what version is it?
the same behavior i have found in new version
which remove breakpoints after you have set it,
you have to break on createthread after some
unpack was made!

please note that this target has an easy to remove
DB feature (OpenMutex) look at my previous posts!


I've looked at it, the problem is the program doesn't start
cause it is encrypted with a key!
You will never encounter the createThread before you
insert the correct key (in the register on in a file) because
the arma protection is before the call to the effective entry point!
a solution could be to patch the arma code, then you will get a call edi
after a createthread...
that's my opinion if anyone wants to contribute is welcome