Jump to content
Tuts 4 You

Fixed Scylla 0.9.7b


DMichael

Recommended Posts

It does not crash but it does not find any IAT though with this fix.


So in kinda 50% solved.


For example with this unpackme:



OEP is:



 


005B0268                      55              PUSH EBP                                 ; UnpackMe.00401050


 


You need to solve the Resources API redirection and try to search the IAT.


With original Scylla it crashes, with this it does not crash but it does not find any IAt or size.


So you must input manual IAT start and size.


The same was with non fixed file.


If you input by hand the two values the Scylla does not crash. Was crashing when you use IAT Autosearch.


:)


 


post-31931-0-91772000-1419418447_thumb.j

Edited by GIV (see edit history)
Link to comment

Thank you giv for your valuable bug reports.

 

The problem is some kind of anti-debug stuff. Big section with no access.

hm what about querying section for privileges? or add option for Scylla to ignore?

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...