Dumping protected DLL 'perplex' data section
Been out of the reverse engineering picture for a while and decided to get back into it as there is an app which I use that is missing some functions ;) I'm working the apps DLL which is packed using an Unknown packer (at least to me) It has a data section called 'perplex' which I seem to remember indicates that this has been packed with ACProtect/UltraProtect. Can anyone confirm this?
Also I'm using ollydbg as I couldn't get softice to install on XP sp2 grrr and didn't feel like going back to 98. I was wondering if there was anything I should be looking out for when unpacking ACprotect/UltraProtect - I have Hide Debugger v1.2 and Ollydump installed... anything else?
TIA
grimm
|