2 small question about armadillo...
Hi all
1-Is it possible that armadillo did not go into WriteProcessMemory due some reason? for example because a protection in one of its loaded DLLs? 2-When we try to find OEP in armadillo,normally we set a breakpoint on CreateThread and use Call ECX to find OEP. But my program did not break on CreateThread. How I can find OEP now? Is there any other api for this reason?(I used SetProcessWorkingSetSize that I seen in other tutorial and it did not work too) Regards |
if is a one only process ( i suposse) use the OLLYBONE plugin and you are in oep in seconds
ricnar |
All times are GMT +8. The time now is 12:22. |
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX