Fixed Scylla 0.9.7b

[DMichael]

i have made aquick patch till Aguila it self will fix the issues i mentioned here:

https://forum.tuts4you.com/topic/36570-found-the-crash-bug/

https://forum.tuts4you.com/topic/36559-found-the-freeze-bug/

Scylla_x86.rar

[Mr.Basha]

• (Trial Member)?

  WOW 

  It's Wooden PLaz

  How You Get IT !

  Thank's At All /

[DMichael]

 

• (Trial Member)?

  WOW 

  It's Wooden PLaz

  How You Get IT !

  Thank's At All /

 

Trial Member = SND Team Trial Member

im dont got it im the one who make the temporal solution

[mrexodia]

I created a pull request for you, hope you don't mind: https://github.com/NtQuery/Scylla/pull/32

[DMichael]

I created a pull request for you, hope you don't mind: https://github.com/NtQuery/Scylla/pull/32

sure:) hope aguila get some time to compile for us new binary

[GIV]

It does not crash but it does not find any IAT though with this fix.

So in kinda 50% solved.

For example with this unpackme:

 

http://www27.zippyshare.com/v/12770185/file.html

OEP is:

 

005B0268                      55              PUSH EBP                                 ; UnpackMe.00401050

 

You need to solve the Resources API redirection and try to search the IAT.

With original Scylla it crashes, with this it does not crash but it does not find any IAt or size.

So you must input manual IAT start and size.

The same was with non fixed file.

If you input by hand the two values the Scylla does not crash. Was crashing when you use IAT Autosearch.

 

Edited December 24, 2014 by GIV

[Aguila]

Thank you giv for your valuable bug reports.

 

The problem is some kind of anti-debug stuff. Big section with no access.

[DMichael]

Thank you giv for your valuable bug reports.

 

The problem is some kind of anti-debug stuff. Big section with no access.

hm what about querying section for privileges? or add option for Scylla to ignore?

[GIV]

Or you can change proper section privileges for the moment then restore back.

[Aguila]

I uploaded a new version here https://forum.tuts4you.com/files/file/576-scylla-imports-reconstruction/

It should be fixed.

[GIV]

Thank you.

One small remark.

You put there in subfolder: 

 

ScyllaToImprecTree.exe

Make the border fixed.

Is more OK.

Please fix.

Take a look in my attach.

 

Please fix.7z