Dumping Armadillo 3.0-3.6 without CopyMem II

		Exetools > General > General Discussion
Dumping Armadillo 3.0-3.6 without CopyMem II

07-24-2004, 21:53

MaRKuS-DJM MaRKuS-DJM is offline

Cracker + Unpacker

Join Date: Aug 2003

Location: Virtual World / Network

Posts: 553

Rept. Given: 7

Rept. Rcvd 6 Times in 4 Posts

Thanks Given: 3

Thanks Rcvd at 16 Times in 10 Posts

two infos for you: breakpoint on CODE-section is working. most of the time the OEP gets called through a CALL EDI. dump from there, search for an API (binary FF25), set hardware-breakpoint on first one, restart, start target and you'll break there. now you can fix imports like it is described in every tutorial

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Armadillo 2.85 Custom + CopyMem & Nanomites	TmC	General Discussion	16	01-08-2005 10:46

All times are GMT +8. The time now is 05:31.