Results 1 to 14 of 14

Thread: Armadillo 2.51 - 3.xx DLL unpacking - OEP?

Threaded View

  1. #1

    Armadillo 2.51 - 3.xx DLL unpacking - OEP?

    hi all..

    attempting to unpack a arma protected dll..

    the DLL is opened by Internet explorer.. blah blah, not a prob..
    attach explorer.exe and i get teh priviledged instrcution from arma.. and attemp to unpack from there..

    anywho im having trouble find the entry point...
    i usually bpx on SetProcessWorkingSetSize or GetCurrentthreadId to get to OEP..

    but this is not working? (or well it might take me to OEP.. but im sure its not hte right way.. maybe)

    any tips on getting to oep?
    Last edited by MEPHiST0; May 20th, 2004 at 22:55.

Similar Threads

  1. ARTeam: ArmaGeddon v1.0 Conceptual overview tool for unpacking Armadillo by CondZero
    By Shub-nigurrath in forum Advanced Reversing and Programming
    Replies: 71
    Last Post: June 7th, 2008, 11:18
  2. Indentifing Armadillo version & unpacking
    By zambuka42 in forum Malware Analysis and Unpacking Forum
    Replies: 1
    Last Post: November 23rd, 2004, 23:02
  3. Armadillo once again (wrong IAT after unpacking)
    By friedo in forum Malware Analysis and Unpacking Forum
    Replies: 3
    Last Post: June 25th, 2004, 02:56
  4. Armadillo 2.x/3 DLL stub unpacking
    By SysCall in forum Malware Analysis and Unpacking Forum
    Replies: 14
    Last Post: May 12th, 2004, 15:19
  5. Armadillo unpacking: NetScanTools v4.30a
    By Solomon in forum Malware Analysis and Unpacking Forum
    Replies: 18
    Last Post: November 9th, 2002, 12:45

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •