Contribute  :  Web Resources  :  Past Polls  :  Site Statistics  :  Downloads  :  Forum  
    BiW ReversingThe challenge is yours    
 Welcome to BiW Reversing
 Tuesday, February 19 2019 @ 08:39 AM CET
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Unpacking Armadillo 4.30a DebugBlocker CRACKME

 
Post new topic   Reply to topic    www.reversing.be Forum Index -> Unpacking
View previous topic :: View next topic  
Author Message
JackAngel
New to the board
New to the board


Joined: 17 Aug 2007
Posts: 1

PostPosted: Fri Aug 17, 2007 10:27 pm    Post subject: Unpacking Armadillo 4.30a DebugBlocker CRACKME Reply with quote

It's this one hxxp://www.reversing.be/binaries/articles/20051002151522418.rar

I detach using Ollydbg plugin.
Attach in another Ollydbg instance.
I create bp on CreateThread
Shift+F9
F8....F7 on RETN 18
and instead of ending up to POP EDI,POP ESI....etc...(Address 00A294c4)
i end up on MOV EAX,1 ; TEST EAX,EAX (Address 0043316C).

Please advise - what am i doing wrong
I have unpacked successfully the CrackMe Armadillo 4.30a Simple Protection
Back to top
View user's profile Send private message
Knight
Regular
Regular


Joined: 21 Aug 2005
Posts: 122

PostPosted: Sun Aug 19, 2007 12:53 pm    Post subject: Reply with quote

So long since i had arma protected exe loaded in my olly Smile
Well i successfuly reach oep using classical technique.
Assuming you detached parent process and attached to child correctly everything should go fine (well i did that manually, so maybe there's some flaw in plugin you've used).
Another problem can be that maybe you close olly with parent process... it should be running at least till you reach oep.

Regards,
Knight
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    www.reversing.be Forum Index -> Unpacking All times are GMT + 1 Hour
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
 Copyright © 2019 BiW Reversing
 All trademarks and copyrights on this page are owned by their respective owners.
Powered By Geeklog 
Created this page in 0.06 seconds