[Unpackme] Armadillo 9.61Beta X64 UnPackMe

[GIV]

This is a simple notepad.exe (Win7 X64) protected with the X64 version of Armadillo PUBLIC version so no special protection features (like in custom builds) are enabled.

If you succed to unpack make a tutorial.

Good luck!

notepad.rar

[JeRRy]

And a keygenme?

 

 

Also don't use an application that's available on everyone's PC.

[GIV]

Make a try mate.

I'm sure eXoDia will came with something.

[Dragon Palace]

you are team REPT unpacker, I'm sure you can unpack and make tutorial yourself.

[GIV]

you are team REPT unpacker, I'm sure you can unpack and make tutorial yourself.

I'm retired from RePT (the title did not changed there but i ask Mastermind to move me  in retired members area some time ago).

And please do not make personal attacks. Stay ON topic.

[Dreamer]

if is posible to you make 32 byte version cannot run this on my pc thx in advanced

[GIV]

if is posible to you make 32 byte version cannot run this on my pc thx in advanced

LOL...

You don't get-it?

[0x2h]

if is posible to you make 32 byte version cannot run this on my pc thx in advanced

make VM?

[mrexodia]

GIV: can your provide a valid key? If I try unpacking I'm not going to waste three hours brute forcing...

Greetings

[GIV]

GIV: can your provide a valid key? If I try unpacking I'm not going to waste three hours brute forcing...

Greetings

Ok.

Here is a "easyer" one.

Because is a common program on 7 X64 the tutorial is the request not the unpacked file because anyone can copy this from the system folder and claim that he unpacked.

StikyNot.rar

[mrexodia]

ah, finally...

edit: tutorial: http://forum.tuts4you.com/topic/33025-armadillo-x64-unpacking-tutorial/

dump_cleaned_SCY.rar

Edited August 25, 2013 by Mr. eXoDia

[GIV]

ah, finally...

edit: tutorial: http://forum.tuts4you.com/topic/33025-armadillo-x64-unpacking-tutorial/

lol

You did'it.

Should i check more protection options?

P.S.

I see the technique is the same as X86.

I'm wrong?

Edited August 25, 2013 by GIV

[mrexodia]

you can check whatever you like, there is only CopyMem2 left though...

the technique indeed the same, I unpacked it more to show my debugger