////////////////////////Château-Saint-Martin/////////////////////////////////////////////////
//                                                                 /////////////////////////
//  FileName    :  Armadillo v3.x-v5.x Finger-Print-Patcher 0.2    ////////////////////////
//  Features    :                                                  ///////////////////////
//                 This script can store the new HWID information  //////////////////////
//                 permanently on your system.Unpacking of HWID    /////////////////////
//                 targets is not more required.                   ////////////////////
//                                                                 ///////////////////
//-----------++++--Armadillo_v5.42                                 //////////////////
//-----------++++--Armadillo_v5.40                                 /////////////////
//-----------++++--Armadillo_v5.20                                 ////////////////
//-----------++++--Armadillo_v5.02                                 ///////////////
//-----------++----Armadillo_v4.54                                 //////////////
//-----------++----Armadillo_v4.44                                 /////////////
//-----------++----Armadillo_v4.42                                 ////////////
//-----------++++--Armadillo_v4.40                                 ///////////
//-----------++----Armadillo_v4.30a                                //////////
//-----------++----Armadillo_v3.78                                 /////////
//-----------++----Armadillo_v3.77                                 //////// 
//-----------++----Armadillo_v3.70a                                ///////
//                                                                 //////
//  Environment :  WinXP,OllyDbg V1.10,OllyScript V1.62.3          /////
//  Author      :  LCF-AT                                          ////
//  Date        :  2008-04-05                                      ///
//                                                                 //
//                                                                // 
///////////////WILLST DU SPAREN,DANN MUßT DU SPAREN!///////////////  


var Armadillo_v3.x_v5.x_Finger_Print_Patcher_0.2
var 
var gRn
var 
var written
var
var by
var 
var LCF_AT
var 
var 
var OutputDebugStringA
var OpenMutexA
var GetSystemTime
var VirtualProtect
var address1
var address2
var RegValue
var NewPrint
var a1
var a2
var a3
var a4
var a5
var Reger
var abc1
var T1
var T2
var T3
var DFG
var mers

dbh
mov mers, 0

mov $RESULT, 0
ask "Enter 1 for Method 1 / or 2 for Method 2 / or 3 for Method 3!"
cmp $RESULT,0
je ende

cmp $RESULT, 2
je ezz

mov abc1, $RESULT

mov DFG, $RESULT

jmp verlo

ezz:

mov abc1, 0

mov DFG, $RESULT


verlo:

mov Reger, 65E6C08A

gpa "OutputDebugStringA", "kernel32.dll"
mov OutputDebugStringA, $RESULT
mov [OutputDebugStringA], #C20400#

gpa "OpenMutexA", "kernel32.dll"
mov OpenMutexA, $RESULT

find OpenMutexA, #C20C00#
mov OpenMutexA, $RESULT

gpa "GetSystemTime", "kernel32.dll"
mov GetSystemTime, $RESULT

find GetSystemTime, #C20400#
mov GetSystemTime, $RESULT


gpa "VirtualProtect", "kernel32.dll"
mov VirtualProtect, $RESULT

find VirtualProtect, #C21000#
mov VirtualProtect, $RESULT


bphws OpenMutexA, "x"
bp OpenMutexA
esto
sti
mov eax, 1


bphws VirtualProtect, "x"
bp VirtualProtect

esto

cmp eip, VirtualProtect
je malsa



malsa2:
bphwc VirtualProtect
bc VirtualProtect


sti
mov eax, 1

bphwc OpenMutexA
bc OpenMutexA
jmp malsa5


malsa:
var mers
inc mers
jmp malsa6

malsa5:
sti
mov eax, 1

malsa6:

bphwc OpenMutexA
bc OpenMutexA
bphwc VirtualProtect
bc VirtualProtect

cmp DFG, 1
je hota
cmp DFG, 2
je hota


cmp mers, 1
je malsa3


bphws VirtualProtect, "x"
bp VirtualProtect
esto
bc VirtualProtect
bphwc VirtualProtect

malsa3:


mov T1, [esp+4]

jmp TTTT

hota:


bphws GetSystemTime, "x"
bp GetSystemTime
esto
bc GetSystemTime
bphwc GetSystemTime

sti
jmp Mazo
///////////////////////////////////////////////////
TTTT:

Armadillo_3.xx:

var z1
var z2
var z3
var z4
var NewPrint
var NewPrintS

ask "Enter New Fingerprint without - like 1234ABCD"
cmp $RESULT,0
je ende
mov NewPrint, $RESULT
mov NewPrintS, $RESULT


mov z1,T1

var M0


find T1, #8B??????????8B??????8B??????3381????????#
cmp $RESULT,0
je palo

mov z1, $RESULT
mov M0, $RESULT

add z1, 0E

eval "mov eax, {NewPrint}"
asm z1, $RESULT

add M0, 0A
bp M0


///////////////////////////////////////////////////
palo:

var b1
var b2

find z1, #8B44B718358AC0E665#
cmp $RESULT,0
je palA

go $RESULT

mov b1, esi
mov b2, 4
mul b1, b2
mov b2, b2
add b1, edi
add b1, 18
mov b1, b1
mov b2, b1
sub b2, 4

xor NewPrintS, Reger
mov NewPrintS, NewPrintS

mov [b1], NewPrintS
mov [b2], NewPrintS

jmp pal1
///////////////////////////////////////////////////
palA:


find z1, #8B448118358AC0E665#
cmp $RESULT,0
je pal1

go $RESULT

mov b1, eax
mov b2, 4
mul b1, b2
mov b2, b2
add b1, ecx
add b1, 18
mov b1, b1
mov b2, b1
sub b2, 4

xor NewPrintS, Reger
mov NewPrintS, NewPrintS

mov [b1], NewPrintS
mov [b2], NewPrintS


///////////////////////////////////////////////////
pal1:

var M1
var M2
var M3
var M4

find z1, #8B??????????8B??????8B??????3381????????#
cmp $RESULT,0
je pal2

mov z1, $RESULT
mov M1, $RESULT

add z1, 0E

eval "mov eax, {NewPrint}"
asm z1, $RESULT

add M1, 0A
bp M1


pal2:

find T1, #8B??????????8B??????????3381????????C20400#
cmp $RESULT,0
je pal3

mov z1, $RESULT
mov M2, $RESULT

add z1, 0C

eval "mov eax, {NewPrint}"
asm z1, $RESULT

add M2, 6
bp M2

cmt M2, "M2"


pal3:
find z1, #8B??????????8B??????????3381????????C20400#
cmp $RESULT,0
je pal4

mov z1, $RESULT
mov M3, $RESULT

add z1, 0C

eval "mov eax, {NewPrint}"
asm z1, $RESULT

add M3, 6
bp M3

cmt M3, "M3"



pal4:


find T1, #8B????8954B118#
cmp $RESULT,0
je HFG

mov z2, $RESULT
add z2, 03

bp z2

////////////////////////////////////////////////////
HFG:

esto


cmp eip, z2
je walla

///////////////-----------------------------------------
var v1
var v2
var v3
var v4

mov v3, "MOV EAX,DWORD PTR DS:[EAX+118]"
mov v4, "MOV EAX,DWORD PTR DS:[EAX+11C]"

bc M0
bc M1



cmp eip, M2
je bert1
jmp bert2

bert1:

bc M2
opcode eip
mov v2,$RESULT_1        // "MOV EAX,DWORD PTR DS:[EAX+118]"
cmp v3, v2
bp M2
je bert1a
jmp HFG

bert1a:


mov g1, eax
add g1, 118
mov g1 ,g1
mov [g1], NewPrint

bc M2





jmp HFG
bert2:
bc M3
opcode eip
mov v2,$RESULT_1        // "MOV EAX,DWORD PTR DS:[EAX+11C]"
cmp v4, v2
bp M3
je bert2a
jmp HFG

bert2a:

mov g2, eax
add g2, 11C
mov g2 ,g2
mov [g2], NewPrint

bc M3




jmp HFG
///////////////////////////////////////////////////
walla:
mov edx, NewPrintS

jmp HFG

ret

///////////////////////////////////////////////////
///////////////////////////////////////////////////
///////////////////////////////////////////////////
Mazo:

var bac1

mov bac1,eip
findop bac1,#E8#
go $RESULT
sti


folkas3:
/////////////////////////

mov bac1,eip
findop bac1,#E8#
go $RESULT
sti

Golkas3:

///////////////////////////////////////////////////
///////////////////////////////////////////////////
///////////////////////////////////////////////////
Armadillo_5.xx:
var v1
var v2
var v3
mov v3, "MOV EDX,DWORD PTR DS:[ECX+EAX+205C]"



find eip,#C1E0??8B????8B??????????????????EB??#
cmp $RESULT,0
je Armadillo_4.xx
go $RESULT
sti
sti

opcode eip
mov v1,$RESULT          //  "0F952B"
mov v2,$RESULT_1        // "MOV EDX,DWORD PTR DS:[ECX+EAX+205C]"
cmp v3, v2
je Murks


jmp ende


Murks:


mov address1,ecx
add address1,eax
add address1,205C


mov address2,address1
sub address2, 4
mov address2, address2


find eip, #0FB64DF7#
cmp $RESULT,0
je ende2
go $RESULT

mov RegValue, eax

var NewPrintS


ask "Enter New Fingerprint without - like 1234ABCD"
cmp $RESULT,0
je ende
mov NewPrint, $RESULT
mov NewPrintS, $RESULT

///////////////////////////////////////////////////
cmp abc1,1
je vcl2

jmp vcl1



vcl2:

xor NewPrint,RegValue
mov NewPrint, NewPrint

mov [address1],NewPrint
mov [address2],NewPrint


esto
ret
///////////////////////////////////////////////////
vcl1:


find eip, #FF15????????8B45????8BE55DC20800#
cmp $RESULT,0
je marta1

var hag1
var hag2

mov hag1, $RESULT+6
bp hag1


///////////////////////////////////////////////////
marta1:
esto

marta2:

var sam2
mov sam2, ebp-4

mov sam2, [sam2]



xor sam2,NewPrintS

mov NewPrintS, sam2


mov [address1],NewPrintS
mov [address2],NewPrintS

bc hag1

erun

ret


///////////////////////////////////////////////////
///////////////////////////////////////////////////


rtr
sti

var sam1
mov sam1, ebp-c
mov [sam1], NewPrint


esto
jmp marta2

///////////////////////////////////////////////////
///////////////////////////////////////////////////

mov eax, NewPrintS

ret

///////////////////////////////////////////////////
Armadillo_4.xx:

var bac1
var wet


mov bac1,eip

gmemi eip, MEMORYBASE
mov wet, $RESULT
mov wet, wet

find wet, #8B9481C8190000#
cmp $RESULT,0
ja twin1


find eip ,#6A01E8#
cmp $RESULT,0
ja twin2

///////////////////////////////////////////////////
twin1:



find wet, #8B9481C8190000#
cmp $RESULT, 0
je ende

go $RESULT

mov RegValue, esi

mov a1, eax
mov a2, 4
mul a1, a2
mov a1, a1
add a1, 19C8
mov a3, ecx
add a1, a3
mov a1, a1
mov a2, a1
sub a2, 4
mov a2, a2


ask "Enter New Fingerprint without - like 1234ABCD"
cmp $RESULT,0
je ende
mov NewPrint, $RESULT
mov NewPrintS, $RESULT


xor NewPrint,RegValue
mov NewPrint, NewPrint

mov [a1],NewPrint
mov [a2],NewPrint

esto ret

///////////////////////////////////////////////////
twin2:
go $RESULT
sto

Holkas3:
///////////////////////////////////////////////////
var v1
var v2
var v3
var v4
var a1
var a2
var a3



cmp abc1,1                    // ENTSCHEIDUNG
je wert

cmp abc1,0
je zert


zert:
var v6

find eip, #338660200000#
cmp $RESULT, 0
je ende


bp $RESULT
mov v6, $RESULT

sto

cmp eip, v6
je hansel1

run
bc eip
jmp hansel2


hansel1:

bc eip

hansel2:
mov RegValue, eax



mov v3, "XOR EAX,DWORD PTR DS:[ESI+2060]"


ask "Enter New Fingerprint without - like 1234ABCD"
cmp $RESULT,0
je ende
mov NewPrint, $RESULT
mov NewPrintS, $RESULT


xor NewPrint,RegValue
mov NewPrint, NewPrint

mov a1, esi+2060
mov a2 ,a1
sub a2 ,4
mov address1,a1
mov address2,a2

mov [address1],NewPrint
mov [address2],NewPrint

esto
erun
erun
erun

ret

///////////////////////////////////////////////////
///////////////////////////////////////////////////
wert:

sti
find eip,#358AC0E665#
cmp $RESULT,0
je ende2

mov a1, $RESULT-4
go a1

mov v3, "MOV EAX,DWORD PTR DS:[EDI+ESI*4+18]"


opcode eip
mov v1,$RESULT          //  "0F952B"
mov v2,$RESULT_1        // "MOV EAX,DWORD PTR DS:[EDI+ESI*4+18]"
cmp v3, v2
je Murks2

var 4

mov v4, "MOV EAX,DWORD PTR DS:[ECX+EAX*4+18]"

opcode eip
mov v1,$RESULT          //  "0F952B"
mov v2,$RESULT_1        // "MOV EAX,DWORD PTR DS:[ECX+EAX*4+18]"
cmp v4, v2

je Ram
jmp ende

Ram:

bp a1

var a4
var a5

mov a5, 04

mov a2, eax
mul a2, a5
mov a2, a2
add a2, ecx
add a2, 18
mov a2, a2   //address


mov $RESULT, 0
ask "Enter New Fingerprint without - like 1234ABCD"
cmp $RESULT,0
je ende
mov NewPrint, $RESULT

xor NewPrint,Reger
mov NewPrint, NewPrint

mov [a2],NewPrint



loop2:

esto
var a3
var a4
var a5

mov a4, 04


mov a3, eax
mul a3, a5
mov a3, a3
add a3, ecx
add a3, 18
mov a3, a3   //address


var zar

inc zar
cmp zar,4
je faka2



cmp [a3],NewPrint
je loop2


mov [a3],NewPrint


jmp loop2

faka2:

bc a1
esto

ende:
ret

///////////////////////////////////////////////////
jmp ende




Murks2:

bp a1

mov a2, esi
mul a2, 4
mov a2, a2
add a2, edi
add a2, 18
mov a2, a2   //address


Malka:

mov $RESULT, 0
ask "Enter New Fingerprint without - like 1234ABCD"
cmp $RESULT,0
je ende
mov NewPrint, $RESULT

xor NewPrint,Reger
mov NewPrint, NewPrint

mov [a2],NewPrint


///////////////////////////////////////////////////

find eip, #C20800#
go $RESULT
sti



mov v3, "XOR EAX,DWORD PTR DS:[ESI+2060]"


find eip, #338660200000#
cmp $RESULT, 0
je ende


go $RESULT

mov a1, esi+2060
mov a2 ,a1
sub a2 ,4
mov address1,a1
mov address2,a2

mov [address1],0
mov [address2],0


///////////////////////////////////////////////////
loop:

esto


mov a3, esi
mul a3, 4
mov a3, a3
add a3, edi
add a3, 18
mov a3, a3   //address


var zar

inc zar
cmp zar,40
je faka



cmp [a3],NewPrint
je loop


mov [a3],NewPrint


jmp loop

faka:

bc a1
esto

ende:
ret

ende2:
MSG "Maybe No Armadillo 5.xx!!!"
ret
