I saw the following lines on vmprotect, What are the purposes of these lines?
Unknown lines on my functions
Re: Unknown lines on my functions
This is information about try/catch/finally blocks in the function. Here is more detailed information if you need:
https://yurichev.com/mirrors/RE/Recon-2 ... ernals.pdf
https://yurichev.com/mirrors/RE/Recon-2 ... ernals.pdf
Re: Unknown lines on my functions
When I try to virtualize functions which contain lines like above many antiviruses show my application as "Gen:Variant.Ursu.546526".
This problem just occurred when I virtualize these functions.
Do you have any suggestion to remove these lines completely?
And I don't use try/catch/finally blocks on my code.
This problem just occurred when I virtualize these functions.
Do you have any suggestion to remove these lines completely?
And I don't use try/catch/finally blocks on my code.
Re: Unknown lines on my functions
I don't think so )When I try to virtualize functions which contain lines like above many antiviruses shows my application as "Gen:Variant.Ursu.546526".
Please notice that it's a part of your function like other commands (MOV, RET, etc.) and it can't be removed.Do you have any suggestion to remove these lines completely?
It seems you don't know how compilers work. For example:And I don't use try/catch/finally blocks on my code.
Code: Select all
class MyClass
{
public:
MyClass();
~MyClass()
{
printf("~MyClass()/n");
}
...
}
void Main()
{
MyClass my_object();
...
}
Code: Select all
void Main()
{
MyClass my_object();
try {
...
} finally
{
delete my_object;
}
}
Re: Unknown lines on my functions
Thank you for the detailed answer.
If I use a code signing certificate on my software, Do the negative results decrease?
If I use a code signing certificate on my software, Do the negative results decrease?