Scylla x64/x86 Imports Reconstruction

		Exetools > General > Community Tools
Scylla x64/x86 Imports Reconstruction

#11

09-04-2013, 17:44

Newbie_Cracker Newbie_Cracker is offline

VIP

Join Date: Jan 2005

Posts: 227

Rept. Given: 72

Rept. Rcvd 26 Times in 12 Posts

Thanks Given: 50

Thanks Rcvd at 25 Times in 18 Posts

Quote:

Originally Posted by Carbon

@Newbie_Cracker
I don't get it. You need to find the OEP yourself?

In Scylla, like ImpRec, when you choose a process, the OEP is read from PE header and automatically is shown in OEP text box.

Imprec does the same for DLLs, but Scylla does not.

It seems that it reads the ImageBase and ImageSize from memory (I haven't debugged it to check), but it does not read the OEP from the disk/memory.

__________________
In memory of UnREal RCE...

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Scylla IAT finder and Dumper	Storm Shadow	Source Code	6	05-05-2015 02:22
More Armadillo - import reconstruction	FEARHQ	General Discussion	8	09-19-2005 16:46

All times are GMT +8. The time now is 05:34.