Thread: Armadilled apps
View Single Post
  #11  
Old 02-09-2005, 03:21
codeX codeX is offline
{RES} Cracker
 
Join Date: Dec 2004
Location: C:\WINDOWS\SYSTEM32
Posts: 162
Rept. Given: 1
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 3
Thanks Rcvd at 1 Time in 1 Post
codeX Reputation: 0
1. Run app in olly with
Quote:
IsDebuggerPresent
plugin.

2. Pass all exceptions and add them to ?Ignore list untill you get the previleged instruction exception. Set
Quote:
bp CreateThread
.

3. Press Shift+F9. and olly breaks on
Quote:
CreateThread
.

4. Trace untill yo reach a
Quote:
CALL EDI
.

5. Press F7 and you are on OEP.


(c) DappA/ ICU



Not fully tested.Worked on some targets with Arma 4.x.

Last edited by codeX; 02-10-2005 at 23:25.
Reply With Quote