows driver calls kernel api tools☆129Jul 5, 2024Updated last year
- 跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…☆79Dec 17, 2023Updated 2 years ago
- Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆337Jul 29, 2024Updated last year
- Titan is a VMProtect devirtualizer☆63Nov 5, 2023Updated 2 years ago
- Native code virtualizer for x64 binaries☆520Dec 20, 2024Updated last year
- Radical Windows ARK☆252Apr 18, 2025Updated 11 months ago
- a debugger use vt technology☆355Jun 30, 2022Updated 3 years ago
- Universal x86/x64 VMProtect 2.0-3.X Import fixer☆21Dec 29, 2021Updated 4 years ago
- 笔者在一款基于LLVM编译器架构的retdec开源反编译器工具的基础上,融合了klee符号执行工具,通过符号执行(Symbolic Execution)引擎动态模拟反编译后的llvm的ir(中间指令集)运行源程序的方法,插桩所有的对x86指令集的thiscall类型函数对t…☆225Apr 6, 2022Updated 3 years ago
- ☆225Mar 11, 2023Updated 3 years ago
- first commit☆64Oct 29, 2020Updated 5 years ago
- A static devirtualizer for VMProtect x64 3.x. powered by VTIL.☆2,093Aug 8, 2021Updated 4 years ago
- etw hook (syscall/infinity hook) compatible with the latest Windows version of PG☆328Apr 27, 2024Updated last year
- Another wow64ext to try to be compatible with WOW64 for all architectures.☆98Jan 1, 2026Updated 2 months ago
- A dynamic VMP dumper and import fixer, powered by VTIL.☆1,335Nov 4, 2020Updated 5 years ago
- Fix VMProtect Import Protection☆372Aug 12, 2021Updated 4 years ago
- A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.☆159Mar 26, 2024Updated last year
- Windows Anti-Rootkit Tool☆547Dec 31, 2025Updated 2 months ago
- ida plugin to parse qt meta data☆85Jan 15, 2025Updated last year
- 从MmPfnData中枚举进程和页目录基址☆208Aug 18, 2023Updated 2 years ago
- IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformati…☆1,773Mar 13, 2026Updated last week
- 使用 Intel 虚拟化特性实现应用层HOOK☆66Sep 11, 2025Updated 6 months ago
- Enum and Remove Hook in Windows☆52Dec 11, 2025Updated 3 months ago
- Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.☆1,361Aug 19, 2023Updated 2 years ago
- DelphiHelper is a python IDA Pro plugin aiming to help the analysis of x86/x86_64 binaries written in Delphi programming language.☆142Updated this week
- ☆179May 20, 2025Updated 10 months ago
- Kernel driver for detecting Intel VT-x hypervisors.☆202Jul 11, 2023Updated 2 years ago
- InfinityHookPro Win7 -> Win11 latest☆553Feb 7, 2023Updated 3 years ago
- 🪝 Various EPT hook detection approaches☆143Feb 22, 2026Updated last month