Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 03-09-2004, 03:40
peek
 
Posts: n/a
Hide DS2.7 with Armadillo >3.xx Problem

Hello

I have problem which I can't resolve. I try search on forum and I found many answers but it not helped me. I have Arm >3.xx protected sw and when I run it with DS2.7 + IceExt2.5 + WinXp+SP1, Arm protected sw show me error "Error while unpacking programm, code 2. Please report to author". I need to trace "Father" part of code. I try Olly but when "Father" run then Olly lose control on it and any BP not working(or I do something wrong). Can somone help me how to hide DS2.7 or give me any tips?

B.R
Reply With Quote
  #2  
Old 03-09-2004, 03:58
bedrock's Avatar
bedrock bedrock is offline
Friend
 
Join Date: May 2002
Posts: 96
Rept. Given: 8
Rept. Rcvd 5 Times in 2 Posts
Thanks Given: 20
Thanks Rcvd at 2 Times in 2 Posts
bedrock Reputation: 5
Newer Armadillo can detect iceext, maybe this is your problem

--
bedrock
Reply With Quote
  #3  
Old 03-09-2004, 04:12
peek
 
Posts: n/a
I have 2 Arm protected sw. On win98 one of sw not detect softice 4.05,second one Hang win98. On WinXP both sw show that error. So if first sw protected by Armadillo ver. 3.xx is not detected in Win98 with SICE4.05 then why on XP it's detected(or make problems to decompress). Arm not show exactly that debugger is detected but show error what I report with my first post.
thx

b.r
Reply With Quote
  #4  
Old 03-09-2004, 05:00
bedrock's Avatar
bedrock bedrock is offline
Friend
 
Join Date: May 2002
Posts: 96
Rept. Given: 8
Rept. Rcvd 5 Times in 2 Posts
Thanks Given: 20
Thanks Rcvd at 2 Times in 2 Posts
bedrock Reputation: 5
Dont know about win 98, i dont use it.

On XP, after you have net start iceext, try renameing iceext's reg key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IceExt to txEecI for example, this is the key that arma checks i think
Reply With Quote
  #5  
Old 03-09-2004, 06:18
peek
 
Posts: n/a
not help coz before install IceExt it show same message.
Anyway I'll try install newer version of DS
Do somone report here if have similar problem or not?
thx

b.r
Reply With Quote
  #6  
Old 03-09-2004, 13:02
pLayAr
 
Posts: n/a
OpenServiceA check?
and arm 3.60 checks si if you installed that
Reply With Quote
  #7  
Old 03-09-2004, 14:34
hobgoblin hobgoblin is offline
Friend
 
Join Date: Jan 2002
Posts: 124
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 2
Thanks Rcvd at 5 Times in 5 Posts
hobgoblin Reputation: 0
Hmm

If you erase IceExt information from the register, and then make sure to make the program jump at the right places, your program should run without problem. To find the "important" checks, use bp CreateFileA after attaching the child process to a running copy of Olly. After several hits, Olly will end up checking to see if Softice is installed. When that happens, exit the CreatefileA routine, and trace down a little bit in the code. There you will find the OpenService check. After that check you will find a couple of jumps that need to be changed during runtime.

Good luck,
hobgoblin
Reply With Quote
  #8  
Old 03-10-2004, 20:41
peek
 
Posts: n/a
Now other problem....

ok nothing help, I used Olly to do all
but is other problem now , I have Arma sw what use CopyMemII with 2 bytes (instead 1000) so I suspend "father" and detach "son" and I Attach "son" in second Olly, and now problems start ,coz in tutorials I found to use "Set Memory Breakpoint on Access" on second section(Memory View in Olly) in tutorials is .Text section, in my case I is CODE section and start also from 0401000 , but when after set that pbreakpoint and run it(F9) it break at some exception what I skip by SHIFT+F9 and program stop in my breakpoint range but is not OEP, there stop at some instruciton what make exceptions and program terminate. Do somone explain me or help why I can't catch OEP ?
I try to translate "150-armadillo con copymem2 sin truco de los 1000 bytes por flipi" Tutorial but there is clear wrote to make that breakpoint and program stop at OEP.

b.r
Reply With Quote
  #9  
Old 03-11-2004, 02:14
hobgoblin hobgoblin is offline
Friend
 
Join Date: Jan 2002
Posts: 124
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 2
Thanks Rcvd at 5 Times in 5 Posts
hobgoblin Reputation: 0
Hi peek

Hi peek,
PM me an url to the program you're working on, and I will take a look at it. Maybe I can help you in your efforts.

hobgoblin
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Armadillo 8.6 unpacking problem eAGLe_eYe General Discussion 8 03-11-2013 22:43
Armadillo 4.44 problem SystemeD General Discussion 2 11-06-2006 18:03
Armadillo 3.75b Problem TmC General Discussion 5 12-20-2005 10:55


All times are GMT +8. The time now is 01:30.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )