![]() |
|
|
|
#1
|
||||
|
||||
|
Quote:
Just watch my commands in the unpack script and you will know when, why and what you must do to unpack a Armadillo file. And is there the IAT elimination feature present. IAT scrambling is import redirection - imports are in the import table but they are redirected and their names are not visible and you need to reconstruct their names - and IAT elimination is that imports table is scattered all over the file and you need to gather and put in one place. Just step command by command and you will see the magic reveal. You do not need any tutorial when a script is available. Just trace command by command and you will see live the things happening. Then you will conclude by yourself. All protectors do the same thing. Encapsulate the protected file into their own shell and try to fool the debugger by hiding the OEP and parts of the code or redirect or rebase some imports or resources. Just the method is different on each protector. Last edited by giv; 10-24-2017 at 14:08. |
|
#2
|
|||
|
|||
|
Hi there,
@GIV Sorry to bother, but would you post a link for the script please, I am still at Rept. 2 can't download attachments (I thought the restriction's for Rept. < -10, whatever). @wilson bibe Bro just ask me about the commercial app thing, some still call me a pirate for that. What did I do now? Am I supposed to believe, the people who ask help on crack mes never tries that on commercial app. Everyone's doing it behind the crack mes, and my mistake is what? not being creepy, pffff... It seems, these days its rather easy to get away with lies, cheating and faking but the whole world will punish you if you take the straight road. Anyway lets just focus on the target. |
![]() |
| Tags |
| armadillo, armadillo unpacking, import elimination, tutorial request |
| Thread Tools | |
| Display Modes | |
|
|