View Single Post
Old 02-17-2011, 23:22
quosego quosego is offline
Join Date: Feb 2009
Posts: 104
Rept. Given: 8
Rept. Rcvd 39 Times in 13 Posts
Thanks Given: 0
Thanks Rcvd at 1 Time in 1 Post
quosego Reputation: 39
Damn nice tool,

However got around to testing this properly and it seems it always stops on a "not recognize a VM primitive 61" error. In Vmprotect. Will try some others.

It also has problems recognizing a fully deobfuscated oreans VM. (Should be easier?) And it can't recognize obfuscated hash keys which are not just push xxxxx jumps. (Macro's and API's)
Reply With Quote