.dll
October 13th, 2008, 15:01
I am having an issue unpacking Armadillo 4xx-6xx. Hope someone can shed some light on the problem, when trying to find my OEP (BP CreateThread) I land on MOV EDI,EDI and run to(Ctrl+F9) RET 18 then step over (F8) which should land me in a short(bout 5 steps) routine ended by a RETN which should in end lead you to OEP...
http://img367.imageshack.us/img367/4691/capture1ik8.jpg
only I land here after RET 18 with no short routine ended by RETN.
http://img56.imageshack.us/img56/3387/capturera4.jpg
This is the outcome every time I try CreateThread BP method on various files and I cant find OEP.
Any advice appreciated...
http://img367.imageshack.us/img367/4691/capture1ik8.jpg
only I land here after RET 18 with no short routine ended by RETN.
http://img56.imageshack.us/img56/3387/capturera4.jpg
This is the outcome every time I try CreateThread BP method on various files and I cant find OEP.
Any advice appreciated...