More Armadillo - import reconstruction

		Exetools > General > General Discussion
More Armadillo - import reconstruction

05-30-2005, 14:23

lownoise

Posts: n/a

Ok i know that the script isn't perfect and it will never be

But it works and it can be a starting point. When the script breaks you'll be at the VirtualProtect Breakpoint. From there you'r hw breakpoints for the iat will work

You can find the oep by placing a breakpoint on the code section.
here another 2 great tuts about unpacking armadillo

hxxp://softcomx.spymac.com/ArmadilloTomoIII.zip
hxxp://softcomx.spymac.com/ArmadilloTomoIV.zip

Attached Files

armadillo_OpenMutexA.txt (606 Bytes, 42 views)

Last edited by lownoise; 05-30-2005 at 20:06.

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Import Rebuilding Without Import Table	Kerlingen	General Discussion	11	01-13-2005 10:24
Armadillo Import Elimination	Eggi	General Discussion	2	09-27-2004 02:02

All times are GMT +8. The time now is 03:24.