The vm::utils::flatten function always takes a jump. It is used to flatten vm handlers as they were assumed to be linear before, however this is the first vm handler which a legit JCC in it!
Easy fix :)
packed modules have this xor/decrypt vm handler in them
```
mov rdx, [rbp+0]
add rbp, 8
xor eax, eax
label:
mov ecx, eax
shl eax, 7
shr ecx, 19h
or eax, ecx
xor al, [rdx]
add rdx, 1
dec dword ptr [rbp+0]
jnz label
mov [rbp+0], eax
```
The vm::utils::flatten function always takes a jump. It is used to flatten vm handlers as they were assumed to be linear before, however this is the first vm handler which a legit JCC in it!
Easy fix :)
packed modules have this xor/decrypt vm handler in them
The vm::utils::flatten function always takes a jump. It is used to flatten vm handlers as they were assumed to be linear before, however this is the first vm handler which a legit JCC in it!
Easy fix :)