2 small question about armadillo...
Hi all
1-Is it possible that armadillo did not go into WriteProcessMemory due some reason? for example because a protection in one of its loaded DLLs?
2-When we try to find OEP in armadillo,normally we set a breakpoint on CreateThread and use Call ECX to find OEP. But my program did not break on CreateThread. How I can find OEP now? Is there any other api for this reason?(I used SetProcessWorkingSetSize that I seen in other tutorial and it did not work too)
Regards
__________________
I should look out my posts,or JMI gets mad on me!
|