![]() |
|
#2
|
|||
|
|||
|
what version is it?
the same behavior i have found in new version which remove breakpoints after you have set it, you have to break on createthread after some unpack was made! please note that this target has an easy to remove DB feature (OpenMutex) look at my previous posts! I've looked at it, the problem is the program doesn't start cause it is encrypted with a key! You will never encounter the createThread before you insert the correct key (in the register on in a file) because the arma protection is before the call to the effective entry point! a solution could be to patch the arma code, then you will get a call edi after a createthread... that's my opinion if anyone wants to contribute is welcome Last edited by zaratustra; 10-13-2004 at 14:20. |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| svkp1.43 unpaking.. | evaluator | General Discussion | 8 | 09-25-2005 01:43 |