Jump to content
Tuts 4 You

How To Unpack Armadillo 1.84 ?


Recommended Posts

Posted

OK, finnaly I did it :thumbsup::rule1:

I have already unpacked UnPackMe_Armadillo1.84.a.exe and UnPackMe_Armadillo1.84.b.exe :lol:

P.S. Sorry for my English

Posted (edited)

For anyone that may want info on unpacking arma v1.84...

Run app, find and dump "appname.TMP0", rename .TMP0 to .exe, open dumped in olly and search for GetCommandLineA. Scroll up to the beginning of procedure to find OEP. Change EP of dumped to this OEP with your favorate editor, save and you are done. Just tried it with Armadillo.exe v1.84 and it worked. The good ol' days :^

Edited by ginastera
  • 6 months later...
Posted (edited)

Can't find the OEP...

bp GetCommandLineA breaks in the kernel32.dll and i can't find my way out the dll to reach the oep

Some help please...

EDIT:

I'm Using olly

Edited by donny
Posted

Hello

Set a BreakPoint on CreateThread for the OEP ;)

Cheers B)

Posted

hey Bro' there are many ways to get to OEP

in an armadillo Protected target one of them is by Setting

a BreakPoint At The CreateThread API And Run Trace A Little

you'll have a Call To A Register Like EDI And ECX Enter It And Voila "OEP"

else Try Setting An Access BP At The Code Section And Run The App' Or Better

Using The Exception Way To Get To OEP It's Really Easy But sucks Some Times :)

Any Way There Might Be A Magic Jump On Any Other Features

Enabled In The File So try Scanning Using Armadillo Find Protected !!

Posted

Armadillo Find Protected doesn?t recognise 1.xx and 2.xx versions...

Manually detection of used protections is needed ;)

greetz

Posted

THX bigtime... no one has the tutorials cos its old...

since im a newbiee i fing it wery usefill :devil:

thx guys one more time!!!

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...