![]() |
|
|
|
#1
|
|||
|
|||
|
Quote:
programs such as PEid or trId.This programs show you the packer name and its version. sincerely yours
__________________
I should look out my posts,or JMI gets mad on me!
|
|
#2
|
|||
|
|||
|
thats not true for armadillo.... peid says armadillo 3.78 if it uses the layer from the adata section as ep (ep is a pushad then)
but if a author uses minimum protection it will have a push ebp at the ep and so peid will identify it as 1.x - 2.x also if its a newer version... |
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Strange Crash in Armadilled Program | TmC | General Discussion | 4 | 06-03-2006 21:08 |
| Armadilled Programs with Custom Implementation | TmC | General Discussion | 3 | 05-15-2006 08:58 |
| Setup Factory 7.0.2.0 De-Armadilled Problem | TmC | General Discussion | 3 | 05-07-2005 23:02 |