HellRaider Posted March 4, 2018 Share Posted March 4, 2018 (edited) I am unpacking AvaFind.exe, but scylla is getting wrong va and size via IAT autosearch. But when i try imprec it resolves correct address and size. Tried looking into scylla code but could not understand the issue. AvaFind.exe Edited March 4, 2018 by HellRaider Link to comment
HellRaider Posted March 4, 2018 Author Share Posted March 4, 2018 (edited) The application is correctly unpacked in both the app Edited March 4, 2018 by HellRaider Link to comment
mrexodia Posted March 4, 2018 Share Posted March 4, 2018 Perhaps you can try 'Use advanced IAT search' in options Link to comment
LCF-AT Posted March 4, 2018 Share Posted March 4, 2018 Just check the IAT start & End / Size manually in Olly and correct it if needed and then you are on the safe way.No big deal to do this quickly by yourself without always to trust blind any import tool.In this case ImpRec shows all correctly but also ImpRec can fail etc.Just wanna say that you should verify the found and shown results you know. greetz 2 Link to comment
sahteuser Posted February 20, 2019 Share Posted February 20, 2019 On 04.03.2018 at 04:38, HellRaider said: Uygulama her iki uygulamada da doğru şekilde açıldı Link to comment
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now