My previous question didnt get any reply.I guess it is due to it is so short and look likes crack request.So I will try to be more specific in this post hopefully
I am working on armadilo protected soft which I havent seen before.It doesnt create *.tmp file it just shows register dialog if you give wrong serial it just quits no trial option.So I couldnt managed to unpack it.Anyway, I have problems with it when I try to use SoftICE.Trw2k runs smoothly but SoftICE crashes all the time.Here is the snippet when I run my app with icedump 6.0.23(Protect on swich is activated)
0167:10005852 C685B4FDFFFF01 MOV BYTE PTR [EBP-024C],01
0167:10005859 C685A4FDFFFF01 MOV BYTE PTR [EBP-025C],01
0167:10005860 8365FC00 AND DWORD PTR [EBP-04],00
0167:10005864 0F018D8CFCFFFF SIDT FWORD PTR [EBP-0374]
0167:1000586B 8B858EFCFFFF MOV EAX,[EBP-0372]
0167:10005871 83C008 ADD EAX,08
0167:10005874 8B18 MOV EBX,[EAX] ;Here icedump stops
0167:10005876 83C010 ADD EAX,10
0167:10005879 8B00 MOV EAX,[EAX]
0167:1000587B 25FFFF0000 AND EAX,0000FFFF
0167:10005880 81E3FFFF0000 AND EBX,0000FFFF
0167:10005886 2BC3 SUB EAX,EBX
0167:10005888 83F81E CMP EAX,1E
0167:1000588B 7535 JNZ 100058C2
0167:1000588D 8B852CFCFFFF MOV EAX,[EBP-03D4]
0167:10005893 8B8D2CFCFFFF MOV ECX,[EBP-03D4]
0167:10005899 8B807C020000 MOV EAX,[EAX+0000027C]
0167:1000589F 338180020000 XOR EAX,[ECX+00000280]
0167:100058A5 8B8D2CFCFFFF MOV ECX,[EBP-03D4]
0167:100058AB 89817C020000 MOV [ECX+0000027C],EAX
0167:100058B1 834DFCFF OR DWORD PTR [EBP-04],-01
0167:100058B5 EB0B JMP 100058C2
0167:100058B7 6A01 PUSH 01
0167:100058B9 58 POP EAX
0167:100058BA C3 RET
0167:100058BB 8B65E8 MOV ESP,[EBP-18]
0167:100058BE 834DFCFF OR DWORD PTR [EBP-04],-01
0167:100058C2 0FB685A4FDFFFF MOVZX EAX,BYTE PTR [EBP-025C]
0167:100058C9 85C0 TEST EAX,EAX
0167:100058CB 0F853D010000 JNZ 10005A0E
0167:100058D1 83C8FF OR EAX,-01
0167:100058D4 83F8FF CMP EAX,-01
----will continue--------------------------
Bookmarks