HellRaider Posted March 4, 2018 Posted March 4, 2018 (edited) I am unpacking AvaFind.exe, but scylla is getting wrong va and size via IAT autosearch. But when i try imprec it resolves correct address and size. Tried looking into scylla code but could not understand the issue. AvaFind.exe Edited March 4, 2018 by HellRaider
HellRaider Posted March 4, 2018 Author Posted March 4, 2018 (edited) The application is correctly unpacked in both the app Edited March 4, 2018 by HellRaider
mrexodia Posted March 4, 2018 Posted March 4, 2018 Perhaps you can try 'Use advanced IAT search' in options
LCF-AT Posted March 4, 2018 Posted March 4, 2018 Just check the IAT start & End / Size manually in Olly and correct it if needed and then you are on the safe way.No big deal to do this quickly by yourself without always to trust blind any import tool.In this case ImpRec shows all correctly but also ImpRec can fail etc.Just wanna say that you should verify the found and shown results you know. greetz 2
sahteuser Posted February 20, 2019 Posted February 20, 2019 On 04.03.2018 at 04:38, HellRaider said: Uygulama her iki uygulamada da doğru şekilde açıldı
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now