Launched this week
Devirt
Binary devirtualization for authorized analysis
2 followers
Binary devirtualization for authorized analysis
2 followers
Devirt is a binary devirtualization and reverse engineering service for security researchers and malware analysts. Devirt turns code protected by VMProtect, Themida and Code Virtualizer into readable logic, with a coverage ledger of what is proven.
Free Options
Launch Team
Framer AI AgentsDesign and publish professional sites with AI
Promoted
Hi Product Hunt,
We built Devirt (devirt.re) for reverse engineers and malware analysts who keep hitting the same wall: functions protected by VMProtect, Themida, Code Virtualizer and other virtualizing protectors, where IDA and Ghidra show the protector's interpreter instead of the program.
How it works
Devirt follows the protected program as it runs, rebuilds the virtual machine's state and control flow, and turns that behavior into native-shaped functions it checks against the original. You choose the output: an IDA database, annotated pseudocode, a reverse engineering report, LLVM IR or structured JSON.
Supported protectors
Automated: VMProtect, Themida and Code Virtualizer
Free assessment first: Enigma Protector, Obsidium, Loki-based VMs, JavaScript VM obfuscation, .NET virtualizers and custom VMs
Coverage you can check
Every result comes with a ledger that labels each function as proven, runtime-dependent, unresolved or permanently bounded, so you can see exactly where the evidence stops.
Getting started
Start with a free browser check or Community Triage. Complex files get a free feasibility assessment and a written quote before any paid work begins. Devirt only analyzes software you own or are authorized to examine.
We'd value feedback from people who work with protected binaries: which output fits your workflow, and what would you need to see before trusting a recovered function?