Armadilled apps - Exetools

		Exetools > General > General Discussion
Armadilled apps

#11

02-09-2005, 03:21

codeX

{RES} Cracker

Join Date: Dec 2004

Location: C:\WINDOWS\SYSTEM32

Posts: 162

Rept. Given: 1

Rept. Rcvd 0 Times in 0 Posts

Thanks Given: 3

Thanks Rcvd at 1 Time in 1 Post

1. Run app in olly with

Quote:

IsDebuggerPresent

plugin.

2. Pass all exceptions and add them to ?Ignore list untill you get the previleged instruction exception. Set

Quote:

bp CreateThread

.

3. Press Shift+F9. and olly breaks on

Quote:

CreateThread

.

4. Trace untill yo reach a

Quote:

CALL EDI

.

5. Press F7 and you are on OEP.

(c) DappA/ ICU

Not fully tested.Worked on some targets with Arma 4.x.

Last edited by codeX; 02-10-2005 at 23:25.

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Strange Crash in Armadilled Program	TmC	General Discussion	4	06-03-2006 21:08
Armadilled Programs with Custom Implementation	TmC	General Discussion	3	05-15-2006 08:58
Setup Factory 7.0.2.0 De-Armadilled Problem	TmC	General Discussion	3	05-07-2005 23:02

All times are GMT +8. The time now is 14:48.