devirt.re
Create account
Menu

Supported protectors.

Find your protector, see whether Devirt automates it, and start in the right place: an upload, a free assessment or a subscription plan.

Not sure which protector you have? Start with the free assessment. Updated .

Protected programSHA-256 recordedRecoverH_04H_12H_21H_33Readable outputvalidate_header()Differential checkOriginalRecoveredCoverage ledgerProvenRuntimeBoundedIllustrative example · no customer dataProtected program → readable logicAuthorized filevalidate_record()Original / recoveredCoverage ledgerProvenRuntimeBounded
Support depends on the protector and the build. Intake checks both.

Which protectors does Devirt support?

Devirt automates recovery for VMProtect 2.x and 3.x, Themida, Code Virtualizer, Enigma Protector and Obsidium profiles. VMProtect and Code Virtualizer files are uploaded and paid for per result. Themida is available on subscription plans only. Enigma Protector and Obsidium jobs start with a free assessment for now. Loki-derived protections, including Obfuscator X and Griffin, are difficult cases and are not automated: every binary requires its own free assessment and an accepted written offer.

Everything else, including JavaScript VMs, .NET virtualizers, commercial packers and custom virtual machines, starts with a free assessment and a written offer. The pricing page shows how each option is paid for.

Support at a glance

Supported protectors and where each one starts
ProtectorSupportPaidStart
VMProtect 2.x and 3.xAutomatedPer resultUpload a VMProtect file
ThemidaAutomatedSubscription plans onlyCompare subscription plans
Enigma ProtectorEligibility confirmed by assessmentFree assessment firstStart a free assessment
ObsidiumEligibility confirmed by assessmentFree assessment firstStart a free assessment
Code VirtualizerAutomatedPer resultUpload a Code Virtualizer file
Loki and its derivativesAssessment required for every binaryQuoted after assessmentStart a free assessment
Everything elseAssessment onlyWritten offer after a free assessmentStart a free assessment

VMProtect 2.x and 3.x

VMProtect 2.x and 3.x are on the automated path, and each result is paid for on its own. Upload the file with the VMProtect family selected, or choose auto-detect.

The result contains the recovered functions in the output formats you choose, with a coverage ledger that counts every protected function Devirt detected.

Themida

Themida is on the automated path through subscription plans only; it is not sold as a one-off purchase.

All seven Oreans virtual machines are supported: FISH, TIGER, LION, DOLPHIN, PUMA, EAGLE and SHARK. Each protected file carries its own instance of a machine.

Enigma Protector

Every Enigma Protector binary starts with a free assessment. We confirm eligibility for the exact build, configuration and architecture before proposing the scope, estimated coverage and price.

The assessment ends in a written offer, and nothing is charged unless you accept it.

Obsidium

Every Obsidium binary starts with a free assessment. We confirm eligibility for the exact build, configuration and architecture before proposing the scope, estimated coverage and price.

The assessment ends in a written offer, and nothing is charged unless you accept it.

Code Virtualizer

Code Virtualizer, the standalone virtualizer from Oreans, is on the automated path and paid for per result, unlike Themida.

The upload form lists it under the Themida family, because both products rely on Oreans virtual machines.

Loki and its derivatives

Loki-based virtual machines, including Obfuscator X and Griffin, require a separate free assessment for every binary. These protections are difficult to analyze and are not offered as automated profiles.

Create an account and upload each binary for feasibility review. We email the proposed scope, estimated coverage, price and timeline. A previous assessment does not qualify another binary; paid work begins only after you accept its offer.

Assessment only

Protections outside the automated list start in your account. Upload for a free assessment in your workspace; we review the file and email a quote with scope, estimated coverage and timing. Nothing is charged unless you accept it.

Start a free assessment

Request an assessment for your binary

You do not need to identify the protector or send a separate contact request. Create an account, then upload for assessment in your workspace. We handle manual review and email you if more information is needed or a quote is ready.

How support is verified

Support is decided at intake, for the exact file. Intake identifies the protector and the build: a recognized, eligible build follows the automated path, and an unfamiliar one gets a free assessment instead. For Enigma Protector and Obsidium, a free assessment confirms eligibility for each exact binary.

Every result then shows what was recovered. The coverage ledger marks each function as proven, runtime-dependent, unresolved or bounded, and solver counterexamples and timeouts are not counted as proof.

Support describes what Devirt can recover, not what you may analyze. You must own each file or be authorized to analyze it, and a supported VM family does not establish permission to analyze a particular binary. Devirt refuses DRM removal, license bypass and game cracking.

Not sure which protector you have?

Create an account first, then upload in your workspace. We check the file and email a quote if it needs manual work.

Create your workspace

Create an account, verify your email and upload your file. We review custom work and email your scope and quote.

Start a free assessment

Find the right plan