|
Well an idea could be to extract it from armadillo itself. If you unpack it, you will notice that in the resource section there are 5 versions of Armaccess.dll (1 for dll, one for maximum protection, one for standard protection and other 2 don't know).
Those are the fully functional dlls, not just the fake one distributed by sr.
To play with it in memory i believe it could be set a bp on LoadLibrary and see the address it is called...just an idea...
Last edited by TmC; 06-20-2006 at 23:35.
|