Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   armadillo strange behavior (https://forum.exetools.com/showthread.php?t=9162)

drequinox 02-11-2006 08:52

armadillo strange behavior
 
i have an exe protected with armadillo apparently 4.xx copymem and debug blocker(as it created two processes in the memory and detects ollydbg)
peid reports it as 1.5x 2.x (overlay)
i tried to use armadillo version detector method using ollydbg but couldnt find armVersion> string.
I tried to use copymemII + debug blocker tutorial by dappa and honacho
but ...
I tried to detach son from father, by scripy arma detach,, but never finds EAX=1 , :(
manual debugging , doesnt seem to work as when ever i try to run it and do manual unpacking all the tutorial seem to fail here, as I cant even find single instruction same as in tutorials.
i am a newbie, if any one could help me I'll really appreciate it.
I am not requesting a crack I want to do it on my own, but little jumpstart is all I need.
thanks


All times are GMT +8. The time now is 06:18.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX