A devirtualization engine for Themida.
☆111Mar 2, 2024Updated 2 years ago
Alternatives and similar repositories for TDE
Users that are interested in TDE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆63Feb 7, 2024Updated 2 years ago
- Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆341Jul 29, 2024Updated last year
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆818Updated this week
- Native code virtualizer for x64 binaries☆527Dec 20, 2024Updated last year
- Exemplary LLVM function pass implementing Control Flow Flattening.☆17May 2, 2018Updated 7 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Me fockin' pe protector☆41Nov 19, 2022Updated 3 years ago
- Titan is a VMProtect devirtualizer☆129Mar 6, 2024Updated 2 years ago
- Code Deobfuscator x86_32/64☆53Aug 16, 2022Updated 3 years ago
- devirtualization vmprotect☆66Mar 11, 2023Updated 3 years ago
- Hooking Windows' exception dispatcher to protect process's PML4☆240Jan 24, 2025Updated last year
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆169Aug 23, 2024Updated last year
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆267Aug 31, 2022Updated 3 years ago
- Kernel ReClassEx☆67Nov 21, 2023Updated 2 years ago
- Deobfuscation of Semi-Linear Mixed Boolean-Arithmetic Expressions☆84Mar 28, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A repository of IDA Databases and Binaries used for the analysis of popular commercial virtual-machine obfuscators☆71Oct 7, 2022Updated 3 years ago
- A simple pluggable tool to convert an unrolled TritonAST to LLVM-IR, optimize it and get back to TritonAST.☆39Apr 3, 2020Updated 6 years ago
- ☆48Jul 7, 2024Updated last year
- ☆22Mar 23, 2016Updated 10 years ago
- MBA deobfuscator via Program Synthesis and Term Rewriting☆66Oct 13, 2025Updated 6 months ago
- Kernel driver for detecting Intel VT-x hypervisors.☆200Jul 11, 2023Updated 2 years ago
- Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!☆427Apr 19, 2025Updated last year
- VMProtect 2.x-3.x x64 Import Deobfuscator☆451Oct 22, 2025Updated 6 months ago
- VMProtect, VMP, Devirter, 3,5☆113Jan 30, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A simple x86_64 AMD-v hypervisor type-2 Programmed with C++, with soon to be added syscall hooks. [W.I.P]☆110Aug 3, 2023Updated 2 years ago
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆95Jul 28, 2024Updated last year
- x86-64 code/pe virtualizer☆210Dec 2, 2024Updated last year
- A x86_64 software emulator☆162Aug 25, 2025Updated 8 months ago
- ☆70Apr 12, 2023Updated 3 years ago
- Unicorn Engine port for UEFI firmware☆51Mar 25, 2025Updated last year
- AMx64 is a simulated 64-bit environment that can interpret nasm-like asm code. It allows a usage of different 64-bit registers and 64-bit…☆21Dec 22, 2023Updated 2 years ago
- Detour library (x64 and x86 compatible)☆14Dec 15, 2020Updated 5 years ago
- Experimental disassembler for x86 binaries virtualized by VMProtect 3☆94Aug 27, 2022Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities☆400Feb 26, 2025Updated last year
- PE (and elf now!) bin2bin obfuscator☆837Oct 11, 2025Updated 6 months ago
- a windows kernel keylogger that works☆20Feb 12, 2024Updated 2 years ago
- ☆18Jan 11, 2026Updated 3 months ago
- Binary rewriter for 64-bit PE files.☆102Feb 5, 2024Updated 2 years ago
- A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆78Mar 29, 2025Updated last year
- protector & obfuscator & code virtualizer☆716Apr 22, 2026Updated last week