Have been revisiting and compiling info on VMP 3.x as trying to automate execution tracing while devirtualizing only key important parts of code on the code on the fly sort of tool. I had wondered why different machines had different behavior.
Quote:
Originally Posted by Aesculapius
If build number is not supported then VMP goes back to old detection methods.
|
This explains clearly why I have not seen this behavior while staying in the Windows 10 insider fast ring. Suppose its the one benefit of it
.
Respect to the old school reversers who have posted some real knowledge and true info in this thread.