VM decompiler tool (VMProtect, CodeVirtualizer)

[ahmadmansoor]

Hi LCF-At :
Thanks for ur nice word's , yes I am back ,but I still weak (ill) .
anyway about "ASLR feature" as u describe it ,it is feature in upper OS like win 7 & Vista .
and disable it not that good , I have read this

Unfortunately there is no legitimate way to disable ASLR on Windows Vista and later. In fact, it is a security enhancement and no one should try disabling it.

I have try to disable it by a command line (get it form the net ),and my OS fail .
anyway as I told u I have a plane to support ur script , but I have to be sure it will be work ,and I will send all the details to u when finish , maybe we could prove it and improve it . let hope it will work .
thanks for all ur great work .

by the way for me the plugin not work on my target , can u try it on ur PC ,thanks

[LCF-AT]

Hhmmm,ah ok.I will send you some power up's.

Seems to be really a problem with the ASLR stuff.Oh I am curious for your plan & results. I will wait till you are done.

So do you mean the S Eye app?If yes then I have to say that the target is no more on my HDD.

Or do you mean your VB target which you have attached here on board?If yes then I can say that I have test it again with the latest plugin version and it still not work and hangs again on 21 % durring the VM Analyzing.Nothing happend after this.So I think BoRoV & progopis should use this VB target too to find the problem.

greetz

[ahmadmansoor]

Originally Posted by LCF-AT

Hhmmm,ah ok.I will send you some power up's.

Ooops ..... Ooo pls ,because I needed

Originally Posted by LCF-AT

Seems to be really a problem with the ASLR stuff.Oh I am curious for your plan & results. I will wait till you are done.

it will be soon - dll file I hope or maybe 2 dll file -

Originally Posted by LCF-AT

So do you mean the S Eye app?If yes then I have to say that the target is no more on my HDD.
Or do you mean your VB target which you have attached here on board?If yes then I can say that I have test it again with the latest plugin version and it still not work and hangs again on 21 % durring the VM Analyzing.Nothing happend after this.So I think BoRoV & progopis should use this VB target too to find the problem.
greetz

yes my friend both , but the first one is Good example , I think .