Unpacking Armadillo 4.30a DebugBlocker CRACKME

JackAngel · New to the board Joined: 17 Aug 2007 Posts: 1

It's this one hxxp://www.reversing.be/binaries/articles/20051002151522418.rar

I detach using Ollydbg plugin.
Attach in another Ollydbg instance.
I create bp on CreateThread
Shift+F9
F8....F7 on RETN 18
and instead of ending up to POP EDI,POP ESI....etc...(Address 00A294c4)
i end up on MOV EAX,1 ; TEST EAX,EAX (Address 0043316C).

Please advise - what am i doing wrong
I have unpacked successfully the CrackMe Armadillo 4.30a Simple Protection

Knight · Regular Joined: 21 Aug 2005 Posts: 122

So long since i had arma protected exe loaded in my olly Smile

Well i successfuly reach oep using classical technique.
Assuming you detached parent process and attached to child correctly everything should go fine (well i did that manually, so maybe there's some flaw in plugin you've used).
Another problem can be that maybe you close olly with parent process... it should be running at least till you reach oep.

Regards,
Knight