Posted March 24, 201411 yr after unpacking armadillo.exe (x64) dumping with Scylla_x64.dll (latest version) will generate the following exception message:http://rghost.net/53321438 ---------------------------Exception! Please report it!---------------------------ExceptionCode C0000005ExceptionFlags 00000000NumberParameters 00000002ExceptionAddress VA 000007FEE9F38FA5ExceptionAddress RVA 000007FDAABE8FA5rax=0x0000000000000000, rbx=0x00000000091BFF40, rdx=0x0000000140000000, rcx=0x00000000091BFF78, rsi=0x0000000008D0E110, rdi=0x00000000091BFF40, rbp=0x0000000008D0DF30, rsp=0x0000000008D0DDD0, rip=0x000007FEE9F38FA5---------------------------OK ---------------------------Greetings,Mr. eXoDia
March 24, 201411 yr check exetools there are some update I forgot that data exports exist... this should fix it.https://forum.tuts4you.com/files/file/576-scylla-imports-reconstruction/ Edited March 25, 201411 yr by Teddy Rogers Maybe link to it rather than attaching it?
March 24, 201411 yr Thanks for the report. Looks like armadillo got a (new) anti-dump technique. Malformed DOS header: http://pixs.ru/showimage/CapturePNG_8372813_11387574.png In the options you must tick "read pe header from disk" and everything is ok. I will add some check to prevent the crash.
Create an account or sign in to comment