Here's the long awaited tool I wrote for analyzing Armadillo protected apps. I waited 'til the tsrh site was back up (tsrh.org.ua) and I could release it properly.

Big question is of course: why should you use this and not ArmaFP?
Answer: This is static (never executes the file), it gets the OEP and it shows the build date of Armadillo. Also it shows you the copymem byte (highest byte of the raw options), this is what the program is xored with when first decrypting CopyMem-II.

119K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3W2E0k6K6x3%4x3#2)9J5k6h3W2E0j5h3N6W2M7$3S2S2j5$3E0Q4x3X3g2#2M7#2)9J5c8X3W2E0k6K6x3%4x3#2)9J5c8U0b7#2y4U0W2Q4x3V1k6K6j5%4u0W2k6h3&6H3k6U0S2Q4x3X3g2B7M7r3M7`.

817K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0S2M7r3W2V1M7$3S2S2M7X3g2Q4x3X3g2U0L8$3#2Q4x3V1k6X3K9h3I4W2M7#2)9J5c8U0x3J5y4U0t1@1z5o6l9&6i4K6u0r3j5i4u0E0j5g2)9J5k6h3W2F1N6s2u0#2k6r3g2J5i4K6u0W2x3q4)9J5k6e0c8Q4x3X3g2@1L8$3!0D9i4K6u0V1N6s2y4J5K9q4)9J5k6i4A6A6M7l9`.`.

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课