mrexodia Posted March 24, 2014 Posted March 24, 2014 after unpacking armadillo.exe (x64) dumping with Scylla_x64.dll (latest version) will generate the following exception message:http://rghost.net/53321438 ---------------------------Exception! Please report it!---------------------------ExceptionCode C0000005ExceptionFlags 00000000NumberParameters 00000002ExceptionAddress VA 000007FEE9F38FA5ExceptionAddress RVA 000007FDAABE8FA5rax=0x0000000000000000, rbx=0x00000000091BFF40, rdx=0x0000000140000000, rcx=0x00000000091BFF78, rsi=0x0000000008D0E110, rdi=0x00000000091BFF40, rbp=0x0000000008D0DF30, rsp=0x0000000008D0DDD0, rip=0x000007FEE9F38FA5---------------------------OK ---------------------------Greetings,Mr. eXoDia
Dreamer Posted March 24, 2014 Posted March 24, 2014 (edited) check exetools there are some update I forgot that data exports exist... this should fix it.https://forum.tuts4you.com/files/file/576-scylla-imports-reconstruction/ Edited March 25, 2014 by Teddy Rogers Maybe link to it rather than attaching it? 1
Aguila Posted March 24, 2014 Posted March 24, 2014 Thanks for the report. Looks like armadillo got a (new) anti-dump technique. Malformed DOS header: http://pixs.ru/showimage/CapturePNG_8372813_11387574.png In the options you must tick "read pe header from disk" and everything is ok. I will add some check to prevent the crash. 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now