devirt.re
Create account
Menu

A useful answer.
Before you fund the work.

The free novel-architecture assessment explains what we observed, what is likely recoverable, what still depends on runtime evidence, and what an accepted engagement would deliver.

Synthetic file and findings. This page demonstrates the report format; it is not a customer result or a coverage claim about another binary.

Can the requested behavior be recovered?Which evidence is still required?What will the engagement deliver?What will remain explicitly bounded?

The requested decision path is likely recoverable.

The sample contains a coherent virtual instruction pointer, repeatable dispatch boundaries, and handlers with observable state effects. Those signals support a scoped recovery engagement. A runtime-derived key prevents us from promising complete static coverage before the trace is captured.

Your questionWhich request reaches the protected identity decision, and what conditions control the result?

Four signals define the recovery path.

  1. Entry layer

    A packed native entry reconstructs the working image before control reaches the VM.

    Unpacking must happen before handler recovery can be trusted.
  2. Execution model

    A register-based dispatcher advances an encoded instruction pointer through handlers.

    The architecture is recoverable, but it does not match a known automated profile.
  3. State dependency

    One key is derived from values only present during an authorized execution.

    A bounded trace is required for paths that depend on that key.
  4. Expression layer

    Arithmetic expressions contain mixed Boolean-arithmetic substitutions.

    Recovered expressions need simplification and equivalence checks before delivery.

An estimate with reasons, not a decorative percentage.

This range describes the agreed roots in the synthetic example. It is not the final ledger and it does not imply that every behavior in the file is recovered.

68%Expected recoverable range82%
Strongest evidence
Stable dispatch and repeatable handler state changes
Runtime dependency
Key material for one branch family
Permanent bound
Unreached behavior outside the accepted roots

Recovery follows the evidence.

  1. Capture the boundary

    Recover the unpacked image and record the transition into virtualized code.

  2. Recover the machine

    Identify context fields, instruction movement, dispatch, and handler effects.

  3. Lift the requested roots

    Translate the agreed functions into readable control flow and typed calls.

  4. Verify and package

    Compare recovered behavior, record unresolved paths, and prepare the deliverables.

A feasibility estimate is not delivered proof.

  • It does not claim complete behavior coverage before analysis.
  • It does not turn a timeout or missing trace into a successful proof.
  • It does not include behavior outside the written scope.
  • It does not authorize use of the service against software you may not analyze.

The useful report is yours either way.

Review the findings and formal offer in your workspace and email. Accept to fund the agreed work, or decline without opening a paid engagement.

If you accept

Pay the agreed deposit to start the work. A senior reverse engineer validates the result before release, and the balance is due before release.

If you decline

Nothing is charged and no paid engagement opens. Declining requests deletion of the assessment input.

Designed to be discussed.

Customer assessments stay private by default. A customer may deliberately share their own report after reviewing its contents; Devirt never publishes it automatically.

See the full analysis path

An unfamiliar architecture? Start in your account.

Upload for free feasibility review in your workspace. We email the report and quote before paid work begins.

Create your workspace

Create an account, verify your email and upload your file. We review custom work and email your scope and quote.

Create account

Find the right plan