Supported protectors.
Find your protector, see whether Devirt automates it, and start in the right place: an upload, a free assessment or a subscription plan.
Not sure which protector you have? Start with the free assessment. Updated .
Which protectors does Devirt support?
Devirt automates recovery for VMProtect 2.x and 3.x, Themida, Code Virtualizer, Enigma Protector and Obsidium profiles. VMProtect and Code Virtualizer files are uploaded and paid for per result. Themida is available on subscription plans only. Enigma Protector and Obsidium jobs start with a free assessment for now. Loki-derived protections, including Obfuscator X and Griffin, are difficult cases and are not automated: every binary requires its own free assessment and an accepted written offer.
Everything else, including JavaScript VMs, .NET virtualizers, commercial packers and custom virtual machines, starts with a free assessment and a written offer. The pricing page shows how each option is paid for.
Support at a glance
| Protector | Support | Paid | Start |
|---|---|---|---|
| VMProtect 2.x and 3.x | Automated | Per result | Upload a VMProtect file |
| Themida | Automated | Subscription plans only | Compare subscription plans |
| Enigma Protector | Eligibility confirmed by assessment | Free assessment first | Start a free assessment |
| Obsidium | Eligibility confirmed by assessment | Free assessment first | Start a free assessment |
| Code Virtualizer | Automated | Per result | Upload a Code Virtualizer file |
| Loki and its derivatives | Assessment required for every binary | Quoted after assessment | Start a free assessment |
| Everything else | Assessment only | Written offer after a free assessment | Start a free assessment |
VMProtect 2.x and 3.x
VMProtect 2.x and 3.x are on the automated path, and each result is paid for on its own. Upload the file with the VMProtect family selected, or choose auto-detect.
The result contains the recovered functions in the output formats you choose, with a coverage ledger that counts every protected function Devirt detected.
Themida
Themida is on the automated path through subscription plans only; it is not sold as a one-off purchase.
All seven Oreans virtual machines are supported: FISH, TIGER, LION, DOLPHIN, PUMA, EAGLE and SHARK. Each protected file carries its own instance of a machine.
Enigma Protector
Every Enigma Protector binary starts with a free assessment. We confirm eligibility for the exact build, configuration and architecture before proposing the scope, estimated coverage and price.
The assessment ends in a written offer, and nothing is charged unless you accept it.
Obsidium
Every Obsidium binary starts with a free assessment. We confirm eligibility for the exact build, configuration and architecture before proposing the scope, estimated coverage and price.
The assessment ends in a written offer, and nothing is charged unless you accept it.
Code Virtualizer
Code Virtualizer, the standalone virtualizer from Oreans, is on the automated path and paid for per result, unlike Themida.
The upload form lists it under the Themida family, because both products rely on Oreans virtual machines.
Loki and its derivatives
Loki-based virtual machines, including Obfuscator X and Griffin, require a separate free assessment for every binary. These protections are difficult to analyze and are not offered as automated profiles.
Create an account and upload each binary for feasibility review. We email the proposed scope, estimated coverage, price and timeline. A previous assessment does not qualify another binary; paid work begins only after you accept its offer.
Assessment only
Protections outside the automated list start in your account. Upload for a free assessment in your workspace; we review the file and email a quote with scope, estimated coverage and timing. Nothing is charged unless you accept it.
- JavaScript VMs
- Anti-cheat drivers and other native-code virtualization
- DRM architecture reviews
- .NET virtualizers
- Commercial packers
- Native-code obfuscation without a virtual machine
- Custom and novel virtual machines
- Builds of a supported protector that intake does not recognize
Request an assessment for your binary
You do not need to identify the protector or send a separate contact request. Create an account, then upload for assessment in your workspace. We handle manual review and email you if more information is needed or a quote is ready.
How support is verified
Support is decided at intake, for the exact file. Intake identifies the protector and the build: a recognized, eligible build follows the automated path, and an unfamiliar one gets a free assessment instead. For Enigma Protector and Obsidium, a free assessment confirms eligibility for each exact binary.
Every result then shows what was recovered. The coverage ledger marks each function as proven, runtime-dependent, unresolved or bounded, and solver counterexamples and timeouts are not counted as proof.
Support describes what Devirt can recover, not what you may analyze. You must own each file or be authorized to analyze it, and a supported VM family does not establish permission to analyze a particular binary. Devirt refuses DRM removal, license bypass and game cracking.
Not sure which protector you have?
Create an account first, then upload in your workspace. We check the file and email a quote if it needs manual work.
Create your workspace
Create an account, verify your email and upload your file. We review custom work and email your scope and quote.