This tool will help conversion VirtualOpcodes -> Assembly Instruction. Restoring the original code of your virtualized application, the basic engine was from CodeUnvirtualizer, my other tool.
[Features]
- Supports WinLicense/ThemIDA/CodeVirtualizer Cisc/Risc Machines
- Supports almost all common opcodes
- Supports CHECK_MACRO_PROTECTION on CISC machines
- Supppots MultiBranch Tech
[Use]
- Right-click on the jump leading to the Virtual Machine Area and press Unvirtualize (If machine isn't found you have to click again, after checking that the full machine was correctly deofuscated)
[v1.6]
- RISC machine re-designed
- Added RISC V2 machines (new branch tech)
- Added Pushad-popad instructions on risc machines
- Fixed some issues with end jump
- Added new detection for virtual machines
- Added abort button
This version should fix the latest bugs, as well as other errors, See on options panel, there is an option to use LEAVE instructions instead of MOV ESP, EBP, POP EBP (mainly for those functions that have the exactly size).
发表于 2012-12-26 06:58
