> For the complete documentation index, see [llms.txt](https://devirt.gitbook.io/devirt/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://devirt.gitbook.io/devirt/services.md).

# Services

Devirt's devirtualization and analysis services: VMProtect, Themida, Enigma Protector, Obsidium, Loki VM and JavaScript VM recovery, plus malware, protected binary, anti-cheat driver and DRM architect

Whichever service a job uses, it ends the same way: recovered logic plus a [coverage ledger](/devirt/outputs-and-the-coverage-ledger.md). The complete overview is on [devirt.re/services](https://devirt.re/services).

## Devirtualization

| Service                                                                                  | Scope                                                                                                                                             |
| ---------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- |
| [VMProtect devirtualization](https://devirt.re/vmprotect-devirtualization)               | Recovers VMProtect-virtualized functions into an IDA database and annotated pseudocode, with every protected function accounted for in the ledger |
| [Themida devirtualization](https://devirt.re/themida-devirtualization)                   | Limited Themida recovery per file, with broader scopes on a subscription and a ledger attached to each result                                     |
| [Enigma Protector devirtualization](https://devirt.re/enigma-protector-devirtualization) | Rebuilds code hidden in the Enigma Protector virtual machine as an IDA database, with a ledger entry for each function                            |
| [Obsidium devirtualization](https://devirt.re/obsidium-devirtualization)                 | Rebuilds code from the Obsidium virtual CPU as an IDA database, with a ledger entry for each function                                             |
| [Loki VM devirtualization](https://devirt.re/loki-vm-devirtualization)                   | Covers Loki derivatives such as Obfuscator X and Griffin; every binary first receives its own free assessment                                     |
| [JavaScript VM deobfuscation](https://devirt.re/javascript-vm-deobfuscation)             | Authorized work on VM-obfuscated JavaScript, from malicious scripts to front-end security reviews and research                                    |

## Analysis

| Service                                                                      | Scope                                                                                                                                                  |
| ---------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------ |
| [Malware analysis service](https://devirt.re/malware-analysis-service)       | Examines protected and unprotected samples in isolation and returns a behavioral report with a coverage ledger                                         |
| [Software reverse engineering](https://devirt.re/binary-reverse-engineering) | Turns protected or ordinary binaries into readable logic and outputs that analysis tools can open                                                      |
| [Protected binary analysis](https://devirt.re/protected-binary-analysis)     | Authorized work on packed, obfuscated or virtualized executables, delivered in five output formats                                                     |
| [Anti-cheat driver auditing](https://devirt.re/anti-cheat-analysis)          | Documents, with evidence, what a kernel-level anti-cheat driver monitors, collects and exposes during an authorized audit. Devirt never builds cheats. |
| [DRM architecture analysis](https://devirt.re/drm-analysis)                  | Lets rights holders and vendors review their own protection design, and supports authorized interoperability and compliance work                       |

## How Devirt compares

* [Devirt or manual reverse engineering](https://devirt.re/compare/manual-reverse-engineering)
* [Devirt or a reverse engineering consultant](https://devirt.re/compare/re-consultant)
* [Devirt or general-purpose AI](https://devirt.re/compare/general-purpose-ai)

Pricing for every service is published on [devirt.re/pricing](https://devirt.re/pricing).