// IAT repair for ACProtect/UltraProtect

// by firelfy

// 2009.03.28

var IATBegin

var IATEnd

var CodeBase

var CodeEnd

Ask "Input IATBegin"

mov IATBegin, $RESULT

Ask "Input IATEnd"

mov IATEnd, $RESULT

gmi IATBegin, MODULEBASE

mov CodeBase, $RESULT

gmi IATBegin, MODULESIZE

mov CodeEnd,  $RESULT

add CodeEnd, CodeBase

FixIAT:

	mov eax, IATBegin

	mov eax, [eax]

	cmp eax, CodeBase

	jb Next

	cmp eax, CodeEnd

	ja Next

	mov ecx, eax

	mov eax, [eax + 1]

	mov ecx, [ecx + 8]

	xor eax, ecx

	mov ecx, IATBegin

	mov [ecx], eax

Next:

	add IATBegin, 4

	cmp IATBegin, IATEnd

	jnz FixIAT



msg "Script finished!"