|
yes
For emulate a debugger than work with the child maybe useful, but the debugger can contain all decryption routines and tables used in the last version of armadillo (terrible), and don't forget the 1000 byte decryption rutine and encryption.
I see useful for work with the iat and magic jump, without the father but i think is more complicated in the last versions, make a debugger than decrypt the nanomites and the 1000 bytes block, than unpack and repair the naomites with the actual method, is only mechanical work, with scripts and injects, the computer work, not me.
The time consumed for make a debugger than work, decrypt and repair the nanomites is larger of a time for make injects and scripts then repair the nanomites in the actual method.
But is question of taste jeje and very good work too.
And a good work of this cracker too, very good work.
Ricardo Narvaja
|