A static devirtualizer for VMProtect x64 3.x. powered by VTIL.

vmprotect devirtualization vtil

• Updated Aug 8, 2021
• C++

Deobfuscation via optimization with usage of LLVM IR and parsing assembly.

optimization llvm deobfuscation devirtualization

• Updated Sep 22, 2026
• C++

python plugin vmprotect devirtualization vtil

• Updated Jan 1, 2025
• Python

an ida plugin used to decompile vmp

ida-plugin vmprotect ghidra devirtualization

• Updated Jul 11, 2026
• C++

Research on code virtualization in .NET [WIP]

security obfuscation dotnet reverse-engineering malware malware-analysis unpacker deobfuscator vmp eazfuscator devirtualization netreactor

• Updated Jun 20, 2023
• C#

Reverse engineering TikTok's JavaScript VM - 77 opcodes mapped, string deobfuscation, bytecode disassembly, and crypto function identification. Educational VM analysis toolkit.

javascript bytecode virtual-machine static-analysis reverse-engineering deobfuscation educational research-tool opcodes anti-bot stack-machine disassembly security-research tiktok devirtualization reverse-engineering-tools x-bogus protection-bypass vm-analysis

• Updated Jul 13, 2026
• JavaScript

Themida 3.x research

obfuscation devirtualization themida deobuscator

• Updated Feb 28, 2025

My API wrapper for ChatGPT making it possible to use ChatGPT via API for free instead of paying for their API.

python api vm ai decompiler reverse-engineering api-wrapper reversing devirtualization chatgpt chatgpt-api

• Updated Oct 2, 2025
• Python

Binary Ninja plugin for loading VTIL routines and lifting VTIL instructions to LLIL for analysis.

python architecture reverse-engineering deobfuscation binary-ninja binary-analysis program-analysis binaryview-plugin binaryview binaryninja-plugin devirtualization vtil

• Updated Apr 2, 2026
• Python

vmp .net devirtualizer

dotnet unpacker vmp recompiler vmprotect devirtualization vmpsoft

• Updated Mar 14, 2026
• C#

map and lift the VM handlers so you can read them in IDA/Ghidra made for vmp 3.8-3.10

unpack lifter unpacker vmp devirtualizer vmprotect devirtualization vmprotect-ultimate

• Updated Aug 28, 2026
• C++

Generic devirtualizer for Agile.NET (SecureTeam/CodeVeil) VM-based method protection — reconstructs CIL by reverse-engineering the runtime DLL structurally, no hardcoded per-build opcode tables.

csharp dotnet reverse-engineering deobfuscation security-research devirtualization

• Updated Aug 8, 2026
• C#

emulation vmprotect devirtualization

• Updated May 9, 2023
• Rust

Devirtualization pipeline for VMProtect-style binaries: dispatcher/handler slicing, two-generation P-code IR, LLM-context compression, Z3 equivalence verdicts

reverse-engineering deobfuscation z3 malware-analysis binary-analysis sleigh pcode vmprotect ghidra devirtualization

• Updated Sep 28, 2026
• Python

Symbolic Execution based on lifting amd64 to z3

symbolic-execution deobfuscation devirtualization

• Updated Jul 2, 2024
• C#

Generic devirtualizer for .NET Reactor VM-based method protection — reconstructs CIL by reverse-engineering the runtime structurally, no hardcoded per-build opcode tables.

csharp dotnet reverse-engineering deobfuscation security-research devirtualization dotnet-reactor

• Updated Aug 27, 2026
• C#

PUSHAN-style static devirtualizer for Tigress-like VM obfuscation, using VPC-sensitive CFG recovery over Ghidra SLEIGH p-code.

tigress sleigh p-code devirtualization

• Updated Jun 8, 2026
• C++

Static LLVM IR devirtualizer and string decryptor for fuqiuluo/amice. Rust, C and C++. Zero execution.

c rust cpp llvm static-analysis reverse-engineering deobfuscation vmp devirtualization amice

• Updated Aug 1, 2026
• Rust

vmprotect devirtualiser

compiler virtual-machine optimizer deobfuscation virtual optimiser devirtualizer devirtualization vtil devirtualiser devirtualisation

• Updated Nov 3, 2026
• C++

reverse-engineering taint-analysis vmprotect devirtualization themida

• Updated Jun 20, 2026
• C++