Jump to content
Tuts 4 You

Invalid parameter passed to CRT function


Kurapica

Recommended Posts

Posted

This error pops up when I click some DLL in the symbols window or when using the "Search for inter-modular calls" for the same DLL

After that, x64dbg crashes. :(

Is this an anti-debug trick or a bug in x64dbg ?

  • Like 1
Posted

It works fine for me. Could you provide more details? Exact snapshot you used? Path of the DLL? x32dbg or x64dbg? What OS are you on? Can you reproduce it on a VM?

However most likely it's a bug in x64dbg. There are symbols available, if you JIT after the crash it should give you an address/file+line in WinDbg (or a version of x64dbg that doesn't crash).

Posted

Snapshot : 25 April 016

x64dbg not x32

OS : Windows 7 64 with SP1

The DLL which produces this bug is attached.

simply throw it in x64dbg and break on its EP.

go to the symbols window and click the DLL in the list.

 

Corona_Release.rar

Posted

I see another bug though, but still trying to recreate the bug you mentioned.

The bug i found is: load the dll.

goto symbols.

hit restart, goto [CPU] disassembler window - nothing there

Posted

To reproduce the bug.

Just activate the event of "DLL Load" and throw the DLL in the debugger.

Press "Run" until you see that DLL loaded in the list.

Now If you click the DLL in the list the bug will happen and also

the "Search for inter-modular calls" function will produce a bug for the same DLL.

Posted

2016-05-01_104605.png

Posted

Excellent job as always.

Posted

Thanks Mr. eXoDia!
On "DLL Load" it finds 3317 calls, but if search again when EP is reached it gets crashed after 16527 calls.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...