S
S
sbh2018-03-06 09:59:11
reverse engineering
sbh, 2018-03-06 09:59:11

Why does the file not work after dumping a resource from memory?

The source file contains several resources 1 of which is the executable file.
I dump it with Scylla (x96dbg) but the file stops working.
Can anyone suggest what could be the reason?
Here is an article how a person did it - reverse-pub.ru/2016/11/29/%D1%80%D0%B5%D1%88%D0%B0...
I also tried to cling to the process after it was launched by the main program, in As a result, I get to the ntdll.dll module and I can’t actually debug anything either.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
R
ralliart, 2018-03-06
@ralliart

The resource editor can not be removed?

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question