![]() |
|
#2
|
|||
|
|||
|
Not sure I really understand your question.
It seems you're asking on how to reconstruct the original register based instructions? That is not possible, as that information is destroyed. For example, given that stack based VM, you cannot distinguish Code:
mov eax,ebx mov ecx,eax mov edx,ecx Code:
mov ebx,eax mov edx,ebx mov ecx,edx OTOT, for what reason do you actually want to dos this anyway? Re-assemble VM code? |
| The Following User Gave Reputation+1 to mcp For This Useful Post: | ||
Conquest (03-01-2015) | ||
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Sentinel SHK Virtual Machine | phroyt | General Discussion | 4 | 07-05-2022 23:51 |
| You do not have a Codewizard for C++ 4.3 license for this machine | matrowang | General Discussion | 0 | 05-10-2004 15:19 |
| Softice rebooting my machine | Mok | General Discussion | 4 | 09-07-2003 00:01 |