stellios
July 6th, 2010, 06:06
Dear RCE, I'm trying to unpack and dump a program with arma v2-2.8, code splicing and iat elimination protection. The problem is that this prog open's a child process which is the one i'm trying to unpack/dump and them terminates itself leaving the child running.. The parent is easily unpacked with armageddon and dumped, however the child process(the actual program that runs) cannot be unpacked/dumped the same way... What am i missing here? process detach? HOW.. Any help/suggestions appreciated