Log in

View Full Version : Problems with Armadillo-ed application

darklomba
October 29th, 2002, 14:04
The application is called Octo Site Compiler, and it uses Armadillo 2.20, as PE-Finder told me.

I tried to use Every Armadillo-against application, but none seems to be working.

In my case the evaluation perios has expired, but, Armadillo Killer 2.6 version says it supports expired versions

Any idea??

Thanks.
foxthree
October 29th, 2002, 20:34
Yo!

I've unpaxed a couple of latest ARMA versions, but not expired ones. However, older ARMAs' keep something in the registry flagging expiry. Remove that and you're all set. I can't confirm this though. I'm not in the other 'puter right now... Give it a shot!

Signed,
-- FoxThree
Unpacker
October 29th, 2002, 21:13
Quote:
Originally posted by darklomba
The application is called Octo Site Compiler, and it uses Armadillo 2.20, as PE-Finder told me.

I tried to use Every Armadillo-against application, but none seems to be working.

In my case the evaluation perios has expired, but, Armadillo Killer 2.6 version says it supports expired versions

Any idea??

Thanks.


If you need unpacked EXE - send me a private message with your
e-mail address. The size of zip archive will be 372 KB.
Hopcode
October 29th, 2002, 23:14
Hey armkiller,

I cannot manage to unpack Armadillo.exe
could you help ? did you work on those int 3?
Copy Mem is not a big problem. ints 3 are.

Thx!

HopCode

Quote:
Originally posted by Unpacker
If you need unpacked EXE - send me a private message with your
e-mail address. The size of zip archive will be 372 KB.
Unpacker
October 29th, 2002, 23:37
Quote:
Originally posted by Hopcode
Hey armkiller,

I cannot manage to unpack Armadillo.exe
could you help ? did you work on those int 3?
Copy Mem is not a big problem. ints 3 are.

Thx!

HopCode


I know the solution ang going to add it to ArmKiller but a bit later.
At the moment I know only two apps that use this trick (NetScanTools and Armadillo itself), so it's not a problem for now.
Hint: Try to find the place of int3 handling and check how armadillo calculates the new EIP after int 3 exception
Hopcode
October 29th, 2002, 23:53
hey!

nice mate!
Did you manage to unpack both files ?
or is just theory for now ?
im interrested by those findings! i understand how it places the int 3 and stuffs. its not random at all.

Thx again.
if you could mail me armadillo.exe unpacked, i could see how you rebuilded it! or is it just plain theory?

Enjoy!

HopCode

Quote:
Originally posted by Unpacker
I know the solution ang going to add it to ArmKiller but a bit later.
At the moment I know only two apps that use this trick (NetScanTools and Armadillo itself), so it's not a problem for now.
Hint: Try to find the place of int3 handling and check how armadillo calculates the new EIP after int 3 exception
darklomba
October 30th, 2002, 15:03
It was not my intention to make it the "simplest way". I was just lookingo for something I found on another pages.

A tip, like "you should notice it creates a temporary file, look for it".

I didn't came here for quick solutions, I just wanted to post some questions and to see if someone had the same problem unpacking an application with armadillo.

It was not my intention to create this kid of posts here, and I want to tell you that I'm really gratefull to be a member here.

So guys, if my post was an error, sorry, that's all I can tell you. It in your hands now to understand that.

Bye and Luck.

I hope to find you here in the future, when I have some answers.

Again. Sorry.
Js
October 30th, 2002, 23:38
End of discussion.

(content deleted by woodmann)