![]() |
|
#1
|
|||
|
|||
|
Armadillo 3.75b Problem
Hi,
I have a problem with an armadillo target. Link: dillo://www.moonlight-software.com/vbpower4-trial.exe The software is called vb power wrap (it doesn't matter what it does now...) and it is protected with Armadillo 3.75b. I don't know the settings. I tried all the olly scripts, all tutorials but there isn't one that fits this case. I set breakpoints on WriteProcessMemory and WaitForDebugEvent and Olly never breaks. I Succesfully managed to detach parent from son and i replaced the jmp with original bytes (558B). If i now proceed with bp on CreateThread a msg box pops up saying "The Main thread has been suspensed. Please resuma main thread" or something like that. Has anyone hints on how to proceed or can give me a good tutorial to follow or script, or simply suggest a way? Repeat, i don't know the settings, it seems to be Standard+Debug Blocker. (No Nanomites(If i do cc search nothing comes out) don't think iat elimination, maybe code splicing and maybe memory patching options. Thanks in advance |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Armadillo 8.6 unpacking problem | eAGLe_eYe | General Discussion | 8 | 03-11-2013 22:43 |
| Armadillo 4.44 problem | SystemeD | General Discussion | 2 | 11-06-2006 18:03 |
| Hide DS2.7 with Armadillo >3.xx Problem | peek | General Discussion | 8 | 03-11-2004 02:14 |