Hi all,


I have a program protected by Armadillo v 2.2 or higher. I have tried to unpack it by Armkiller's Unarmadillo or Analyst's Deprotector, but it do not work. So can anybody tell me how to unpack it manually?

thanks

first try doing a search on this forum for Armadillo then if your still stuck tell us where your stuck

people here are always willing to help those who help themselves

Hi Viper,

I have read all tuts about Armadillo on this forum and other sites, I think that these tuts can work on armadilo-ed program v2.x or below.I also know the Silicon Realms Toolworks use the CopyMemII routine to encrypt the real code.The whole code is splitted in 16kBytes sections and only decrypted if there is a call to this section.So dumping the memory occupied by protected application do not work. I tried set bpx writeprocessmemory but unfortunately, there are many calls to this function.
I have chosen the virtualProtectEx as breakpoint as somebody recommended but in vain also.

How do I have to go on?


thanks for your attention.