Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 07-18-2005, 23:12
lordnasty lordnasty is offline
Friend
 
Join Date: Sep 2004
Posts: 29
Rept. Given: 5
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 13
Thanks Rcvd at 1 Time in 1 Post
lordnasty Reputation: 0
Armadillo Help

Hi to all,
i'm working on target that have Armadillo 2.61 with CopymemII.
So i try using LunarDust's DilloDump 2.55, to have a dumped version of the target and the OEP.

But i have problems why when i load the .exe in DilloDump i have 3 errors inside DilloDump (Like Error 4000, Error 9800, Error 4300) and when "Starting normally" i have an error message box: "Internal error: Location EPB, code 5"

Why i have this errors? is why the target create a new process (Father->Child)? What can i do?
Please let me know about.
Thanks

NaSTy
Reply With Quote
  #2  
Old 07-19-2005, 01:12
xastey
 
Posts: n/a
maybe it doesn;t work with that version.. try doing it by hand and maybe its not v2.61 sometimes peid reports the wrong version
Reply With Quote
  #3  
Old 07-19-2005, 03:38
lordnasty lordnasty is offline
Friend
 
Join Date: Sep 2004
Posts: 29
Rept. Given: 5
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 13
Thanks Rcvd at 1 Time in 1 Post
lordnasty Reputation: 0
Hi,
the armadillo used is however a 2.xx version kind (also why the program is quite old).
I think that 2.xx is supported by DilloDump.
However i have just tried to do manually.
I have success detach the child (using the EB FE technic) but i "stuck" after to rebuild the import.
For this reason i'm trying to use DilloDump why is good for rebuild.
But if i detach "normally" and dump the child process i can "attach" it using the DilloDump?
I want to understand this.
Please let me know.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 07:49.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX
( 1998 - 2021 )