Fixed an error occurred when the Bound Import directory is moved.
Added a possibility to include marked parts of the code to the project(the beginning and the end of the fragment are marked by the following code assembler insertions – “db $EB,$10,’VMProtect begin’,0″ and “db $EB,$0E,’VMProtect end’,0″).
Added an option to include exported functions to the project.
Removed the “Encrypt bytecode” option (bytecode is now always encrypted).
Fixed errors occurred while: emulation of SBB (wrong state of some flags); emulation of CMOVxx, CMPXCHG and CMPXCHG8b (when the second operand was addressed using ESP or a DWORD value).
Added support for SEH in VB6 (native).
Added support for MAP-files generated by IDA.
Added an option for batch adding of procedures.
Added displaying of links to commands directly in the list of procedures.
Added a new option: “Encrypt registers on jumps”.
End of procedure detection process while disassembling of cycles is improved.
For UPX compatibility, Shareable flag of Writeable sections is cleared (if the old relocation table is used for VM needs).
Big fragments of code disassembly is sped up.
Metamorphism mechanism of bytecode interpreter is improved.
Fixed errors occurred when: working with PE files (when code section virtual size was equal to zero); obfuscating FPU commands (errors led to wrong results); disassembly (CWD was detected instead of CWDE); emulation of ROL and ROR commands (if the argument was 1-byte).
Added support for SSE2 command group.
Fixed an error corrupting the A flag state after emulating SUB, CMP, DEC, NEG, CMPXCHG, SCAS and CMPS commands.
Fixed an error occurred when working with an unaligned file.
Added support for BSF, BSR and CMPXCHG8b instructions.
For multi-threaded applications, you can specify a memory allocation procedure for the VM interpreter (memory allocation procedure must be defined as fastcall).
Added support for FUCOMPP and FCMOVxx instructions.
The type of strings (ANSI/Unicode/Pascal) and comments for structure fields made by compilers are now shown when looking at parts of the code.
Added a metamorphism procedure for the bytecode interpreter.
Added new compilation options: “Bytecode encryption” and “Strip relocations (for EXE files only)”.
Removed the “Obfuscate bytecode” option (now always on).
Fixed an error occurred while detecting SEH handlers for C++.
Bytecode obfuscator is totally reworked.
Relocations are highlighted in the code now.
“Free space” from original parts of code is used to store the bytecode.
Added detection of “short” pascal-format strings (first byte defines the length of a string).
Fixed bugs related to execution of online-commands in DLL/SYS.
Changed the calculation algorithm of bytecode checksum.
Added an option “VM interpreter integrity control” (also works as an anti-debug technique if the interpreter is being debugged and the debugger uses INT 03 as breakpoints).
Usage of “old” relocation tables to store the bytecode.