![]() |
|
#1
|
|||
|
|||
|
Dumping Armadillo 3.0-3.6 without CopyMem II
Hi,
I'm fairly new to reverse engineering more complex apps and need some guidance. PEID says the app is Armadillo 3.0-3.6, also there is alot of other data I see in the file like armaccess.dll and other strings that point to Armadillo. I've noticed that it only has one process so it is not copymem II. I have yet to determine if there are nanomites. I've found lots of Tutorials (including Ricardo's which are really great by the way) that refer to defeating Copymem II, but only one that references w/o it and that Tutorial is in Spanish and is almost impossible to follow (even with a decent translator. Any ideas on how to locate the OEP and dump the process. It seems from what I read it should be easy, but I don't really know where to start. Thanks!! dc |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Armadillo 2.85 Custom + CopyMem & Nanomites | TmC | General Discussion | 16 | 01-08-2005 10:46 |