Exetools

Exetools (https://forum.exetools.com/index.php)
-   Community Tools (https://forum.exetools.com/forumdisplay.php?f=47)
-   -   Scylla x64/x86 Imports Reconstruction (https://forum.exetools.com/showthread.php?t=13792)

nikre 04-06-2012 08:09

for release 0.6 no source?

JeRRy 04-15-2012 02:21

1 Attachment(s)
Scylla v0.6 Beta 4

Quote:

Originally Posted by Aguila (Post 78219)
Here is a new beta with some bug fixes.

Dump pe section still doesn't work, because I need to do some code refactoring first. Removing crap code

Download
Mediafire
Direct Link

nikre 05-02-2012 11:20

2 Attachment(s)
Scylla v0.6 Final
Quote:

- added dump memory regions
- added dump pe sections -> you can edit some values in the dialog
- improved dump engine with intelligent dumping
- improved pe rebuild engine -> removed yoda's code
- fixed various bugs

LaDidi 05-06-2012 03:36

@KillBoy:
A great idea... moreover with source code.
I will try with next unpack...

nikre 05-06-2012 23:10

1 Attachment(s)
Scylla version 0.7 Beta
Quote:

Main difference between v0.6 is the more powerful disassembler. Can be accessed via Misc -> Disassembler. Try right click -> Follow

ahmadmansoor 05-10-2012 05:28

Bug
 
Hi Killboy :I think there r a bug .
for UPX (new release) - targets ( example uTorrent) .
It can't get the IAT by AutoSearch (after I enter the OEP)
and It can't get the IAT even I enter IAT manually .
reason The text section is Read only -Access =R-
why it is bug ( ImpRec wrok fine and find the IAT -AutoSearch and manually )

Quote:

hxxp://i50.tinypic.com/2dbvvqd.jpg

JeRRy 05-10-2012 15:38

@ahmadmansoor

You have to enter "VA" in the OEP, not RVA.

Quote:

http://i.imgur.com/brSDO.png

ahmadmansoor 05-10-2012 17:25

Lolllllllllll,I didn't note this ,Thanks JeRRy for clarify this ,as u know most old tools use RVA.

JeRRy 05-10-2012 18:38

Quote:

as u know most old tools use RVA.
Indeed, i was confused too when using Scylla first time :p

BiT-H@cK 05-12-2012 02:39

nikre, big thx 4 release, greate tool, long been the replacement for the ImpRec

WilliamElts 07-20-2012 10:46

Scylla 0.7 beta 5
 
1 Attachment(s)
Scylla as DLL/EXE Version has been released.

Thanks to Aguila.

deroko 07-21-2012 19:11

Nice tool :) Much nicer than my imp64 :P

WilliamElts 07-23-2012 19:35

Scylla 0.7 beta 6
 
1 Attachment(s)
Scylla 0.7 beta 6 has been released

WilliamElts 10-02-2012 13:18

1 Attachment(s)
Scylla x64/x86 Imports Reconstruction 0.7 Beta 7

Changelog
Code:

- fixed bug in the dump engine: more details here http://forum.tuts4you.com/topic/30060-bug-when-fixing-dump/
- added "suspend process option", look in options dialog: more details here http://waleedassar.blogspot.com/2012/09/anti-dumping-part-3.html

Download : attachment

xtiaoshi 10-18-2012 20:23

1 Attachment(s)
Scylla_v0.7 beta8
Thanks to Aguila.


All times are GMT +8. The time now is 18:33.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX