From Collaborative RCE Tool Library
IAT Restore Tools
| Tool name: | ImpREC |
| ||
|---|---|---|---|---|
| Author: | MackT | |||
| Website: | http://www.tuts4you.com/forum/index.php?showtopic=6410 | |||
| Current version: | Official version 1.6 - Unofficial version with misc. fixes 1.7c | |||
| Last updated: | March 10, 2008 | |||
| Direct D/L link: | Locally archived copy | |||
| License type: | Free | |||
| Description: | The world's most famous IAT rebuilder tool. NOTE: The last official version from MackT is still 1.6. The 1.7a update is a third-party patched version of 1.6, which contains the following patches: - Fixed RestoreLastError API set to SetLastError for WinXP/Vista compatibility (MaRKuS_TH-DJM) - user32.dll is always read from the system, prevents a crash from corrupted PE of user32.dll (MaRKuS_TH-DJM) - Latest version of psapi.dll (6.0.6000.16386) included - Fixed Vista64 crash bug (jstorme) - GUI modified and improved (based upon Fly's modification) - Updated/corrected plugins and deleted dups v. 1.7a added the following fixes: - Misc - Fixed Win2K crash, AllocConsole was replaced with ActivateActCtx (jstorme) Because of this, the local download here contains both the last official version 1.6, and the last unofficial patch, 1.7a. In addition to that, it also contains a big bunch of plugins, and also source code for many of these plugins (in all well-known programming languages, which is good for use as templates for new plugins etc). Changes in Version 1.7b: - Misc - Fixed invalid API bug in user32.dll on Windows 98 (jstorme) - Modified code to improve support for discardable/unreadable sections (jstorme) - Fixed ImageBase problem with DLL's when "Use PE Header from Disk" is checked (jstorme) - Added an "ImpREC Classic" looking version Changes in 1.7c: - Fixed bug introduced in 1.7b when DLL's have discardable sections (jstorme) | |||
| Also listed in: | (Not listed in any other category) | |||
| More details: | Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry) | |||
| Tool name: | ACProtect 2.0 OEP Finder + IAT Repair OllyScript |
| ||
|---|---|---|---|---|
| Author: | ColdFever | |||
| Website: | N/A | |||
| Current version: | ||||
| Last updated: | February 10, 2007 | |||
| Direct D/L link: | Locally archived copy | |||
| License type: | Free | |||
| Description: | ACProtect 2.0 OEP Finder + IAT Repair | |||
| Also listed in: | OEP Finders, OllyScript Scripts | |||
| More details: | Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry) | |||
| Tool name: | Universal Import Fixer |
| ||
|---|---|---|---|---|
| Author: | Magic_h2001 | |||
| Website: | http://magic.shabgard.org | |||
| Current version: | 1.0 (update 2008.03.21) | |||
| Last updated: | March 21, 2008 | |||
| Direct D/L link: | Locally archived copy | |||
| License type: | Free | |||
| Description: | Use this tool for fixing Import Elimination, Directly Imports and Hashed Imports. So you can use this tool for changing IAT Base Address and Sorting IATs. Tested on: Armadillo ASProtect Enigma ExeCryptor eXPressor PeSpin RlPack TheMida HyperUnpackMe and any protector with Import Elimination, Directly Imports and Hashed Imports. A Flash tutorial for unpacking eXPressor with Universal Import Fixer is included in the local download package. Final version update 2008.02.23: ================================ +Algorithm improved for better fixing Directly imports. +Show modules count and progress in StatusBar. -GUI bug fixed on large fonts >=120 dpi. Update 2008.03.21: ================== +Code Optimized for Fast Speed. +Always OnTop Added. +Tested again on many targets: (TheMida,WinLicense,Armadillo,ASProtect,eXPressor,PeSpin,...) -Bug fixed in Fixing Directly Imports in Delphi,BCB,VC(MFC) Applications. | |||
| Also listed in: | (Not listed in any other category) | |||
| More details: | Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry) | |||
Feed containing all updates and additions for this category.
Feed containing all updates and additions for this category, including sub-categories.
