首页
社区
课程
招聘
ArmInline v0.4
发表于: 2005-9-6 11:07 2612

ArmInline v0.4

2005-9-6 11:07
2612
by:Admiral

ArmInline is an Armadillo unpacking tool designed specifically to deal with the many antidump features available with private builds of Armadillo 4.x.

* ArmInline 'revirgin's code protected by 'Strategic Code Splicing' by recursively identifying and removing the redundant opcodes, rather than dumping and patching in a VirtualAlloc, and so it adds nothing to the size of your dump.
* It is also capable of consolidating DLL imports that have been shuffled by Armadillo's 'Import Elimination' and can generate a new IAT, which can then be used by ImpRec (or any other import table reconstructor). Any references to the old IAT are automatically redirected to the newly created, streamlined IAT. Note that ArmInline cannot retrieve Armadillo's stolen imports, so you will have to fix this prior to rebasing the IAT if you want a working dump.

Note:
* Although the interface currently refers to Nanomite fixing, this feature has yet to be implemented.

It's not the fastest tool you're ever going to see - it can take a few seconds to work a large 'Dillo (due to the recursive nature of its redundancy algorithm and the fact that I took the liberty of using Visual Basic to write it) and although it hasn't failed me yet (much), it has certainly not been thoroughly tested, and is provided without any guarantees whatsoever. So use this software at your own risk.

05/9/05 - v0.4
Added implementation of the 'Import Elimination' feature.
Bugfix: 'False alarm' return jumps from code-splices can no longer cause an overflow when they point to a crazy memory location.
Bugfix: ArmInline now recognises extended registers to be dependent on their word counterparts (so the Code-Splicing engine is more reliable).

附件:arminline_0.4.zip

[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)

收藏
免费 1
支持
分享
最新回复 (2)
雪    币: 211
活跃值: (40)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
2
偶不懂英文的说。

楼主能简单介绍下吗?
2005-9-6 17:43
0
雪    币: 427
活跃值: (412)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
3
private builds of Armadillo 4.x.
2005-9-6 18:16
0
游客
登录 | 注册 方可回帖
返回
//