|
what kind of software is it? what peid said about main executable?
if you mean armadillo debug-blocker, then catch moment when WriteProcessMemory writing memory at OEP and put EB FE there
if you mean simple CreateProcess then modify process creation flags to CREATE_SUSPENDED
|