View Full Version : Armadillo protection
incapable
August 28th, 2002, 22:34
Target file dvdidle : dvd region-free
This file is armadillo protect.
Has someone any idea to defeat this.
How can i unpack this target.
Thanks,
Incapable (in France)
Js
August 28th, 2002, 22:53
No doubt the easiest way is armkiller's excellent dumper and rv to rebuild imports. Contrary to popular opinion I think you can use a tool like armkiller's and learn from it if you are prepared to put in the work.
regards
JMI
August 28th, 2002, 23:12
incapable:
These Forums are equipped with "Search" buttons which appear at the top of the Forums. Go to the search button and enter "armadillo" on the left side and you will find many threads about how to unpack armadillo. Read those threads and you will learn alot about what you need to do. You should ALWAYS attempt to help yourself BEFORE you ask someone else to do your work for you.
Regards.
incapable
August 29th, 2002, 00:48
JMI,
I search in the forum before to post my question.
As you can see, except the armkiller tool, any really good solution to defeat armadillo 2xx.
So, i seek info to learn about.
Regards,
Incapable (in France)
evaluator
August 29th, 2002, 22:38
OK!
Now IF_you_search_was_unsuccessfull, make Question!
"I not understand this..there..How to.."
JMI
August 29th, 2002, 22:59
incapable:
It is obvious that you DID NOT read the contents of the Forums on unpacking armadillo, as there are TWO FULL PAGES of threads with this subject, many, if not most of which are about unpacking this protection system. There are several LONG threads which discuss the issues in detail.
Since you have NOT shown that YOU have done ANY work, it would appear that all you want is for SOMEONE ELSE to crack this program for you, or give you a tool to do the job and that is not what is done here.
As the Forum Guidelines will inform you, if you had bothered to read them, if you want help, you need to do your own research, make your own attempts, and when you get stuck, come and show your work and where you are stuck and someone will most likely attempt to guide you to the right path to an answer.
Regards.
incapable
August 31st, 2002, 00:19
Je vous répond en français, parce que sincèrement, vos réponses me gonflent.
Oui, j'ai regardé les différents sujets des forums, mais je n'y ai trouvé aucune réponse pertinente.
Oui, j'ai essayé plusieurs choses, comme virer les anti-sices, Wdasm, patcher en mémoire, softice et setprocessworkingsetsize, push 0/1.
Je m'étonne, que personne n'essaie de cracker armadillo en mémoire.
Oui, je sais encore trouver un bouton search.
Non, je n'ai pas à justifier de ce que j'ai fais ou pas fais comme recherche sur ce programme. Vous avez une drôle de représentation de l'entraide et de la communauté.
You definitely don't have french spirit.
Incapable.
JimmyClif
August 31st, 2002, 01:57
Quote:
Originally posted by incapable
Je vous répond en français, parce que sincèrement, vos réponses me gonflent.
Oui, j'ai regardé les différents sujets des forums, mais je n'y ai trouvé aucune réponse pertinente.
Oui, j'ai essayé plusieurs choses, comme virer les anti-sices, Wdasm, patcher en mémoire, softice et setprocessworkingsetsize, push 0/1.
Je m'étonne, que personne n'essaie de cracker armadillo en mémoire.
Oui, je sais encore trouver un bouton search.
Non, je n'ai pas à justifier de ce que j'ai fais ou pas fais comme recherche sur ce programme. Vous avez une drôle de représentation de l'entraide et de la communauté.
You definitely don't have french spirit.
Incapable. |
I answer you in french because honestly your answers are making me mad.
edit: mad, pissed off, enraged
Yes I had a look a a lot of subjects in the forums but I couldn't find a satisfying answer.
Yes, I tried many different approches including getting rid of the anti-ice's, wdasms, inline memory patching, SoftiCe and setprocessworkingsetsize and push 0/1.
I'm stunned that nobody ever tried to crack Armadillo in memory.
Yes, I do know where to find the search button.
No, I do not need to justify what I've done or did not do concering research on this app. You have a weird representation of "helping" and a community.
You definitively don't have french spirit.
edit : couldn't resist typing that one again.
-----------------------------------------------
Incapable,
Essaye de donner plus d'infos. Ne reste que la et dis "Feed me Infos" mais essaye de generaliser tes idees de ce que tu veux faire en detail. Puis demande une question.
Salutations,
JimmyClif
-----------------------------------------------
Now : I crawl back under the stone I came from

Kayaker
August 31st, 2002, 02:45
Salut Incapable,
Please try to understand this, then we can continue with the proper spirit that already exists on this board, IF it is used right. Help is a precious commodity, and this is une ecole, a place of study and theory.
No one is questioning your ability or anything else. But read your own post back to yourself. The only information there is
Target file dvdidle : dvd region-free
This file is armadillo protect.
Has someone any idea to defeat this.
How can i unpack this target.
These 4 lines indicate that you are looking for a quick crack answer, nothing more. You've offered nothing back to the community in a spirit of return for your request, nothing to base a specific answer to, no starting point for discussion for other people to learn anything. We just don't do that on this board, you must understand this. If you want to discuss specific parts of the protection, the code, some point of trouble you come to when doing it yourself, then you are free to do so, if what you are really trying to do is learn.
It's a hell of a big topic, and there HAS been work done before on the protection. How can you expect a complete answer when the question is not even complete? So at what point are you stuck at? Oh, you haven't started yet? Come back with some code, a problem, a desire to learn, something, anything! and maybe you can just get what you're after.
You guys just don't get it do you? What a waste of what we could have with the talent here...
Kayaker
evaluator
August 31st, 2002, 22:09
Kayaker!
I dld thiz prog & what I see in License.TXT!
>4. REVERSE ENGINEERING.
>You agree that you will not attempt to reverse compile,
>modify, translate, or disassemble the SOFTWARE in whole or in part.
What you think about? Is it valid?
I simple assume, guy called "You" is not me

_Servil_
August 31st, 2002, 22:32
HI,
your quoted paragraph in similar form is a part of every EULA.
If it's valid? You must decide. ;=)
http://www.woodmann.net/fravia/legal.htm
JMI
August 31st, 2002, 22:37
You've got to ask yourself the question: "If I didn't buy the software, am I bound by the license?" The answer would appear to be that if one is going to break the law by having and using a pirated copy of the software, the license doesn't matter much either.
And to our musician friend: It is always true that "you" can't be "me." And who would want to be "me" when they could be "you."
Regards.
evaluator
September 1st, 2002, 08:22
Ok, I discovered who is "You"!
incapable <- is "You"

))))))
incapable, sorry guy! "You" are so unlucky ;(;
But some info I give you.
1. this prog not uses CopyMem.
2. For anti-SoftIce-debug trick you can use ICEDUMP or FrogIce
3. you can use ArmKiller(it dumps and discovers OEP)
4. finally you need resolve ImportTable (6 unresolved IT-funcs manage yourself)
BTW, this prog silently exists on my PC. (I have not DVD)
****
Now about that license term!
It can be used for only NOT PACKED-PROTECTED programs!!
Because we are not so stupid for start "compile, modify, translate, or disassemble"
packed-protected prog! We make dump from memory & ...
However dump is NOT that distributed program.exe about worries autHor & License.<-DOT
Cry now

BenJ
September 1st, 2002, 20:13
Hi all,
armadillo again : it's only a simple question about one point I can't understand with arm:
I'm now able to unpack targets manually, no problem. For IT rebuilding, the best I found is : find the routine which changes the API pointers : in this routine, at one moment you can see where arm stores an array with all the original API names... dump it and rebuild manually....
There is only one thing : for one target (not on others I tried), the code section was "dump protected" : some pages attributes where "page_readexecure_guard". The problem is : I have never been able to find how arm sets these attributes. I thought about virtualallocex or virtualprotectex, but never found these api called with the "page_rx_guard" attribute.
In fact it's not a problem, caus this antidump protection does not stand in win98 for the same target, only in win2k.... don't know why... But I would like to know how arm does this ! haven't found anything related to this on the web... guess I missesd smthing...any idea ??
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.