> For the complete documentation index, see [llms.txt](https://devirt.gitbook.io/devirt/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://devirt.gitbook.io/devirt/research.md).

# Research

Devirt's published research on devirtualization methods, VMProtect, Themida, binary analysis and how to read devirtualization coverage results.

Devirt dates and versions each research article and spells out where its conclusions stop. Everything is indexed on [devirt.re/research](https://devirt.re/research).

## Topic hubs

* [Devirtualization methods](https://devirt.re/research/devirtualization): five method families, ranging from handler analysis up to LLVM lifting, and what each one is able to prove
* [VMProtect research](https://devirt.re/research/vmprotect): virtualization, mutation and Ultra mode explained, and the limits of recovery
* [Themida research](https://devirt.re/research/themida): Themida's virtual machines and why antivirus products often flag protected files
* [Binary analysis research](https://devirt.re/research/binary-analysis): static and dynamic analysis, and what a protector conceals

## Articles

* [How to read a devirtualization coverage figure](https://devirt.re/research/devirtualization/coverage-is-a-contract)
* [Runtime-dependent, unresolved and bounded functions explained](https://devirt.re/research/devirtualization/runtime-dependent-functions)
* [Protected binary analysis workflow](https://devirt.re/blog/protected-binary-analysis-workflow)
* [Sample feasibility assessment](https://devirt.re/assessment/sample)

Devirt also has profiles on [Medium](https://medium.com/@devirt) and [DEV Community](https://dev.to/devirt).