🔹 Program Name & Version: Kyo version:???

🔹 Protection Analysis (DIE, PEiD, ProtectionID results):

🔹 Any Extra Protections: VM detection ,

Upon opening, if it doesn't detect any login or that it was opened without using the login form, it displays an error message, opens the application (the form I need), and closes quickly. It executes a .bat file to delete the application. Information from the .bat file:

:DEL1

del "New folder\pymg.exe"

IF EXIST "New folder\pymg.exe" GOTO DEL1

:DEL2

del "New folder\del.bat"

IF EXIST "New folder\del.bat" GOTO DEL2

🔹 What Does the Program Do?: memory edition for Pangya game

🔹 Supported Systems & Architectures : Windows 10-11 x64 & x32

🔹 Screenshot(s) of the Program:
when opening the login(KYO.exe):

To open the file that performs the memory editing (pymg.exe):

What should I open would be this form (pymg.exe):

🔹 Limitations (e.g. trial restrictions, locked features): You can open it in x32dbg with the ScyllaHide plugin loaded with VMProtect x86/x64.

🔹 Download Link (Preferably original or clean source): https://mega.nz/file/CaYVESrC#iup3wkxVU_lR9zNqLyXOcC_Ja_usHMsy1CIpjfTDqc4

🔹 Additional Notes (Optional): The name of KYO.exe cannot be changed; it detects that it has been altered.

Open