Shub-nigurrath
April 9th, 2008, 03:16
Hi all mates, CondZero took time to update his AMDUMP for ActiveMark 6.2. Now out there's the version 2.0 of this program. It comes with FULL C++ sources and TWO tutorials inside.
On http://arteam.accessroot.com/releases.html or CRCETL
Here from the readme (inside archive).
On http://arteam.accessroot.com/releases.html or CRCETL
Here from the readme (inside archive).
Quote:
Note: the included pdf overview (from previous release). Still applies to this version with the caveat that import rebuilding is. Included in this release for targets that don't use the delayed import Option!! Info: * new noninvasive loader engine to run & dump activemark v6.2x targets. * run program from its own folder, no need to copy Amdumpv62 to target folder to run. * amdumpv62 will dump activemark v6.2x executables and, if necessary, Rebuild imports automatically for targets with delayed imports not enabled and finally append the overlay data to the end of the dumped file. Special note: * the import rebuilder will append an '_' suffix to the end of the dumped File. (i.e. dumped.exe >> dumped_.exe similar to imprec). In these cases, the overlay data will be appended to the new dump name Automatically. * sometimes it may be necessary to view the sections in a pe editor Program (i.e. lordpe or similar) because the dumper is Dependant on finding: (4) .text/.text/.code/.code/etc sections in the executable For delayed import targets (3) for non delayed import targets. If (3/4) sections are not found, then the executable may not be an activemark v6.2x application!! * note: also dependent on finding (2) .bss/bss sections in The executable! These sections are used for storing needed data To run dump successfully! Limitations: * in order to insure the stability of your dumped.exe, it may be necessary to manually hexedit the dumped file and insert an instruction which moves hi-values to a dword hi-value variable used in the gettickcount api within the 3rd layer (2nd .text) in the executable. Please refer to the tutorial on dumping And analyzing activemark v6.2x on the [arteam] tutorial Link: http://arteam.accessroot.com/tutorials.html?fid=211 ("http://arteam.accessroot.com/tutorials.html?fid=211") Disclaimer: Not responsible for any damages that result from using this tool!! Greetz: Arteam - you're the best!! History: -------------------------------------------- Amdumpv62 - version 2.0 (march 2008) 1. New noninvasive loader engine based on Deroko's nonintrusive loader (i.e. nodebug) 2. New arteam import rebuilder v1.1 (nacho_dj) for targets. That don't use the delayed imports option 3. New log progress and results of the dump process 4. Separate threads for main gui and process |
