-
-
[转帖]Scylla x64/x86 Imports Reconstruction 0.7 Beta 7 by Aguila
-
发表于: 2012-10-2 14:37
-
Scylla x64/x86 Imports Reconstruction 0.7 Beta 7
From:EXETOOLS
Changelog
Scylla_v0.7beta7.rar
From:EXETOOLS
702K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3k6G2M7Y4g2E0i4K6u0W2k6i4S2W2N6r3!0G2L8s2y4Q4x3X3g2U0L8$3#2Q4x3V1k6K6K9r3!0%4M7r3!0K6N6q4)9J5k6i4m8Z5M7q4)9K6c8Y4m8Q4x3@1b7^5x3o6R3J5z5g2)9J5y4Y4m8G2M7%4c8U0L8%4g2F1N6q4)9K6c8o6t1&6
Changelog
- fixed bug in the dump engine: more details here afbK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3k6G2M7Y4g2E0i4K6u0W2N6s2g2@1M7K6c8&6L8%4g2Q4x3X3g2U0L8$3#2Q4x3V1k6@1L8%4m8A6j5#2)9J5c8U0x3H3x3o6j5H3i4K6u0V1j5Y4g2Y4i4K6u0V1N6$3S2W2L8W2)9J5k6r3k6A6P5r3W2F1k6#2)9J5k6r3c8#2L8i4m8Q4x3V1j5`.
- added "suspend process option", look in options dialog: more details here a54K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6S2L8r3g2W2k6r3q4K6M7$3q4J5i4K6u0W2j5X3I4G2k6%4y4H3L8%4c8Q4x3X3g2U0L8$3#2Q4x3V1j5J5x3o6p5J5i4K6u0r3x3o6W2Q4x3V1k6S2L8Y4c8A6i4K6u0V1k6s2g2E0M7r3W2F1k6#2)9J5k6s2m8S2M7Y4c8Q4x3X3b7K6i4K6u0W2K9s2c8E0L8l9`.`.
Scylla_v0.7beta7.rar
|
|
|---|---|
|
|
thank,thank,,,
|
|
|
If you try to FIX DUMP an executable with the IMAGE_NT_HEADERS structure
overlapping the IMAGE_DOS_HEADER i.e. the e_lfanew field has a value less than or equal to 0x38 (and of course, greater than or equal to 0x2), the resulting executable is rejected by the windows PE loader. Scylla_v0.7beta8.rar 
|
|
|
Scylla x64/x86 Imports Reconstruction by Aguila
ImpREC, CHimpREC, Imports Fixer... this are all great tools to rebuild an import table, but they all have some major disadvantages, so I decided to create my own tool for this job. Basically, it's ImpRec on speed If you miss a feature or want to report a bug, head on over to the support forum on Tuts4You. 
|
