Code Virtualizer [3.2.1.0] (06-Sep-2024) |
|
[+] |
x86/x64: Improved spinlock mechanism for entering and exiting the VM |
[+] |
ARM64/x86/x64: Enhanced detection of localized strings for the string encryption feature |
[+] |
ARM64: Added a detection to identify when an encrypted string is referenced from different code locations |
[+] |
ARM64/x86/x64: Added log of unused "Stealth Data Area" space |
[!] |
x64: Fixed a race condition occurring during parallel execution within a specific VM |
[!] |
x86/x64: Fixed handling of specific virtualized instructions with "lock" prefix |
[!] |
x64: Fixed memory allocation issue when only a re-virtualized VM was added into the protected binary |
[!] |
ARM64/x86/x64: Fixed calculation of required Pool data area when using MAP functions |
[!] |
ARM64/x86/x64: Fixed exit code when protecting via command line and there are no protection macros inserted |
[!] |
x64: A MAP function from a x64 binary could be assigned to an ARM64 VM with "SHIFT+Arrow" |
[!] |
ARM64/x86/x64: Fixed issue not reading correctly the size of the Stealth Data Area |
Code Virtualizer [3.2.0.0] (28-Aug-2024) |
|
[+] |
ARM64/x86/x64: Added parallel execution within each VM instance (32 virtual cores by default) |
[+] |
ARM64/x86/x64: Improved protection in FISH VM |
[+] |
ARM64/x86/x64: Improved protection in PUMA VM |
[+] |
ARM64/x86/x64: Improved speed loading/parsing the target binary |
[+] |
x86/x64: Improved detection of macro markers in GO applications |
[+] |
ARM64/x86/x64: Added support with "Compress Virtual Machine" for ELF and Mach-O binaries |
[+] |
ARM64/x86/x64:Improved detection of Stealth Areas |
[+] |
x64: Improved search of pointers to strings in macro markers (for encryption) |
[+] |
ARM64/x86/x64: Improved randomization in VM registers |
[+] |
ARM64/x86/x64: Added support for MAP files generated by IDA disassembler |
[+] |
x86/x64: Added support for encrypted strings when either "Optimize for Windows on ARM" or "OPTION_ADVANCED_NO_EXECUTABLE_WRITABLE_SECTION" is enabled |
[+] |
ARM64/x86/x64: Added support for encrypted strings with Stealth Regs area |
[+] |
ARM64/x86/x64: Added support for encrypted strings in PE/ELF/Mach-O files |
[+] |
ARM64/x86/x64: Added random pool data area |
[+] |
ARM64/x86/x64: New design for protected symbols/variables insertion |
[+] |
ARM64: Added support for command line switch "/checkprotected" |
[+] |
ARM64/x86/x64: Added string "Re-Encrypt" option |
[+] |
ARM64/x86/x64:Improved parsing of MAP files |
[+] |
ARM64/x86/x64: Falcon VM virtualization allowed in DEMO version |
[+] |
ARM64: Optimized search of macro markers when called from API functions |
[+] |
ARM64: Improved code mutation engine |
[+] |
ARM64: Added MUTATE macro |
[+] |
ARM64: Added support for nesting STR_ENCRYPT macros inside MUTATE macros |
[+] |
ARM64/x86/x64: Added Advanced Option "OPTION_ADVANCED_MAX_CPUS_IN_EACH_VM_INSTANCE" to change the maximum number of virtual cores for each VM instance |
[+] |
ARM64/x86/x64: Added "HW Stack Protection Support" option in GUI |
[+] |
x86/x64: Added compatibility with Hardware-enforced Stack Protection with option "Compress Virtual Machine" |
[!] |
x86/x64: Fixed specific compatibility issue finding protection macros via an external ASM module |
[!] |
ARM64: Fixed assembling of ADRP opcode with negative pages |
[!] |
ARM64/x86/x64: Minor bugs fixed |
Code Virtualizer [3.1.9.0] (28-Mar-2024) |
|
[+] |
Improved virtualization of "REP string" opcodes |
[+] |
More improvements in the dereferences engine |
[+] |
Improved detection of protection macro markers in VB6 |
[+] |
Added FALCON TINY VM support for VB6 |
[+] |
Added map file parser for Xcode Clang compiler |
[+] |
Added .ini option "DisableStealthAreaScanning" to skip searching for Stealth Areas |
[+] |
Improved compatibility protecting Windows Device Drivers |
[+] |
ARM64: Improved speed loading/parsing binaries |
[+] |
ARM64: Improved support detecting protection macro markers for Delphi 12 applications |
[+] |
ARM64: Improved virtualization for "ASR reg, reg, imm" |
[!] |
Fixed random bug in repermutator engine when generating specific VM architectures |
[!] |
Fixed bug in dereferences engine when macros from a MAP file are unselected |
[!] |
ARM64: Fixed virtualization for specific TBZ/TBNZ instructions |
[!] |
ARM64: Fixed handling of "LDR reg, label" instruction for floating-point registers |
[!] |
ARM64: Fixed C include file for GCC compiler |
Code Virtualizer [3.1.8.0] (15-Jan-2024) |
|
[+] |
Improved detection of false strings in STR_ENCRYPT protection macros |
[+] |
x64: Improved support for try/catch inside virtualization markers |
[+] |
Added Advanced Option "OPTION_PROTECTION_DONT_PRESERVE_SECTIONS_FLAGS" |
[+] |
Improved restoration of GUI windows positions when a monitor has been disconnected |
[+] |
Added an .ini option "DisableMacroScanning" to skip parsing of the file for searching protection macro markers |
[+] |
Added warning when protecting Mach-O files with Stealth Mode but stealth regs area is not present |
[+] |
ARM64: Improved parsing of protection macros via API functions |
[!] |
x64: Fixed bug in "CAT_BLACK VM" |
[!] |
Fixed compatibility issue when inserting via MAP file and instruction after the last one is a JMP [IAT] |
[!] |
Fixed random exception when parsing specific applications when searching for strings to encrypt |
[!] |
ARM64: Fixed virtualization of arithmetic operations with SP register and LSL/UXTB extensions |
[!] |
ARM64: Fixed search of Mach-O API markers when using multi-core protection |
Code Virtualizer [3.1.7.0] (02-Oct-2023) |
|
[+] |
Added FALCON TINY VM, a very fast VM with low protection |
[+] |
Improved parallelism generating common (non revirtualized) virtual machines |
[+] |
Improved parallelism generating revirtualized VMs |
[+] |
Optimized LONDON virtual machine engine |
[+] |
Optimized generation of micro-ops for specific VM architectures |
[+] |
More improvements parallelizing the code virtualization process |
[+] |
Added full parallelization to search for protection macro markers |
[+] |
Improved compatibility with Advanced Option "OPTION_ADVANCED_VM_ENGINE_PRESERVE_FLAGS_ON_EXIT=NO" and re-virtualized VMs |
[+] |
Improved support in MUTATE macros in multithreading applications |
[+] |
Advanced Option "OPTION_ADVANCED_INITIAL_SEED" now produces a 100% exact match output file (even with parallel protection) |
[+] |
Decreased amount of protection memory when inserting multiple virtual machines |
[+] |
Added Advanced Option "OPTION_ADVANCED_SKIP_MISSING_MAP_FUNCTIONS" to keep protecting even if missing functions in MAP file |
[+] |
Added Advanced Option "OPTION_ADVANCED_LIMIT_CORES_FOR_PROTECTION" to restrict the number of cores during the protection stage |
[+] |
Improved detection of Golang applications |
[+] |
When stealth regs and code areas are present, no writable/executable sections will be created |
[+] |
Added Rust example file to use the Stealth Mode insertion |
[+] |
Opening of last project is now independent from x86/x64 and ARM64 versions |
[+] |
Logged the time taken for protection and final MD5 hash in the final protection report |
[+] |
ARM64: Optimized generation of DOLPHIN VM |
[+] |
ARM64: Improved decoding/encoding of ARM64 instructions |
[+] |
ARM64: Improved virtualization of test/compare branch instructions |
[+] |
ARM64: Added Stealth Mode insertion support |
[+] |
ARM64: Modified design of the ARM64 opcode mutator to support full parallelism |
[!] |
Fixed compatibility issue with macro markers in specific Golang applications |
[!] |
Fixed exit code when protecting via the command line and passing a non existing file to protect |
[!] |
Fixed exception in protection time when more than 100 customized VMs are present |
[!] |
ARM64: Fixed virtualization of EON instruction when "rd" and "rn" registers are the same |
[!] |
ARM64: Fixed specific virtualization of MOVK instruction when using "shift 48" under TIGER VM |
[!] |
ARM64: Fixed several virtualization issues on TIGER VM |
[!] |
ARM64: Fixed wrong modification of flags in specific opcodes in LION VM |
[!] |
ARM64: Fixed sign extension when decoding specific ARM64 instructions |
[!] |
ARM64: Fixed search of dereference code inside protection macros in computers with more than 32 cores |
SEE ALL VERSIONS