Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #2  
Old 10-12-2004, 23:22
zaratustra
 
Posts: n/a
what version is it?
the same behavior i have found in new version
which remove breakpoints after you have set it,
you have to break on createthread after some
unpack was made!

please note that this target has an easy to remove
DB feature (OpenMutex) look at my previous posts!


I've looked at it, the problem is the program doesn't start
cause it is encrypted with a key!
You will never encounter the createThread before you
insert the correct key (in the register on in a file) because
the arma protection is before the call to the effective entry point!
a solution could be to patch the arma code, then you will get a call edi
after a createthread...
that's my opinion if anyone wants to contribute is welcome

Last edited by zaratustra; 10-13-2004 at 14:20.
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
svkp1.43 unpaking.. evaluator General Discussion 8 09-25-2005 01:43


All times are GMT +8. The time now is 16:50.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )