Universal Import Fixer (UIF) v1.0 (FINAL) by Magic_h2001

Use this tool for fixing Import Elimination, Directly Imports and Hashed Imports.
so you can use this tool for changing IAT Base Address and Sorting IATs in
New (other) Address.

Tested on:

Armadillo
ASProtect
Enigma
ExeCryptor
eXPressor
PeSpin
RlPack
TheMida
HyperUnpackMe1

and any protector with Import Elimination, Directly Imports and Hashed Imports.


Notes:
=======
This tool is an Import Fixer (not Import Rebuilder ImpRec etc) and Just work
in memory of target process. dont tell me how to use this Tool...if you can
not use this Simple Tool plz DRAG IT TO THE RECYCLE BIN ok?


How to use :
=============
1.fill < Process ID> with target Process ID
2.fill <Code Start> with start address of code that you want to fix it.
  if you fill it with ZERO, UIF will fill it automatically.
3.fill <Code End> with End address of code that you want to fix it.
  if you fill it with ZERO, UIF will fill it automatically.
4.fill <New IAT VA> with address of Empty or unused area
  (in Code section or Data section or any...) that IAT will repair to it.
  if you fill it with ZERO, UIF will fill it automatically.

so you can fill <code Start> , <Code End> with a Dll address area, UIF will
detect it automatically.

for Fast Speed:
===============
  -After Click on <Start> you can Minimize UIF to the taskbar.
  -Just enter Code section start and end.
  -Dont check "Fix Directly Imports" if you dont need to it.

News in Final version (2008.02.23):
====================================
+Algorithm improved for better fixing Directly imports.
+Show modules count and progress in StatusBar.
-GUI bug fixed on large fonts >=120 dpi.


News in Final version (2008.01.15):
====================================
-Some small bugs fixed.
+Algorithm improved for very big IAT size.
+Auto fill improved for detecting dlls correctly.


magic_h2001@yahoo.com
http://magic.shabgard.org

 http://d.download.csdn.net/filedown/aHR0cDovL2RsMi5jc2RuLm5ldC9kb3duNC8yMDA4MDIyMy8yMzE0MDUzODkyMi56aXA=!358895
============================================================================== Universal Import Fixer (UIF) v1.2 (FINAL) by: Magic_h2001 Use this tool for fixing Import Elimination, Directly Imports and Shuffled, Disordered, Scattered Imports (Just for 32 bit processes). So you can use this tool for changing IAT Base Address and Sorting IATs in New (other) Address. Tested on: Armadillo ASProtect Enigma ExeCryptor eXPressor PeSpin RlPack VMProtect TheMida WinLicense and any protector with Import Elimination, Directly Imports and Shuffled, Disordered, Scattered Imports. Notes: ====== This tool is an Import Fixer (not Import Rebuilder ImpRec etc) and Just work in memory of target process. dont tell me how to use this Tool...if you can not use this Simple Tool plz DRAG IT TO THE RECYCLE BIN ok? Always first use UIF then Dump target process. UIF can fix actual APIs, dont use it for fixing Emulated/Redirected APIs to protector's stub.you must use UIF After fixing Magic IAT jump (or use any methods) to convert Emulated/Redirected APIs to Actual APIs. Samples: Armadillo : Import Elimination ASProtect : Directly Imports Enigma : Shuffled, Disordered, Scattered Imports ExeCryptor : Scattered Imports in Protector Stub eXPressor : Directly Imports PeSpin : Directly, Shuffled, Disordered, Scattered Imports RlPack : Shuffled, Disordered, Scattered Imports VMProtect : Directly Imports TheMida : Directly Imports WinLicense : Directly Imports How to use : ============ 1.fill with target Process ID 2.fill with start address of code that you want to fix it. if you fill it with ZERO, UIF will fill it automatically. 3.fill with End address of code that you want to fix it. if you fill it with ZERO, UIF will fill it automatically. 4.fill with address of Empty or unused area (in Code section or Data section or any...) that IAT will repair to it. if you fill it with ZERO, UIF will fill it automati
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值