View Single Post
  #50  
Old 12-18-2010, 01:17
LCF-AT LCF-AT is offline
Lo*eXeTools*rd
 
Join Date: Aug 2008
Location: Château-Saint-Martin
Posts: 33
Rept. Given: 4
Rept. Rcvd 15 Times in 6 Posts
Thanks Given: 0
Thanks Rcvd at 2 Times in 1 Post
LCF-AT Reputation: 15
Hello,

@ BoRoV & progopis

Thanks for the new version so now it does no more crash.I have test the new version again and I get this problems.
Code:
Can't make marking IAT to address - 0043421C.
Two DLL (ƒÄ‹ÆëÚÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌl - ) are in one section,
create intersections dividers and repeat analysis!
Now I tried to decompile the VM Entry and I get this.
Code:
VMS Decompiling intermediate code...a12 final

Unknown identifier in xor efl, eax

VMS: Error Code not created
Short question: can you mabye add in the VM Reference a option where I can set BPs?Somthing like this.
Code:
VM Reference Window

Set BPs on all
Set BPs on all Postponed
Set BPs on all Processing
@ ahmadmansoor

Nice to see you again.Back in town.
So if the file not work with win Vista or 7 then try to disable the ASLR feature.So its a OS setting.Dont ask me where to find this so I just heard it also for the first time from a other win7 user.
So on the other hand it can be that Vista / Win7 are using some other APIs which you need to translate...something like for win 2000 with...

RtlGetLastWin32Error = GetLastError
RtlSetLastWin32Error = SetLastError

...maybe..you know.So unfortunately I can't test it by myself so I have just winXP and no more a VM Ware with a other OS where I can test to find the problems. Maybe you can figure out something.

greetz
Reply With Quote