A devirtualization engine for Themida.
☆115Mar 2, 2024Updated 2 years ago
Alternatives and similar repositories for TDE
Users that are interested in TDE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆65Feb 7, 2024Updated 2 years ago
- Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆352Jul 29, 2024Updated last year
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆837May 8, 2026Updated last month
- Native code virtualizer for x64 binaries☆531Dec 20, 2024Updated last year
- Exemplary LLVM function pass implementing Control Flow Flattening.☆17May 2, 2018Updated 8 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Me fockin' pe protector☆42Nov 19, 2022Updated 3 years ago
- Titan is a VMProtect devirtualizer☆131Mar 6, 2024Updated 2 years ago
- Code Deobfuscator x86_32/64☆55Aug 16, 2022Updated 3 years ago
- devirtualization vmprotect☆67Mar 11, 2023Updated 3 years ago
- Hooking Windows' exception dispatcher to protect process's PML4☆255Jan 24, 2025Updated last year
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆170Aug 23, 2024Updated last year
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆272Aug 31, 2022Updated 3 years ago
- Kernel ReClassEx☆68Nov 21, 2023Updated 2 years ago
- Deobfuscation of Semi-Linear Mixed Boolean-Arithmetic Expressions☆87Mar 28, 2026Updated 2 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A simple pluggable tool to convert an unrolled TritonAST to LLVM-IR, optimize it and get back to TritonAST.☆39Apr 3, 2020Updated 6 years ago
- A repository of IDA Databases and Binaries used for the analysis of popular commercial virtual-machine obfuscators☆73Oct 7, 2022Updated 3 years ago
- ☆48Jul 7, 2024Updated last year
- ☆22Mar 23, 2016Updated 10 years ago
- MBA deobfuscator via Program Synthesis and Term Rewriting☆66Oct 13, 2025Updated 7 months ago
- Kernel driver for detecting Intel VT-x hypervisors.☆203Jul 11, 2023Updated 2 years ago
- Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!☆440Apr 19, 2025Updated last year
- VMProtect 2.x-3.x x64 Import Deobfuscator☆478Oct 22, 2025Updated 7 months ago
- VMProtect, VMP, Devirter, 3,5☆113Jan 30, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆96Jul 28, 2024Updated last year
- A simple x86_64 AMD-v hypervisor type-2 Programmed with C++, with soon to be added syscall hooks. [W.I.P]☆111Aug 3, 2023Updated 2 years ago
- x86-64 code/pe virtualizer☆212Dec 2, 2024Updated last year
- A x86_64 software emulator☆162Aug 25, 2025Updated 9 months ago
- ☆72Apr 12, 2023Updated 3 years ago
- Unicorn Engine port for UEFI firmware☆53Mar 25, 2025Updated last year
- AMx64 is a simulated 64-bit environment that can interpret nasm-like asm code. It allows a usage of different 64-bit registers and 64-bit…☆22Dec 22, 2023Updated 2 years ago
- Detour library (x64 and x86 compatible)☆15Dec 15, 2020Updated 5 years ago
- Experimental disassembler for x86 binaries virtualized by VMProtect 3☆97Aug 27, 2022Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- PE (and elf now!) bin2bin obfuscator☆845Oct 11, 2025Updated 7 months ago
- Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities☆413Feb 26, 2025Updated last year
- a windows kernel keylogger that works☆20Feb 12, 2024Updated 2 years ago
- ☆18Jan 11, 2026Updated 4 months ago
- Binary rewriter for 64-bit PE files.☆104Feb 5, 2024Updated 2 years ago
- A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆78Mar 29, 2025Updated last year
- Symbolic executor for Binary Ninja's MLIL☆25Oct 3, 2024Updated last year