Hi,

sorry,dont speak russian, however wanted to share with you my latest tool.

I made a wrapper around Scylla, the IAT fixing tool. You can use it as DLL or Lib in your projects.

Check out the source on BitBucket https://bitbucket.org/cypherpunk/scylla_wrapper_dll/overview
or download pre-compiled binaries here Downloads

Its based on latest Scylla source. Basically it mimics all steps you do in the GUI version but also offers more detailed control if you need it.

Features:

- IAT AutoSearch
- reading Imports
- validating Imports
- cutting Imports
- fixing a Dump
- Dumping
- PE rebuilder

There are more API infos and examples on the first link.

Have fun with it !

| Сообщение посчитали полезным: Hellspawn, vden, ajax, daFix, Rio, Quadcon, VodoleY

There's a new version (v003) available.

New features:

addModule //add a module manually, in case auto-search didnt get it, e.g scattered IAT
addImport //add a module manually, in case auto-search didnt get it, e.g scattered IAT
findImportWriteLocation //get thunkVA by API name
findOrdinalImportWriteLocation //get thunkVA by ordinal
findImportNameByWriteLocation //get API name by thunkVA, cast return to char*
findModuleNameByWriteLocation //get DLL name by thunkVA, cast return to char*

No more features planned. Only on request and considered useful. And of course bugfixing!

| Сообщение посчитали полезным: drone, Gideon Vi, darkBLACK

New version available (v004)

Updated from scylla version 0.9.2 to 0.9.4

No new wrapper functions but improved scylla code. See scylla Changelog.
Binaries from Download link in first post

| Сообщение посчитали полезным: deniskore, v00doo, elch

New version v005 with Scylla core 0.9.5

No new wrapper functions but improved scylla code:
- improved process lister
- improved module lister
- improved dump name
- improved IAT parser (should now be able to parse IATs that have non-standard module seperators)

Binaries from Download link in first post

| Сообщение посчитали полезным:

thanks. good job

-----
Наша работа во тьме, Мы делаем, что умеем. Мы отдаем, что имеем, Наша работа во тьме....

| Сообщение посчитали полезным:

New version v006 with Scylla-core 0.9.6b

Changelog of Scylla

- improved iat search
- fixed bug in api resolve engine
- parse APIs always from disk -> slower, useful against pe header modifications : This defaults to TRUE in scylla_wrapper

| Сообщение посчитали полезным: sapog93, SReg, deniskore